last executing test programs:

1m4.683418791s ago: executing program 1 (id=181):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
r1 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={&(0x7f00000001c0)="7a38c6ab38b39be0", 0x8}, 0x1, 0x2000000}, 0x8000)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000002c0))
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x2)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0, 0x6})

44.833408703s ago: executing program 0 (id=194):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @random="2c00e5be8863"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioperm(0x626, 0x9da9, 0x10)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
userfaultfd(0x80001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xfff3}, {}, {0x5, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x43404099}]}, 0x2c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000600)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f0000000400)=""/45, 0x2d}], 0x3}, 0x43)

42.419674514s ago: executing program 0 (id=198):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2)
read(r1, &(0x7f0000000100)=""/85, 0x55)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0xfc}, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}]}, 0x34}}, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r8, &(0x7f0000001280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x0, 0x0, [{}, {0x8}, {0x0, 0x0, 0xe7}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0xfc}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x4}]}})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r10, {0x1}}, './file0\x00'})
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)

14.998128503s ago: executing program 3 (id=207):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000110000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}}, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000440))
close_range(r6, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}], 0x1, 0x400c404)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r8}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468)

9.003341363s ago: executing program 3 (id=208):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x200005}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x543e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, 0x0, &(0x7f0000000b40)=""/31}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000280)=""/118, 0x76}], 0x4}}], 0x1, 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000d00)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000000c80)=0x80)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012800a0001006361"], 0x48}}, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @ioapic})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @mss, @timestamp, @timestamp, @timestamp, @timestamp], 0x7)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000100))

8.930439713s ago: executing program 1 (id=188):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}})
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
openat$6lowpan_control(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r9, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_reconf_req={{0x19, 0xea, 0x16}, {0x3, 0xca, [0xff, 0x754, 0x0, 0xff, 0x2, 0x1, 0xa9, 0x10, 0x30]}}}}, 0x23)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

8.374853827s ago: executing program 0 (id=200):
socket$kcm(0x10, 0x2, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2680, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket(0x11, 0xa, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@setneightbl={0x20, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xb, 0x8, 'vxcan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24)

8.356994834s ago: executing program 1 (id=210):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{}, {}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, 0xddf8ffdb})
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000040))
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040))
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf}, {0x100000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10, 0x0, 0x0, 0xfd}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x4a8200, 0x155)
socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x0, 0xffffffffffffff01}, 0x0)
syz_emit_vhci(0x0, 0xd)

7.319858958s ago: executing program 0 (id=212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x0)
unshare(0x46060480)
shmat(0x0, &(0x7f0000233000/0x2000)=nil, 0x3000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r2, 0x0, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r3, 0xa, 0x13)
write$binfmt_elf64(r2, 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = shmget$private(0x0, 0x3000, 0x10, &(0x7f00000eb000/0x3000)=nil)
shmat(0x0, &(0x7f000003d000/0x1000)=nil, 0x4000)
mlockall(0x1)
shmat(r4, &(0x7f00003b7000/0x1000)=nil, 0x6000)
mlockall(0x7)
shmget$private(0x0, 0x2000, 0x400, &(0x7f00003dc000/0x2000)=nil)
shmctl$SHM_LOCK(0x0, 0xb)
mlockall(0x4)
mlockall(0x5)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioprio_set$pid(0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)

7.24084246s ago: executing program 1 (id=213):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0xc540, 0x1a0)
write$binfmt_script(r1, 0x0, 0xffffff3c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r2, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r2, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000800000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x20080080}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c00)="8bf690c0a0e32fa28450c7702b09b65ab76e47f0b4f7524a9d21b5f98533845287b769dcbd804449016dc710a1f39e4ab10ba9c7a277be1de1ab03a884cb1ac61a43c19978f17c467e29c26f55e7c82e19668a678444e6029bb42a1b2558c1dcdd384a9e7e03e2b9023a184971b9da4b411f966f944ade7cc82e51e548afb844cbdda3fb72cc3d448ef5a6116f8ecd07a14a2b70e9084c8779ed195613e9d23a89691318187dda39b832c3e62fbcf0f88d7bf8523744fe258165ae5d514079ba4647bfbe527c4ecd82461936a45efc72fed6eb00b59a5fc9b4", 0xd9}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x84}}, {{&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000ec0)="c7ef0c1bdad87f42b30ed6f31b01f9bf400870b3242d97e432ba9311fb316bd8363c24bd99817814ac51c4157d4ddfb9c1379af16b222871035e192aa8f88fd90bdfd8d14dc2824b5e51", 0x4a}, {&(0x7f0000000f40)="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", 0xfd}, {&(0x7f00000010c0)="42e8d42a64efcc98181223fd1f0b7f77bfa38d26944b4d4bde694988265965d0a0273b4a574a58e75db2f8b4c6b52e65e14792af01b3c45e137f10397206", 0x3e}, {&(0x7f0000001180)="b56c5d3aae012254badec3dd0b2763794bd763347022c848e790c74bef2a3ffbe09b6c14bb19608d83243f015c8e1bf114e0c4a608f3c62b677cc6ae16ab787d5167b035dceb2d164b8c612b0defce50e2e6d7cd432f0fa12756c7d2", 0x5c}], 0x4, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001300)="ae842613229c11f78c21b83c61f3f523ccbef41032b2851052ee766cb1cf08fb951883f1234970f467ad61cc4354cfa37f57ed51b8248a3aedb7b7bf890a703c8d63f716be753bd442c9acb11033865fedf9f6702ce0c2fbad4c2c6087c4ab807345be1cd51cc5c17df6c90f6a92cb651987bd1c4567b2c96ddacfad7107e01db426c6", 0x83}, {&(0x7f00000013c0)}, {&(0x7f0000001440)="dd3a4c0e45b8d19b0610ef5d3416df428a20178319da5b585c1fab57e5f603daec6ee1913f035c60db5617f177054e01e8ff29686bcbb3e495148bfc24cbdb5b1055c5ed190ebcca6a9c7a080762f612abdb3697e4ecf4c4df71b927446feb26101104dc78fd7a81fb303a8c4fef2aba4fcfd1ac0790480cdbb7b94c9ccf2090148b1b5abcacb952c99697682b194606338a1280797235a1ab9f6367ccc6754255dc8f7acc3e6bc604a3001784cd4031d71d44eef1ad7ac1d2cc4db77a95f583b2fd3f8ef4ac8f1941c02c46577a9a53fac8a4ca3ab239d5b7e1dbe2d5f3266fe26e0fc8ad6de345ad39", 0xea}, {&(0x7f0000001540)="2b993e56a752fad9c6e1ac8c145b6f4b8f60228e8a037a9665b2bece03ba3cca14c994a04a9787bd46db2656e4d3cd685b7a588d62834bf33ba2a43fede7f6471036ffba87daf64c5863eae40095184e06213f15c8c4d0715f91de4b12da3912cf4359ad7705fac9043cd315f7fda515f63047f591b204da14fb96eb36388b0b173f2fa7f50d9ac656af50d89989d70e698e496f69dbe830b5146e1ffd54cb4428f1d9cc767e107d886bad63fc491d797d07bc72e5591b7b0e8ab993cee8d45c3374d60e99315e1d4c955818bdc78b517285f7f06027b52b7e1172d79142898cbd5fa234c330c5eee2a5", 0xea}, {&(0x7f0000001640)}, {0x0}], 0x6, &(0x7f0000001e80)=ANY=[], 0x118, 0x40000}}], 0x4, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
lseek(r4, 0xae7d, 0x0)
r5 = shmget(0x1, 0x1000, 0x1, &(0x7f0000017000/0x1000)=nil)
read$FUSE(r4, &(0x7f0000006240)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
fstat(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
shmctl$IPC_SET(r5, 0x1, &(0x7f0000000600)={{0x0, r6, r7, 0x0, 0x0, 0x1a, 0x7}, 0x80000000, 0x10000, 0x3, 0xfffffffffffffffc, 0x0, r3, 0x1})
r8 = getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x1000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r10=>0x0}, &(0x7f0000000380)=0xc)
mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{}, {@blksize={'blksize', 0x3d, 0xa00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@appraise_type}, {@fowner_eq={'fowner', 0x3d, r8}}, {@euid_lt={'euid<', r9}}, {@hash}, {@fowner_lt={'fowner<', r10}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@fsmagic}, {@smackfshat={'smackfshat', 0x3d, '+:]:'}}]}})
write$binfmt_script(r0, &(0x7f0000000500), 0x4)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r11 = userfaultfd(0x0)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r11, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x0, 0x2})
tkill(0xffffffffffffffff, 0x2a)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000003c0)=""/25)

6.684782104s ago: executing program 2 (id=214):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000240)='attr/fscreate\x00')
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = getpid()
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="d282cff8b51e00a31046cdf629d87f4304000000d2386458165b3aeb946bf5f39a8e64139161183ad0658bccad17a739c22d5090a5718977c7c321b597f5639bb4afb26fb8f0a5f18c7fc99caa9865ad2f271cf6a16e167d1b6a25348ec0b4b8f6f0558c00"/116], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfed2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='qrtr_ns_message\x00', r4}, 0xfffffffffffffebb)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r6)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
read$FUSE(r5, &(0x7f00000042c0)={0x2020}, 0x2020)
socket$rds(0x15, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f00000001c0)=[{&(0x7f00000004c0)="580000001500add417283b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000c73ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000a349a901088bf86de20d02669c03dfa12b82bbcec505a5c667504b69b4874be1af6637bca72767cdfc9a79f541cc0d14b9fd7247908abc32a81e792304293ca21404de9734e2a5f9140237f651658c0c4bd76207e85b07920042a47d1f621f9d0722263c352bc0ffb6b4d28b82160d6caa79cbc133cd5d03000000749d93a65218d21443cde628", 0xdf}], 0x1)
ioctl$CDROMPLAYMSF(r2, 0x5303, 0x0)
getpgrp(r0)
bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x9ed, @remote, 0x5}}, 0x24)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r9, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1)
bind$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0xfffffe39)
socket(0x28, 0x5, 0x0)

6.623013541s ago: executing program 1 (id=215):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000027d1287cff00"})
open(0x0, 0x10b942, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup(r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
dup3(r0, r2, 0x0)
r3 = dup3(r1, r0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
setpgid(r4, r5)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0)
syz_open_procfs(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3001})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_create1(0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0)
pwritev(r6, &(0x7f0000000480)=[{&(0x7f0000002180)="aabf", 0x2}], 0x1, 0x0, 0x80000)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000000), 0x10)

6.451493492s ago: executing program 3 (id=216):
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=<r1=>0x0)
syz_clone3(&(0x7f00000005c0)={0x8000100, &(0x7f0000000080)=<r2=>0xffffffffffffffff, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0, {0x1c}, &(0x7f0000000400)=""/96, 0x60, &(0x7f0000000480)=""/238, &(0x7f0000000380)=[r1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r8, 0x0, &(0x7f00000006c0))
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0)
kcmp(r5, r4, 0x5, r9, r0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x17d4}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x40046207, 0x0)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xa0, 0x0, &(0x7f00000008c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000a80)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x8, 0x0, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/215, 0xd7, 0x2, 0xd}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@flat=@handle={0x73682a85, 0x1, 0x3}, @fda={0x66646185, 0x7, 0x2, 0x26}, @fda={0x66646185, 0xffffffffffffffff, 0x2, 0x5}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
dup3(r12, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000180)=[{r12}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)

6.36943253s ago: executing program 2 (id=217):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000080000080000000c0002800400050004000380180001801400020073797a5f74756e000000000000000000"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
time(0xfffffffffffffffc)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5)
keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x208000, 0x800}, 0x20)
time(&(0x7f0000000080))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r13 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r13, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0)

5.69890773s ago: executing program 0 (id=218):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket(0x0, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
read$snddsp(r2, &(0x7f0000000740)=""/56, 0x38)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4)
syz_socket_connect_nvme_tcp()
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)={0x1e4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @local, 0xffff7fff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0xffffff70}}}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe33}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "31a0c23dd16ff56c513597840f88b24bebe2e146adc84177e2c7"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x11, 0x3, "889eca68a6b1da8f6c91605318"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x25}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "52eefd7b0d8d3b1d44b862ffea94f27a7f4f06707a7ed15adc5c25ce8c1d660b77c8"}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x24004801}, 0x4000000)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x0, 0x0}], 0x1})
preadv(r7, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002680)=""/50, 0x32}, {&(0x7f0000003b00)=""/85, 0x55}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003900)}, {&(0x7f00000037c0)=""/174, 0xae}], 0x6, 0x836, 0x55a)

5.383677135s ago: executing program 3 (id=219):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x891a, &(0x7f0000000040)={'bond_slave_1\x00', @remote})
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x1000000, 0x3, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
socket(0x10, 0x3, 0x0)
sync()
sync()
sync()
sync()
sync()
openat$tun(0xffffff9c, &(0x7f00000000c0), 0x240000, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4096)
keyctl$unlink(0x9, 0x0, r2)
sync()
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]})
umount2(&(0x7f0000000080)='./file0\x00', 0x0)
sync()
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
writev(r3, &(0x7f00000002c0), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[])

5.274880539s ago: executing program 2 (id=220):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, ',&\\#@*:{'}}, {@euid_lt}, {@fsname={'fsname', 0x3d, 'cgroup.controllers\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x37}}, {@fsname={'fsname', 0x3d, '#! '}}]})
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000240)={0x5, "cf1c8170a0fd2c6f8de0135a53ee129ea282432be933a1948b6481c8180e38c2", 0x4, 0x1000, 0x7, 0x7, 0x8, 0x2, 0x3, 0x1})
rmdir(&(0x7f00000001c0)='./file0\x00')
syz_emit_ethernet(0x72, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = dup(r3)
bind$bt_l2cap(r4, &(0x7f0000000080), 0xe)
listen(r4, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)

5.01968396s ago: executing program 3 (id=221):
socket$kcm(0x10, 0x2, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2680, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket(0x11, 0xa, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@setneightbl={0x20, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xb, 0x8, 'vxcan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24)

4.951343797s ago: executing program 2 (id=222):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x14, &(0x7f0000000040), 0x8)
sendto$inet(r5, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18)

4.141410461s ago: executing program 1 (id=223):
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=<r1=>0x0)
syz_clone3(&(0x7f00000005c0)={0x8000100, &(0x7f0000000080), &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, {0x1c}, &(0x7f0000000400)=""/96, 0x60, &(0x7f0000000480)=""/238, &(0x7f0000000380)=[r1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14)
r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0)
kcmp(0x0, r3, 0x5, r7, r0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000000a000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f0"], 0x17d4}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x40046207, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup3(r10, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000180)=[{r10}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b0001000000000000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f58e655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66ca9be82fd3f8cd1"], 0x114}], 0x1}, 0x0)

3.981068988s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x6, {0x5, 0x2, 0x5}, {0x5, 0xb323, 0xc, 0x40}, {0x20, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'batadv0\x00'})
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0x9, 0xa}, {0xfff2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x1d, 0x3, 0x1, 0x8}, {0x2, 0x6, 0x40, 0xfffffff7}]}}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x200c1}, 0x1010)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc601000127a0a000600093582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1}, 0x0)
mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x1018000, &(0x7f0000000240)='b\xb1Fs\t\xb5\xda\xec,\xdb\xe0\xb0\xe0\xe8*\xd4\x00\x00\x00\x00\x00\x00\x00\x00F*\x0f\xdd\xe3\rb\xf9,\x196\xb2\x92\x9d\x94\xd4\x96\xbc9))\xef\xdeW\x86\xf4\xd8(\x13\x81')
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
open_tree(r3, &(0x7f0000000300)='./file0\x00', 0x89000)
socket$caif_seqpacket(0x25, 0x5, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
r5 = io_uring_setup(0x74cb, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807000000010000", 0x17)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

21.144478ms ago: executing program 3 (id=225):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x0, 0xc9, 0x0, 0x1}]})
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x80100, 0x0, 0x39}, 0x18)
fcntl$setownex(r0, 0xf, 0x0)
r1 = open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x0)
socket$inet6(0xa, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000000ead}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x80049370, &(0x7f0000000040))
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
preadv(r4, &(0x7f0000000b00), 0x0, 0x80000001, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000630000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x35, 0x0, 0x0)
ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
dup(0xffffffffffffffff)
mkdir(0x0, 0x0)

330.597µs ago: executing program 2 (id=226):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x410a, &(0x7f0000000000)={0x0, 0x4bdc, 0x8, 0x2, 0xef}, &(0x7f0000000080), &(0x7f00000000c0))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000004340)=""/102397, 0x18ffd}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x2, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000002340)={{r2}, "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"})
fcntl$getown(r2, 0x9)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0)
ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r6, 0xffffffffffffffff, 0x24, 0x0, @val=@netkit={@void, @value}}, 0x40)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000040)=0x633, 0x2)
recvfrom(r7, 0x0, 0x0, 0x8020, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b0009f580000efffeffe809000000ff0000f03ac7100003ffffff", 0x41}, {&(0x7f0000000000)="abd9", 0x2}], 0x2)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0, r0, r0, r3, r0, r0], 0x6)
sendmsg$nl_route(r0, 0x0, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r9)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, 0x0, 0x4000)
ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, 0x0)

0s ago: executing program 0 (id=233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x5}, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e80)={'vcan0\x00'})
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x1af)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000540))
getsockname$ax25(r3, &(0x7f0000000280)={{}, [@null, @netrom, @remote, @rose, @remote, @null, @default, @null]}, &(0x7f0000000040)=0x48)
r5 = socket$inet6(0xa, 0x6, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r5, r6, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000180)=""/3, 0x3})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="2e2cda5794fcf982ea3775df1803d9c9474c845074dca450d341aacb737680b74b84cca0e1c06d9300a97ab2eb502263134addc807c7b4fdc15789e099607303b4ffcff385d51a748e0de116778866b4d221fe162c08ba9827ddeade5f47c605644cf9723f6603c0e01a00ca3d7c8887760759e5c594b2", @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="040024000a001800030303030303000008002600cc150000"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000070000000000000000002000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000090800014000000000080002"], 0xdc}}, 0x4010)

kernel console output (not intermixed with test programs):

: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.674119][ T6301] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  171.677148][   T83] bridge_slave_1: left allmulticast mode
[  171.678670][   T83] bridge_slave_1: left promiscuous mode
[  171.680183][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.686327][   T83] bridge_slave_0: left allmulticast mode
[  171.687843][   T83] bridge_slave_0: left promiscuous mode
[  171.689418][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.689458][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  171.933693][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  172.084089][   T25] usb 5-1: Using ep0 maxpacket: 16
[  172.090153][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.090529][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.100886][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  172.102203][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.105961][   T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  172.111092][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.117682][   T25] usb 5-1: config 0 descriptor??
[  172.119262][   T83] bond0 (unregistering): Released all slaves
[  172.185598][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.270416][ T6248] 8021q: adding VLAN 0 to HW filter on device team0
[  172.282831][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.297079][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.299469][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.319450][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.322166][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.325904][   T39] audit: type=1400 audit(1728011068.576:389): avc:  denied  { connect } for  pid=6304 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  172.382080][ T6176] 8021q: adding VLAN 0 to HW filter on device team0
[  172.629626][   T83] hsr_slave_0: left promiscuous mode
[  172.647841][   T83] hsr_slave_1: left promiscuous mode
[  172.651569][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.655598][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.659567][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.661575][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.697687][   T83] veth1_macvtap: left promiscuous mode
[  172.699795][   T83] veth0_macvtap: left promiscuous mode
[  172.701880][   T83] veth1_vlan: left promiscuous mode
[  172.703976][   T83] veth0_vlan: left promiscuous mode
[  174.105770][   T83] team0 (unregistering): Port device team_slave_1 removed
[  174.237746][   T83] team0 (unregistering): Port device team_slave_0 removed
[  174.704825][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  174.706977][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  174.723801][   T25] usb 5-1: USB disconnect, device number 2
[  174.841575][   T39] audit: type=1400 audit(1728011071.086:390): avc:  denied  { getopt } for  pid=6311 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  174.847918][ T6313] ALSA: seq fatal error: cannot create timer (-22)
[  175.429780][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.431955][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.506723][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.509239][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.763777][   T39] audit: type=1326 audit(1728011072.006:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.0.144" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b7957dff9 code=0x0
[  175.965594][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.086373][ T6176] veth0_vlan: entered promiscuous mode
[  176.108471][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.110894][   T66] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.116266][   T66] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.120657][   T66] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.124521][   T66] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.127884][ T6176] veth1_vlan: entered promiscuous mode
[  176.128255][   T66] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  176.132152][   T66] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.191434][   T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.211811][ T6176] veth0_macvtap: entered promiscuous mode
[  176.241713][ T6176] veth1_macvtap: entered promiscuous mode
[  177.248265][   T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.304498][ T6248] veth0_vlan: entered promiscuous mode
[  177.409012][   T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.427671][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.431568][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.454675][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.458302][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.461679][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.466235][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.472263][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.477512][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.481030][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.486331][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.489929][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.494847][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.500660][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.510231][ T6248] veth1_vlan: entered promiscuous mode
[  177.584224][   T39] audit: type=1400 audit(1728011073.826:392): avc:  denied  { mount } for  pid=6331 comm="syz.0.147" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  177.703656][   T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.739162][   T39] audit: type=1400 audit(1728011073.976:393): avc:  denied  { execute } for  pid=6331 comm="syz.0.147" path="/dev/audio1" dev="devtmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  177.761508][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.767568][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.771277][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.776638][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.780464][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.785545][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.790659][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.795277][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.799588][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.802449][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.805566][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.809264][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.816316][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.864175][ T6176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.867052][ T6176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.869748][ T6176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.871999][ T6176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.901351][ T6328] chnl_net:caif_netlink_parms(): no params data found
[  178.153130][ T5347] Bluetooth: hci6: command tx timeout
[  178.205118][ T6248] veth0_macvtap: entered promiscuous mode
[  178.230774][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.241097][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.245536][ T6328] bridge_slave_0: entered allmulticast mode
[  178.248754][ T6328] bridge_slave_0: entered promiscuous mode
[  178.272160][ T6248] veth1_macvtap: entered promiscuous mode
[  178.298216][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.302131][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.307333][ T6328] bridge_slave_1: entered allmulticast mode
[  178.310275][ T6328] bridge_slave_1: entered promiscuous mode
[  178.337197][   T83] bridge_slave_1: left allmulticast mode
[  178.338771][   T83] bridge_slave_1: left promiscuous mode
[  178.340283][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.347540][   T83] bridge_slave_0: left allmulticast mode
[  178.349227][   T83] bridge_slave_0: left promiscuous mode
[  178.350892][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.788116][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.798040][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.798958][ T6342] overlayfs: missing 'workdir'
[  178.809978][   T83] bond0 (unregistering): Released all slaves
[  178.834302][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.837645][ T5593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.839678][ T5593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.860986][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.875227][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.878652][   T39] audit: type=1400 audit(1728011075.116:394): avc:  denied  { create } for  pid=6340 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  178.890140][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.895443][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.898361][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.901716][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.905386][   T39] audit: type=1400 audit(1728011075.126:395): avc:  denied  { nlmsg_write } for  pid=6340 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  178.912024][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.915408][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.919424][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.922116][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.925016][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.928253][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.931018][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.934808][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.939109][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.000676][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.054371][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.057164][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.059924][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.065473][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.068938][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.072338][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.076115][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.079950][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.083923][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.087372][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.090156][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.092805][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.096642][ T6248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.100316][ T6248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.105137][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.197576][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'.
[  179.202794][ T6345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'.
[  179.272358][   T39] audit: type=1400 audit(1728011075.516:396): avc:  denied  { name_bind } for  pid=6343 comm="syz.0.149" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  179.665725][ T5593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.668742][ T5593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.677394][ T6248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.683726][ T6248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.686877][ T6248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.689931][ T6248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.731712][ T6328] team0: Port device team_slave_0 added
[  179.853620][ T6328] team0: Port device team_slave_1 added
[  180.243466][ T5347] Bluetooth: hci6: command tx timeout
[  180.259993][ T6349] tipc: Started in network mode
[  180.264446][ T6349] tipc: Node identity 101, cluster identity 4711
[  180.272011][ T6349] tipc: Node number set to 257
[  180.278053][ T6352] netlink: 'syz.3.132': attribute type 1 has an invalid length.
[  180.290985][ T6352] netlink: 224 bytes leftover after parsing attributes in process `syz.3.132'.
[  180.381817][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.385389][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.392604][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.408628][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.410617][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.418635][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.580450][   T83] hsr_slave_0: left promiscuous mode
[  180.584939][   T83] hsr_slave_1: left promiscuous mode
[  180.590167][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.592949][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.602955][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.606145][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.642775][   T83] veth1_macvtap: left promiscuous mode
[  180.645122][   T83] veth0_macvtap: left promiscuous mode
[  180.646596][   T83] veth1_vlan: left promiscuous mode
[  180.647984][   T83] veth0_vlan: left promiscuous mode
[  180.790855][   T39] audit: type=1400 audit(1728011077.036:397): avc:  denied  { bind } for  pid=6353 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  180.799175][   T39] audit: type=1400 audit(1728011077.036:398): avc:  denied  { name_bind } for  pid=6353 comm="syz.0.150" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  180.813066][   T39] audit: type=1400 audit(1728011077.036:399): avc:  denied  { node_bind } for  pid=6353 comm="syz.0.150" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  181.859703][ T6366] 9pnet_fd: Insufficient options for proto=fd
[  182.328506][ T5347] Bluetooth: hci6: command tx timeout
[  182.888440][   T83] team0 (unregistering): Port device team_slave_1 removed
[  183.152906][   T83] team0 (unregistering): Port device team_slave_0 removed
[  183.318023][   T39] audit: type=1326 audit(1728011079.566:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.353914][   T39] audit: type=1326 audit(1728011079.566:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.361867][   T39] audit: type=1326 audit(1728011079.566:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.377333][   T39] audit: type=1326 audit(1728011079.566:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.394722][   T39] audit: type=1326 audit(1728011079.566:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.402736][   T39] audit: type=1326 audit(1728011079.576:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.410236][   T39] audit: type=1326 audit(1728011079.576:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.425035][   T39] audit: type=1326 audit(1728011079.576:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.443531][   T39] audit: type=1326 audit(1728011079.586:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  183.452047][   T39] audit: type=1326 audit(1728011079.586:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.3.153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4b7dff9 code=0x7ffc0000
[  184.256359][ T6328] hsr_slave_0: entered promiscuous mode
[  184.265412][ T6328] hsr_slave_1: entered promiscuous mode
[  184.269419][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.271563][ T6328] Cannot create hsr debugfs directory
[  184.393846][ T5347] Bluetooth: hci6: command tx timeout
[  184.424131][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.435137][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.452653][ T6377] bridge_slave_1: left allmulticast mode
[  184.455295][ T6377] bridge_slave_1: left promiscuous mode
[  184.457085][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.490091][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.496579][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.706392][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.709107][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.768220][ T6392] syz.2.140: attempt to access beyond end of device
[  184.768220][ T6392] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  184.775582][ T6392] SQUASHFS error: Failed to read block 0x0: -5
[  184.777345][ T6392] unable to read squashfs_super_block
[  184.885754][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[  184.899540][ T5347] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  184.903794][ T5347] CPU: 2 UID: 0 PID: 5347 Comm: kworker/u33:5 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0
[  184.907535][ T5347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  184.911222][ T5347] Workqueue: hci1 hci_rx_work
[  184.912892][ T5347] Call Trace:
[  184.914074][ T5347]  <TASK>
[  184.915107][ T5347]  dump_stack_lvl+0x16c/0x1f0
[  184.916748][ T5347]  sysfs_warn_dup+0x7f/0xa0
[  184.918363][ T5347]  sysfs_create_dir_ns+0x24d/0x2b0
[  184.920156][ T5347]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  184.921994][ T5347]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  184.923830][ T5347]  ? kobject_add_internal+0x12d/0x990
[  184.925707][ T5347]  ? do_raw_spin_unlock+0x172/0x230
[  184.927554][ T5347]  kobject_add_internal+0x2c8/0x990
[  184.929346][ T5347]  kobject_add+0x16f/0x240
[  184.930920][ T5347]  ? __pfx_kobject_add+0x10/0x10
[  184.932230][ T5347]  ? class_to_subsys+0x3e/0x160
[  184.933521][ T5347]  ? do_raw_spin_unlock+0x172/0x230
[  184.934953][ T5347]  ? kobject_put+0xab/0x5a0
[  184.936154][ T5347]  device_add+0x289/0x1a70
[  184.937371][ T5347]  ? __pfx_dev_set_name+0x10/0x10
[  184.938729][ T5347]  ? __pfx_device_add+0x10/0x10
[  184.940012][ T5347]  ? mgmt_send_event_skb+0x2f2/0x460
[  184.941396][ T5347]  hci_conn_add_sysfs+0x17e/0x230
[  184.942752][ T5347]  le_conn_complete_evt+0x1078/0x1d80
[  184.944157][ T5347]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  184.945649][ T5347]  ? trace_contention_end+0xea/0x140
[  184.947045][ T5347]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  184.948594][ T5347]  ? skb_pull_data+0x166/0x210
[  184.949850][ T5347]  hci_le_meta_evt+0x2e2/0x5d0
[  184.951121][ T5347]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  184.952786][ T5347]  hci_event_packet+0x666/0x1180
[  184.954094][ T5347]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  184.955478][ T5347]  ? __pfx_hci_event_packet+0x10/0x10
[  184.956878][ T5347]  ? mark_held_locks+0x9f/0xe0
[  184.958134][ T5347]  ? kcov_remote_start+0x3cf/0x6e0
[  184.959499][ T5347]  ? lockdep_hardirqs_on+0x7c/0x110
[  184.960734][ T5347]  hci_rx_work+0x2c6/0x16c0
[  184.961922][ T5347]  ? lock_acquire+0x2f/0xb0
[  184.963136][ T5347]  ? process_one_work+0x921/0x1ba0
[  184.964494][ T5347]  process_one_work+0x9c5/0x1ba0
[  184.965806][ T5347]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  184.967289][ T5347]  ? __pfx_process_one_work+0x10/0x10
[  184.968720][ T5347]  ? assign_work+0x1a0/0x250
[  184.970263][ T5347]  worker_thread+0x6c8/0xf00
[  184.971797][ T5347]  ? __pfx_worker_thread+0x10/0x10
[  184.973139][ T5347]  kthread+0x2c1/0x3a0
[  184.974232][ T5347]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.975623][ T5347]  ? __pfx_kthread+0x10/0x10
[  184.976843][ T5347]  ret_from_fork+0x45/0x80
[  184.978023][ T5347]  ? __pfx_kthread+0x10/0x10
[  184.979552][ T5347]  ret_from_fork_asm+0x1a/0x30
[  184.981255][ T5347]  </TASK>
[  184.983300][ T5347] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  184.986985][ T5347] Bluetooth: hci1: failed to register connection device
[  185.288970][   T83] bridge_slave_1: left allmulticast mode
[  185.290809][   T83] bridge_slave_1: left promiscuous mode
[  185.292912][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.298242][   T83] bridge_slave_0: left allmulticast mode
[  185.300248][   T83] bridge_slave_0: left promiscuous mode
[  185.302281][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.799569][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.808148][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.825619][   T83] bond0 (unregistering): Released all slaves
[  186.081575][ T6328] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.090879][ T6328] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.107250][ T6328] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.120659][ T6328] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.298612][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.390592][ T6328] 8021q: adding VLAN 0 to HW filter on device team0
[  186.400791][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.403224][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.447066][   T83] hsr_slave_0: left promiscuous mode
[  186.449885][   T83] hsr_slave_1: left promiscuous mode
[  186.452855][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.457699][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.460844][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.464440][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.508376][   T83] veth1_macvtap: left promiscuous mode
[  186.510484][   T83] veth0_macvtap: left promiscuous mode
[  186.512405][   T83] veth1_vlan: left promiscuous mode
[  186.520661][   T83] veth0_vlan: left promiscuous mode
[  187.033699][   T66] Bluetooth: hci1: command tx timeout
[  188.416588][   T39] kauditd_printk_skb: 12 callbacks suppressed
[  188.416600][   T39] audit: type=1400 audit(1728011084.666:422): avc:  denied  { read } for  pid=6426 comm="syz.0.160" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  188.439645][   T39] audit: type=1400 audit(1728011084.666:423): avc:  denied  { open } for  pid=6426 comm="syz.0.160" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  188.453669][   T39] audit: type=1400 audit(1728011084.676:424): avc:  denied  { ioctl } for  pid=6426 comm="syz.0.160" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  189.033141][   T83] team0 (unregistering): Port device team_slave_1 removed
[  189.159318][   T83] team0 (unregistering): Port device team_slave_0 removed
[  189.905127][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.907736][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.125962][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.154542][ T6328] veth0_vlan: entered promiscuous mode
[  190.172862][ T6328] veth1_vlan: entered promiscuous mode
[  190.207550][ T6328] veth0_macvtap: entered promiscuous mode
[  190.214442][ T6328] veth1_macvtap: entered promiscuous mode
[  190.224575][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.228218][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.231507][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.235462][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.238918][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.242431][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.246762][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.250415][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.259588][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.263099][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.266338][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.269849][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.274609][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.280947][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.285668][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.288984][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.292502][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.296098][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.299546][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.302869][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.306678][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.309947][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.313708][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.317041][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.320466][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.324627][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.329607][ T6328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.332537][ T6328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.336180][ T6328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.338900][ T6328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.371913][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.379283][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.392567][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.396062][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.407031][   T39] audit: type=1400 audit(1728011086.656:425): avc:  denied  { write } for  pid=4814 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.418873][   T39] audit: type=1400 audit(1728011086.656:426): avc:  denied  { remove_name } for  pid=4814 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.432268][   T39] audit: type=1400 audit(1728011086.656:427): avc:  denied  { add_name } for  pid=4814 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.555891][   T39] audit: type=1400 audit(1728011087.806:428): avc:  denied  { setopt } for  pid=6438 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  191.576490][   T39] audit: type=1400 audit(1728011087.826:429): avc:  denied  { map } for  pid=6438 comm="syz.1.146" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  192.209111][ T6444] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  192.211580][ T6444] overlayfs: failed to set xattr on upper
[  192.216439][ T6444] overlayfs: ...falling back to redirect_dir=nofollow.
[  192.220765][ T6444] overlayfs: ...falling back to index=off.
[  192.223896][ T6444] overlayfs: ...falling back to uuid=null.
[  192.270423][ T6445] tipc: Started in network mode
[  192.272469][ T6445] tipc: Node identity 101, cluster identity 4711
[  192.280296][ T6445] tipc: Node number set to 257
[  192.360318][ T6447] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[  192.362472][ T6447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.162'.
[  194.313950][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  195.188980][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.395046][ T5347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.399233][ T5347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.403595][ T5347] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.407893][ T5347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.411910][ T5347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  195.415120][ T5347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.481629][ T5350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.486222][ T5350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.489213][ T5350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.492973][ T5350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.502321][ T5350] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  195.506669][ T5350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  195.564551][ T5350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.571796][ T5350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.576638][ T5350] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.579504][ T5350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.582018][ T5350] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  195.584397][ T5350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.628972][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.755197][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.921802][ T6471] chnl_net:caif_netlink_parms(): no params data found
[  195.981368][ T6472] chnl_net:caif_netlink_parms(): no params data found
[  196.007628][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.056902][ T6469] chnl_net:caif_netlink_parms(): no params data found
[  196.147390][ T5338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.151251][ T5338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.154562][ T5338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.157828][ T5338] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.159866][ T5338] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  196.161891][ T5338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.222630][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.225164][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.227100][ T6471] bridge_slave_0: entered allmulticast mode
[  196.229126][ T6471] bridge_slave_0: entered promiscuous mode
[  196.231798][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.235557][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.238064][ T6471] bridge_slave_1: entered allmulticast mode
[  196.240871][ T6471] bridge_slave_1: entered promiscuous mode
[  196.420840][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.486545][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.488455][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.490394][ T6472] bridge_slave_0: entered allmulticast mode
[  196.492513][ T6472] bridge_slave_0: entered promiscuous mode
[  196.496838][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.498814][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.500864][ T6472] bridge_slave_1: entered allmulticast mode
[  196.503590][ T6472] bridge_slave_1: entered promiscuous mode
[  196.521519][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.568114][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.570670][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.573708][ T6469] bridge_slave_0: entered allmulticast mode
[  196.576573][ T6469] bridge_slave_0: entered promiscuous mode
[  196.609683][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.665783][ T1100] bridge_slave_1: left allmulticast mode
[  196.667765][ T1100] bridge_slave_1: left promiscuous mode
[  196.669776][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.674733][ T1100] bridge_slave_0: left allmulticast mode
[  196.676684][ T1100] bridge_slave_0: left promiscuous mode
[  196.678682][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.028262][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.039347][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.047025][ T1100] bond0 (unregistering): Released all slaves
[  197.056153][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.058658][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.061212][ T6469] bridge_slave_1: entered allmulticast mode
[  197.065313][ T6469] bridge_slave_1: entered promiscuous mode
[  197.069763][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.076736][ T6471] team0: Port device team_slave_0 added
[  197.080898][ T6471] team0: Port device team_slave_1 added
[  197.210650][ T1100] tipc: Left network mode
[  197.215168][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.252910][ T6472] team0: Port device team_slave_0 added
[  197.275866][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.278377][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.288246][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.300104][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.342572][ T6472] team0: Port device team_slave_1 added
[  197.379581][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.381990][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.391693][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.480498][ T6469] team0: Port device team_slave_0 added
[  197.489116][ T6469] team0: Port device team_slave_1 added
[  197.507914][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.510362][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.521719][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.566155][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.568583][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.577895][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.593358][ T5350] Bluetooth: hci0: command tx timeout
[  197.595912][ T5350] Bluetooth: hci4: command tx timeout
[  197.627104][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.629521][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.639479][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.647812][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.650297][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.659644][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.673685][ T5338] Bluetooth: hci7: command tx timeout
[  197.699581][ T6471] hsr_slave_0: entered promiscuous mode
[  197.702397][ T6471] hsr_slave_1: entered promiscuous mode
[  197.704931][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.706929][ T6471] Cannot create hsr debugfs directory
[  197.790020][ T6469] hsr_slave_0: entered promiscuous mode
[  197.792882][ T6469] hsr_slave_1: entered promiscuous mode
[  197.803983][ T6469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.806587][ T6469] Cannot create hsr debugfs directory
[  197.850476][ T6472] hsr_slave_0: entered promiscuous mode
[  197.853338][ T6472] hsr_slave_1: entered promiscuous mode
[  197.863825][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.866523][ T6472] Cannot create hsr debugfs directory
[  197.953821][ T6488] chnl_net:caif_netlink_parms(): no params data found
[  197.980398][ T1100] hsr_slave_0: left promiscuous mode
[  197.987992][ T1100] hsr_slave_1: left promiscuous mode
[  197.990520][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.997488][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.000686][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.008089][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.051301][ T1100] veth1_macvtap: left promiscuous mode
[  198.052811][ T1100] veth0_macvtap: left promiscuous mode
[  198.056841][ T1100] veth1_vlan: left promiscuous mode
[  198.058458][ T1100] veth0_vlan: left promiscuous mode
[  198.239151][ T5338] Bluetooth: hci6: command tx timeout
[  198.919221][ T1100] team0 (unregistering): Port device team_slave_1 removed
[  199.022523][ T1100] team0 (unregistering): Port device team_slave_0 removed
[  199.674073][ T5338] Bluetooth: hci4: command tx timeout
[  199.674090][ T5350] Bluetooth: hci0: command tx timeout
[  199.753210][ T5350] Bluetooth: hci7: command tx timeout
[  200.313393][ T5350] Bluetooth: hci6: command tx timeout
[  201.753190][ T5350] Bluetooth: hci0: command tx timeout
[  201.753969][ T5338] Bluetooth: hci4: command tx timeout
[  201.833555][ T5338] Bluetooth: hci7: command tx timeout
[  202.403876][ T5338] Bluetooth: hci6: command tx timeout
[  202.518721][ T6469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.573809][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.576254][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.578460][ T6488] bridge_slave_0: entered allmulticast mode
[  202.580652][ T6488] bridge_slave_0: entered promiscuous mode
[  202.618624][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.620857][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.630662][ T6488] bridge_slave_1: entered allmulticast mode
[  202.633894][ T6488] bridge_slave_1: entered promiscuous mode
[  202.668651][ T6469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.735881][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.749574][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.776796][ T6488] team0: Port device team_slave_0 added
[  202.781184][ T6488] team0: Port device team_slave_1 added
[  202.841138][ T6469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.845782][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.847658][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.860288][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.870978][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.874135][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.881767][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.947363][ T6469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.966210][ T6488] hsr_slave_0: entered promiscuous mode
[  202.968246][ T6488] hsr_slave_1: entered promiscuous mode
[  203.032378][ T1100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.189804][ T1100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.311226][ T6469] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  203.315076][ T6469] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  203.337060][ T1100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.342785][ T6469] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  203.354440][ T6469] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  203.460110][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.480611][ T6469] 8021q: adding VLAN 0 to HW filter on device team0
[  203.544383][ T1100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.628094][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.630729][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.636293][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.638773][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.663542][   T39] audit: type=1400 audit(1728011099.906:430): avc:  denied  { setrlimit } for  pid=6544 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  203.833708][ T5338] Bluetooth: hci4: command tx timeout
[  203.844820][ T5338] Bluetooth: hci0: command tx timeout
[  203.900169][ T1100] bridge_slave_1: left allmulticast mode
[  203.902140][ T1100] bridge_slave_1: left promiscuous mode
[  203.907528][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.911642][ T1100] bridge_slave_0: left allmulticast mode
[  203.914846][ T5338] Bluetooth: hci7: command tx timeout
[  203.914899][ T1100] bridge_slave_0: left promiscuous mode
[  203.918757][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.332209][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.336852][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.341021][ T1100] bond0 (unregistering): Released all slaves
[  204.405970][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.474757][ T5338] Bluetooth: hci6: command tx timeout
[  204.518894][ T6472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.536009][ T6471] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  204.540549][ T6471] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  204.549015][ T6469] veth0_vlan: entered promiscuous mode
[  204.599899][ T6471] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  204.613982][ T6471] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  204.618739][ T6469] veth1_vlan: entered promiscuous mode
[  204.655498][ T6472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.752627][ T6469] veth0_macvtap: entered promiscuous mode
[  204.760494][ T6469] veth1_macvtap: entered promiscuous mode
[  204.809245][ T6472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.841714][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.876359][ T1100] hsr_slave_0: left promiscuous mode
[  204.886914][ T1100] hsr_slave_1: left promiscuous mode
[  204.889667][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.892424][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.896720][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.901536][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.970029][ T1100] veth1_macvtap: left promiscuous mode
[  204.971869][ T1100] veth0_macvtap: left promiscuous mode
[  204.975098][ T1100] veth1_vlan: left promiscuous mode
[  204.976825][ T1100] veth0_vlan: left promiscuous mode
[  206.043275][ T1100] team0 (unregistering): Port device team_slave_1 removed
[  206.134945][ T1100] team0 (unregistering): Port device team_slave_0 removed
[  206.827435][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.830190][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.832851][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.836653][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.839228][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.841892][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.845148][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.847839][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.850347][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.853327][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.857428][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.882045][ T6472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.907974][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.911578][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.917792][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.920515][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.925668][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.928512][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.931079][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.938654][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.941219][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.946732][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.950621][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.986025][ T6469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.996103][ T6469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.999129][ T6469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.002072][ T6469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.024209][ T6471] 8021q: adding VLAN 0 to HW filter on device team0
[  207.058902][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.061476][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.100513][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.103055][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.228056][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.230638][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.238399][ T6472] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  207.243434][ T6472] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  207.266244][ T6472] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  207.277967][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.279620][ T6472] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  207.280120][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.356397][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.368343][ T6472] 8021q: adding VLAN 0 to HW filter on device team0
[  207.380375][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.383083][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.438628][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.441282][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.481405][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.530873][ T6471] veth0_vlan: entered promiscuous mode
[  207.551594][ T6471] veth1_vlan: entered promiscuous mode
[  207.620668][ T6471] veth0_macvtap: entered promiscuous mode
[  207.627209][ T6471] veth1_macvtap: entered promiscuous mode
[  207.660658][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.668585][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.672406][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.680232][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.688783][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.698147][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.701787][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.707112][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.710622][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.714755][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.718273][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.721948][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.727505][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.739817][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.750271][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.759007][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.762757][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.780207][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.802220][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.806109][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.809695][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.829905][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.835419][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.838840][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.851867][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.857036][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.871397][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.876266][ T6471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.879438][ T6471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.882559][ T6471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.887933][ T6471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.016425][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.021437][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.032899][ T6488] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.045944][ T6488] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.062252][ T6472] veth0_vlan: entered promiscuous mode
[  208.068301][ T6488] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.079578][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.081834][ T6472] veth1_vlan: entered promiscuous mode
[  208.082512][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.096293][ T6488] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  208.142818][ T6472] veth0_macvtap: entered promiscuous mode
[  208.161599][ T6472] veth1_macvtap: entered promiscuous mode
[  208.199021][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.202885][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.206257][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.209779][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.213851][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.216676][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.219382][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.222078][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.231049][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.236407][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.243106][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.246880][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.256166][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.260664][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.268010][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.278038][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.281706][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.286251][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.289791][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.294528][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.298283][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.301639][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.307050][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.310789][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.315907][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.319352][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.323950][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.327438][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.331075][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.336722][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.342977][ T6472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.347498][ T6472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.350429][ T6472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.354241][ T6472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.421798][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.446337][ T6488] 8021q: adding VLAN 0 to HW filter on device team0
[  208.516820][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.519345][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.529158][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.531871][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.540078][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.542555][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.575682][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.581627][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.734041][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.778232][ T6488] veth0_vlan: entered promiscuous mode
[  208.786876][ T6488] veth1_vlan: entered promiscuous mode
[  208.811789][ T6488] veth0_macvtap: entered promiscuous mode
[  208.821636][ T6488] veth1_macvtap: entered promiscuous mode
[  208.834148][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.837735][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.841096][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.847104][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.850341][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.854202][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.857486][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.861681][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.865731][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.869241][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.872592][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.879460][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.882814][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.886695][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.890034][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.893836][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.898633][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.910743][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.914778][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.917948][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.921865][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.926214][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.929820][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.933796][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.937370][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.939958][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.943500][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.947009][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.950446][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.957357][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.960223][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.962970][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.966206][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.971040][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.976309][ T6488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.978738][ T6488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.981013][ T6488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.983965][ T6488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.067165][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.072724][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.114470][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.118932][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.459977][ T6630] input: syz0 as /devices/virtual/input/input9
[  209.466792][ T6630] input: failed to attach handler leds to device input9, error: -6
[  213.502235][   T39] audit: type=1326 audit(1728011109.746:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.3.179" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21ec97dff9 code=0x0
[  214.366330][ T6640] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  214.369198][ T6640] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  214.371653][ T6640] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  214.374745][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  214.422813][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  214.434481][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  214.440694][ T6640] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  214.443199][ T6640] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  214.446207][ T6640] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  214.450169][ T6640] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  214.452288][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  214.456512][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  214.460626][ T6640] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  214.462727][ T6640] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  214.468332][ T6640] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  214.472935][ T6640] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  214.476142][ T6640] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  214.480649][ T6640] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  214.484313][ T6640] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  214.486480][ T6640] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  214.489277][ T6640] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  214.830420][ T6658] =======================================================
[  214.830420][ T6658] WARNING: The mand mount option has been deprecated and
[  214.830420][ T6658]          and is ignored by this kernel. Remove the mand
[  214.830420][ T6658]          option from the mount to silence this warning.
[  214.830420][ T6658] =======================================================
[  216.043185][ T6666] capability: warning: `syz.3.182' uses deprecated v2 capabilities in a way that may be insecure
[  216.393679][ T5338] Bluetooth: hci5: command 0x0c1a tx timeout
[  216.393802][ T5347] Bluetooth: hci3: command 0x0c1a tx timeout
[  216.402483][ T5350] Bluetooth: hci1: command 0x0c1a tx timeout
[  216.473255][ T5338] Bluetooth: hci0: command 0x0c1a tx timeout
[  216.477510][ T5347] Bluetooth: hci2: command 0x0c1a tx timeout
[  216.483740][ T5350] Bluetooth: hci4: command 0x0c1a tx timeout
[  216.553230][ T5338] Bluetooth: hci7: command 0x0c1a tx timeout
[  216.557182][ T5350] Bluetooth: hci6: command 0x0405 tx timeout
[  217.291906][ T6673] pim6reg: entered allmulticast mode
[  217.300072][   T39] audit: type=1400 audit(1728011113.546:432): avc:  denied  { write } for  pid=6671 comm="syz.3.184" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  217.367762][   T39] audit: type=1400 audit(1728011113.616:433): avc:  denied  { create } for  pid=6671 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  217.493766][ T6676] macvlan1: entered allmulticast mode
[  217.496253][ T6676] veth1_vlan: entered allmulticast mode
[  218.473164][ T5350] Bluetooth: hci1: command 0x0c1a tx timeout
[  218.553393][ T5350] Bluetooth: hci4: command 0x0c1a tx timeout
[  218.555680][ T5350] Bluetooth: hci0: command 0x0c1a tx timeout
[  218.557755][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout
[  218.643466][ T5347] Bluetooth: hci7: command 0x0c1a tx timeout
[  218.645613][ T5350] Bluetooth: hci6: command 0x0405 tx timeout
[  219.209310][ T5347] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  219.214929][ T5347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  219.218443][ T5347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  219.222281][ T5347] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  219.225853][ T5347] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  219.228473][ T5347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  220.474663][ T2789] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  220.571568][ T5350] Bluetooth: hci1: command 0x0c1a tx timeout
[  220.633479][ T5350] Bluetooth: hci0: command 0x0c1a tx timeout
[  220.633680][ T5347] Bluetooth: hci2: command 0x0c1a tx timeout
[  220.635757][ T5350] Bluetooth: hci4: command 0x0c1a tx timeout
[  220.641395][ T2789] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  220.648008][ T2789] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  220.651956][ T2789] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  220.655370][ T2789] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.670760][ T6685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  220.681477][ T2789] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  220.713265][ T5338] Bluetooth: hci6: command 0x0405 tx timeout
[  220.891384][   T39] audit: type=1400 audit(1728011117.136:434): avc:  denied  { remount } for  pid=6688 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  220.898488][ T6692] option changes via remount are deprecated (pid=6688 comm=syz.0.187)
[  220.929391][   T39] audit: type=1400 audit(1728011117.156:435): avc:  denied  { setopt } for  pid=6684 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  220.936520][   T39] audit: type=1400 audit(1728011117.176:436): avc:  denied  { write } for  pid=6684 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  221.283329][ T5338] Bluetooth: hci7: command tx timeout
[  222.633184][ T5338] Bluetooth: hci1: command 0x0c1a tx timeout
[  222.803485][ T5338] Bluetooth: hci6: command 0x0405 tx timeout
[  223.363579][ T5338] Bluetooth: hci7: command tx timeout
[  225.434201][ T5338] Bluetooth: hci7: command tx timeout
[  225.528242][ T5350] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  225.534467][ T5350] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  225.537262][ T5350] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  225.539629][ T5350] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  225.544988][ T5350] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  225.547176][ T5350] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  227.513202][ T5338] Bluetooth: hci7: command tx timeout
[  227.593170][ T5338] Bluetooth: hci8: command tx timeout
[  227.910834][ T2789] usb 8-1: USB disconnect, device number 2
[  228.443812][   T39] audit: type=1400 audit(1728011124.686:437): avc:  denied  { unmount } for  pid=6471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  229.480315][ T5338] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  229.683319][ T5338] Bluetooth: hci8: command tx timeout
[  231.345404][ T6715] netlink: 'syz.0.190': attribute type 10 has an invalid length.
[  231.359212][ T6715] batman_adv: batadv0: Adding interface: team0
[  231.362284][ T6715] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.371120][ T6715] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  231.375871][ T6716] netlink: 'syz.0.190': attribute type 10 has an invalid length.
[  231.378574][ T6716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.190'.
[  231.381704][ T6716] team0: entered promiscuous mode
[  231.383971][ T6716] team_slave_0: entered promiscuous mode
[  231.385862][ T6716] team_slave_1: entered promiscuous mode
[  231.388449][ T6716] 8021q: adding VLAN 0 to HW filter on device team0
[  231.390527][ T6716] batman_adv: batadv0: Interface activated: team0
[  231.394208][ T6716] batman_adv: batadv0: Interface deactivated: team0
[  231.397939][ T6716] batman_adv: batadv0: Removing interface: team0
[  231.400894][ T6716] bridge0: port 3(team0) entered blocking state
[  231.402614][ T6716] bridge0: port 3(team0) entered disabled state
[  231.405821][ T6716] team0: entered allmulticast mode
[  231.407461][ T6716] team_slave_0: entered allmulticast mode
[  231.409491][ T6716] team_slave_1: entered allmulticast mode
[  231.412135][ T6716] bridge0: port 3(team0) entered blocking state
[  231.414026][ T6716] bridge0: port 3(team0) entered forwarding state
[  231.605351][   T39] audit: type=1400 audit(1728011127.856:438): avc:  denied  { read } for  pid=6723 comm="syz.0.192" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  231.615504][ T6678] chnl_net:caif_netlink_parms(): no params data found
[  231.622835][   T39] audit: type=1400 audit(1728011127.866:439): avc:  denied  { open } for  pid=6723 comm="syz.0.192" path="/dev/ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  231.642874][   T39] audit: type=1400 audit(1728011127.886:440): avc:  denied  { ioctl } for  pid=6723 comm="syz.0.192" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  231.754690][ T5338] Bluetooth: hci8: command tx timeout
[  231.776332][   T39] audit: type=1400 audit(1728011128.026:441): avc:  denied  { write } for  pid=6723 comm="syz.0.192" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  232.094805][   T39] audit: type=1400 audit(1728011128.246:442): avc:  denied  { append } for  pid=6723 comm="syz.0.192" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  232.456176][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.655518][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.673577][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.691238][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.693971][ T6678] bridge_slave_0: entered allmulticast mode
[  232.697037][ T6678] bridge_slave_0: entered promiscuous mode
[  232.729766][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.748100][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.750268][ T6678] bridge_slave_1: entered allmulticast mode
[  232.753720][ T6678] bridge_slave_1: entered promiscuous mode
[  232.829531][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.838861][ T6698] chnl_net:caif_netlink_parms(): no params data found
[  232.843456][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.861516][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.928498][ T6678] team0: Port device team_slave_0 added
[  232.936194][ T6678] team0: Port device team_slave_1 added
[  232.987395][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.990114][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.992721][ T6698] bridge_slave_0: entered allmulticast mode
[  233.002044][ T6698] bridge_slave_0: entered promiscuous mode
[  233.035197][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.058290][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.060753][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.072367][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.088409][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.091055][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.094726][ T6698] bridge_slave_1: entered allmulticast mode
[  233.097796][ T6698] bridge_slave_1: entered promiscuous mode
[  233.100230][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.102483][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.111644][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.170594][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.200486][ T6678] hsr_slave_0: entered promiscuous mode
[  233.203684][ T6678] hsr_slave_1: entered promiscuous mode
[  233.207007][ T6678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.209609][ T6678] Cannot create hsr debugfs directory
[  233.217282][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.297630][ T6698] team0: Port device team_slave_0 added
[  233.302518][ T6698] team0: Port device team_slave_1 added
[  233.833709][ T5338] Bluetooth: hci8: command tx timeout
[  234.312303][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.323594][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.340669][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.364100][   T12] bridge_slave_1: left allmulticast mode
[  234.366110][   T12] bridge_slave_1: left promiscuous mode
[  234.368142][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.374746][   T12] bridge_slave_0: left allmulticast mode
[  234.376261][   T12] bridge_slave_0: left promiscuous mode
[  234.377822][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.287895][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.309506][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.330855][   T12] bond0 (unregistering): Released all slaves
[  236.348909][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.350971][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.360287][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.538064][ T6698] hsr_slave_0: entered promiscuous mode
[  236.547267][   T39] audit: type=1400 audit(1728011132.796:443): avc:  denied  { setopt } for  pid=6758 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  236.559642][ T6698] hsr_slave_1: entered promiscuous mode
[  236.576659][ T6698] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.584417][ T6698] Cannot create hsr debugfs directory
[  236.586064][ T6764] binder: BINDER_SET_CONTEXT_MGR already set
[  236.588041][ T6764] binder: 6758:6764 ioctl 4018620d 20000040 returned -16
[  236.689323][ T6764] syz.3.197 (6764): drop_caches: 2
[  236.956560][   T39] audit: type=1400 audit(1728011133.206:444): avc:  denied  { getopt } for  pid=6769 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  237.008560][   T12] hsr_slave_0: left promiscuous mode
[  237.010971][   T12] hsr_slave_1: left promiscuous mode
[  237.012952][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.015252][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.017715][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.019670][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.049625][   T12] veth1_macvtap: left promiscuous mode
[  237.051165][   T12] veth0_macvtap: left promiscuous mode
[  237.052668][   T12] veth1_vlan: left promiscuous mode
[  237.055258][   T12] veth0_vlan: left promiscuous mode
[  246.852785][   T12] team0 (unregistering): Port device team_slave_1 removed
[  246.984306][   T12] team0 (unregistering): Port device team_slave_0 removed
[  247.115096][ T5350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  247.118594][ T5350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  247.122010][ T5350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  247.129851][ T5350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  247.134500][ T5350] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  247.138294][ T5350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.194767][ T5338] Bluetooth: hci6: command tx timeout
[  250.370147][ T6781] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.201'.
[  250.376263][ T6781] msdos: Unknown parameter 'b±Fs	µÚì'
[  250.887705][ T6698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.899500][ T6778] chnl_net:caif_netlink_parms(): no params data found
[  250.948187][ T6678] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  251.237235][ T6678] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  251.273896][ T5338] Bluetooth: hci6: command tx timeout
[  251.355216][ T6678] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  251.430922][ T6698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.468516][ T6678] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  251.520690][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.522643][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.524893][ T6778] bridge_slave_0: entered allmulticast mode
[  251.526955][ T6778] bridge_slave_0: entered promiscuous mode
[  251.557643][ T6698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.581268][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.583296][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.585245][ T6778] bridge_slave_1: entered allmulticast mode
[  251.587306][ T6778] bridge_slave_1: entered promiscuous mode
[  251.640255][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.656314][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.659905][ T6805] netlink: 'syz.3.202': attribute type 10 has an invalid length.
[  251.703271][ T6805] batman_adv: batadv0: Adding interface: team0
[  251.712272][ T6805] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.718959][ T6805] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  251.744845][ T6698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.799417][ T6811] netlink: 'syz.3.202': attribute type 10 has an invalid length.
[  251.801474][ T6811] netlink: 2 bytes leftover after parsing attributes in process `syz.3.202'.
[  251.805350][ T6811] team0: entered promiscuous mode
[  251.806828][ T6811] team_slave_0: entered promiscuous mode
[  251.808479][ T6811] team_slave_1: entered promiscuous mode
[  251.823710][ T6811] 8021q: adding VLAN 0 to HW filter on device team0
[  251.826105][ T6811] batman_adv: batadv0: Interface activated: team0
[  251.827853][ T6811] batman_adv: batadv0: Interface deactivated: team0
[  251.829605][ T6811] batman_adv: batadv0: Removing interface: team0
[  251.831866][ T6811] bridge0: port 3(team0) entered blocking state
[  251.840676][ T6811] bridge0: port 3(team0) entered disabled state
[  251.843616][ T6811] team0: entered allmulticast mode
[  251.844997][ T6811] team_slave_0: entered allmulticast mode
[  251.851808][ T6811] team_slave_1: entered allmulticast mode
[  251.863504][ T6811] bridge0: port 3(team0) entered blocking state
[  251.866199][ T6811] bridge0: port 3(team0) entered forwarding state
[  251.876955][ T6778] team0: Port device team_slave_0 added
[  251.886975][ T6678] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.895910][ T6778] team0: Port device team_slave_1 added
[  251.918763][ T5338] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  251.969373][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.972415][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.981331][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.048903][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.063479][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.065877][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.076493][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.111800][ T6678] 8021q: adding VLAN 0 to HW filter on device team0
[  252.152956][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.168267][ T6698] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  252.173774][ T6698] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  252.178267][ T6698] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  252.182857][ T6698] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  252.192338][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.194879][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.269294][ T6778] hsr_slave_0: entered promiscuous mode
[  252.272072][ T6778] hsr_slave_1: entered promiscuous mode
[  252.279218][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.281669][ T6778] Cannot create hsr debugfs directory
[  252.313919][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.316349][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.340727][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.401851][ T6678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  252.413940][ T6678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.353322][ T5338] Bluetooth: hci6: command tx timeout
[  253.421990][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.433462][ T5338] Bluetooth: hci6: command tx timeout
[  255.756757][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  256.009101][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.028839][ T6698] 8021q: adding VLAN 0 to HW filter on device team0
[  256.045246][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.047739][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.059810][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.061762][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.078267][ T6678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.085689][   T12] team0: left allmulticast mode
[  256.087394][   T12] team_slave_0: left allmulticast mode
[  256.089274][   T12] team_slave_1: left allmulticast mode
[  256.091215][   T12] bridge0: port 3(team0) entered disabled state
[  256.107892][   T12] bridge_slave_1: left allmulticast mode
[  256.109867][   T12] bridge_slave_1: left promiscuous mode
[  256.111840][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.126499][   T12] bridge_slave_0: left allmulticast mode
[  256.128432][   T12] bridge_slave_0: left promiscuous mode
[  256.130394][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.135732][   T12] bridge_slave_1: left allmulticast mode
[  256.137645][   T12] bridge_slave_1: left promiscuous mode
[  256.139618][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.143846][   T12] bridge_slave_0: left allmulticast mode
[  256.145760][   T12] bridge_slave_0: left promiscuous mode
[  256.147273][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.152599][   T12] bridge_slave_1: left allmulticast mode
[  256.156034][   T12] bridge_slave_1: left promiscuous mode
[  256.157786][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.162743][   T12] bridge_slave_0: left allmulticast mode
[  256.164539][   T12] bridge_slave_0: left promiscuous mode
[  256.166596][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.171059][   T12] bridge_slave_1: left allmulticast mode
[  256.179357][   T12] bridge_slave_1: left promiscuous mode
[  256.181366][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.189815][   T12] bridge_slave_0: left allmulticast mode
[  256.191829][   T12] bridge_slave_0: left promiscuous mode
[  256.202498][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.151334][ T6829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6829 comm=syz.3.203
[  261.868966][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.873782][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.877496][   T12] bond0 (unregistering): Released all slaves
[  261.954397][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.958894][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.963474][   T12] bond0 (unregistering): Released all slaves
[  262.039595][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.044179][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.047953][   T12] bond0 (unregistering): Released all slaves
[  262.135120][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.140183][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.145390][   T12] bond0 (unregistering): Released all slaves
[  262.161226][ T6698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.164494][ T6698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.535883][   T12] tipc: Left network mode
[  262.670652][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.748074][ T6678] veth0_vlan: entered promiscuous mode
[  262.798267][ T6678] veth1_vlan: entered promiscuous mode
[  262.843083][ T6698] veth0_vlan: entered promiscuous mode
[  262.882769][ T6678] veth0_macvtap: entered promiscuous mode
[  262.909079][ T6678] veth1_macvtap: entered promiscuous mode
[  262.923960][ T6698] veth1_vlan: entered promiscuous mode
[  263.080535][ T6778] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  263.085398][ T6778] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  263.089504][ T6778] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  263.095639][ T6698] veth0_macvtap: entered promiscuous mode
[  263.099958][ T6698] veth1_macvtap: entered promiscuous mode
[  263.132921][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.136138][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.138702][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.141441][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.158206][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.162200][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.165711][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.168574][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.171295][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.174349][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.179057][   T39] audit: type=1400 audit(1728011159.426:445): avc:  denied  { bind } for  pid=6847 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  263.183352][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.187525][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.190357][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.194219][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.197637][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.201260][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.207723][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.211232][ T6778] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  263.233708][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.236440][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.239154][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.241965][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.246950][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.250695][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.254384][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.256046][   T39] audit: type=1400 audit(1728011159.506:446): avc:  denied  { getopt } for  pid=6847 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  263.257396][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.265211][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.267948][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.270667][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.274225][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.276874][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.279591][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.282153][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.285260][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.290714][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.319527][ T6678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.324664][ T6678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.330999][ T6678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.334704][ T6678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.388471][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.391469][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.397539][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.400338][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.402947][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.406985][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.409613][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.412380][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.415428][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.419428][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.422876][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.427141][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.430591][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.433783][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.437025][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.440231][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.443807][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.447396][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.452085][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.476305][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.479943][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.483980][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.487547][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.490869][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.495164][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.498673][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.502340][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.506157][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.509703][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.513558][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.517365][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.521207][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.524998][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.528327][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.531875][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.535494][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.539081][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.544367][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.607673][ T6698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.610057][ T6698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.612365][ T6698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.616246][ T6698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.738417][   T12] hsr_slave_0: left promiscuous mode
[  263.740925][   T12] hsr_slave_1: left promiscuous mode
[  263.749168][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.751215][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.755101][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.757654][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.772124][   T12] hsr_slave_0: left promiscuous mode
[  263.774394][   T12] hsr_slave_1: left promiscuous mode
[  263.777107][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.779239][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.782343][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.785522][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.792956][   T12] hsr_slave_0: left promiscuous mode
[  263.796345][   T12] hsr_slave_1: left promiscuous mode
[  263.798806][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.800907][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.803483][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.805476][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.811532][   T12] hsr_slave_0: left promiscuous mode
[  263.815029][   T12] hsr_slave_1: left promiscuous mode
[  263.816840][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.819504][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.822731][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.825256][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.971117][   T12] veth1_macvtap: left promiscuous mode
[  263.972662][   T12] veth0_macvtap: left promiscuous mode
[  263.974241][   T12] veth1_vlan: left promiscuous mode
[  263.975681][   T12] veth0_vlan: left promiscuous mode
[  263.978139][   T12] veth1_macvtap: left promiscuous mode
[  263.980209][   T12] veth0_macvtap: left promiscuous mode
[  263.982276][   T12] veth1_vlan: left promiscuous mode
[  263.984556][   T12] veth0_vlan: left promiscuous mode
[  263.994906][   T12] veth1_macvtap: left promiscuous mode
[  263.996439][   T12] veth0_macvtap: left promiscuous mode
[  263.997933][   T12] veth1_vlan: left promiscuous mode
[  263.999338][   T12] veth0_vlan: left promiscuous mode
[  264.004733][   T12] veth1_macvtap: left promiscuous mode
[  264.006304][   T12] veth0_macvtap: left promiscuous mode
[  264.007845][   T12] veth1_vlan: left promiscuous mode
[  264.009561][   T12] veth0_vlan: left promiscuous mode
[  264.237200][   T39] audit: type=1400 audit(1728011160.486:447): avc:  denied  { write } for  pid=6856 comm="syz.3.206" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  264.250579][   T39] audit: type=1400 audit(1728011160.486:448): avc:  denied  { ioctl } for  pid=6856 comm="syz.3.206" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  264.258420][   T39] audit: type=1400 audit(1728011160.486:449): avc:  denied  { read write } for  pid=6856 comm="syz.3.206" name="ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  264.264126][   T39] audit: type=1400 audit(1728011160.486:450): avc:  denied  { open } for  pid=6856 comm="syz.3.206" path="/dev/ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  264.369062][ T6861] ALSA: seq fatal error: cannot create timer (-22)
[  265.010696][   T12] team_slave_1 (unregistering): left promiscuous mode
[  265.018555][   T12] team0 (unregistering): Port device team_slave_1 removed
[  265.131243][   T12] team_slave_0 (unregistering): left promiscuous mode
[  265.135346][   T12] team0 (unregistering): Port device team_slave_0 removed
[  266.632868][   T12] team0 (unregistering): Port device team_slave_1 removed
[  266.745594][   T12] team0 (unregistering): Port device team_slave_0 removed
[  268.110047][   T12] team0 (unregistering): Port device team_slave_1 removed
[  268.214383][   T12] team0 (unregistering): Port device team_slave_0 removed
[  269.496360][   T12] team0 (unregistering): Port device team_slave_1 removed
[  269.600974][   T12] team0 (unregistering): Port device team_slave_0 removed
[  270.170158][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.174263][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.177691][ T6861] netlink: 'syz.3.207': attribute type 19 has an invalid length.
[  270.214669][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.220682][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.232030][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.237763][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.247433][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.262427][ T6778] 8021q: adding VLAN 0 to HW filter on device team0
[  270.285085][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.287969][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.299769][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.302154][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.306499][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.309159][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.523931][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.561258][ T6778] veth0_vlan: entered promiscuous mode
[  270.570860][ T6778] veth1_vlan: entered promiscuous mode
[  270.597613][ T6778] veth0_macvtap: entered promiscuous mode
[  270.602390][ T6778] veth1_macvtap: entered promiscuous mode
[  270.615288][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.619528][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.622948][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.627495][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.630526][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.635877][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.639634][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.644038][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.647337][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.650806][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.654761][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.659799][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.663719][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.667465][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.670393][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.673442][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.676254][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.678949][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.681893][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.685311][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.688055][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.690645][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.693884][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.697396][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.701027][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.706928][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.725277][ T6778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.728679][ T6778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.731992][ T6778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.735708][ T6778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.794587][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.797611][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.818899][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.821821][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.959251][   T39] audit: type=1400 audit(270.841:451): avc:  denied  { append } for  pid=6885 comm="syz.0.200" name="rtc0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  271.070972][ T6890] input: syz1 as /devices/virtual/input/input11
[  271.138288][ T6890] netlink: 'syz.0.200': attribute type 8 has an invalid length.
[  271.422194][ T6892] kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  271.458936][ T6892] kvm: requested 39390 ns i8254 timer period limited to 200000 ns
[  271.466290][ T6892] kvm: requested 95542 ns i8254 timer period limited to 200000 ns
[  271.469463][ T6892] kvm: requested 82971 ns i8254 timer period limited to 200000 ns
[  271.475253][ T6892] kvm: requested 96381 ns i8254 timer period limited to 200000 ns
[  271.478545][ T6892] kvm: requested 90514 ns i8254 timer period limited to 200000 ns
[  271.482548][ T6892] kvm: requested 39390 ns i8254 timer period limited to 200000 ns
[  271.488534][ T6892] kvm: requested 84647 ns i8254 timer period limited to 200000 ns
[  271.491767][ T6892] kvm: requested 39390 ns i8254 timer period limited to 200000 ns
[  271.498117][ T6892] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  271.571374][ T6897] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.211'.
[  271.575670][ T6897] msdos: Unknown parameter 'b±Fs	µÚì'
[  271.632574][   T12] bridge_slave_0: left allmulticast mode
[  271.635299][   T12] bridge_slave_0: left promiscuous mode
[  271.637324][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.660175][   T12] bridge_slave_1: left allmulticast mode
[  271.662339][   T12] bridge_slave_1: left promiscuous mode
[  271.666563][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.670539][   T12] bridge_slave_0: left allmulticast mode
[  271.672480][   T12] bridge_slave_0: left promiscuous mode
[  271.683836][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.122714][   T39] audit: type=1800 audit(272.011:452): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.213" name="bus" dev="9p" ino=35922829 res=0 errno=0
[  272.128715][   T39] audit: type=1400 audit(272.021:453): avc:  denied  { bind } for  pid=6903 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  272.255174][   T39] audit: type=1400 audit(272.151:454): avc:  denied  { mounton } for  pid=6903 comm="syz.1.213" path="/2/file0/bus" dev="9p" ino=35922829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  272.255263][ T6906] fuseblk: Unknown parameter 'appraise_type'
[  272.663134][ T6910] overlayfs: missing 'workdir'
[  272.680086][   T39] audit: type=1400 audit(272.571:455): avc:  denied  { create } for  pid=6908 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  272.703458][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.709676][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.718714][   T12] bond0 (unregistering): Released all slaves
[  272.896580][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.910545][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.916907][   T12] bond0 (unregistering): Released all slaves
[  273.043472][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.048126][   T39] audit: type=1400 audit(272.941:456): avc:  denied  { write } for  pid=6915 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  273.056746][   T39] audit: type=1400 audit(272.941:457): avc:  denied  { setopt } for  pid=6915 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  273.056994][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.066903][   T39] audit: type=1400 audit(272.941:458): avc:  denied  { ioctl } for  pid=6915 comm="syz.2.217" path="socket:[29861]" dev="sockfs" ino=29861 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  273.068495][   T12] bond0 (unregistering): Released all slaves
[  273.102769][ T6917] tipc: Started in network mode
[  273.106718][ T6917] tipc: Node identity 101, cluster identity 4711
[  273.108946][ T6917] tipc: Node number set to 257
[  273.116505][ T6921] netlink: 'syz.3.216': attribute type 1 has an invalid length.
[  273.119240][ T6921] netlink: 224 bytes leftover after parsing attributes in process `syz.3.216'.
[  273.122651][ T6916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'.
[  273.133286][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  273.201006][   T12] tipc: Left network mode
[  273.264742][ T6918] infiniband syz2: set active
[  273.266646][ T6918] infiniband syz2: added team_slave_1
[  273.303305][   T25] usb 6-1: Using ep0 maxpacket: 16
[  273.308981][   T25] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  273.312803][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.315985][   T25] usb 6-1: Product: syz
[  273.317389][   T25] usb 6-1: Manufacturer: syz
[  273.319018][   T25] usb 6-1: SerialNumber: syz
[  273.335311][   T25] usb 6-1: config 0 descriptor??
[  273.341915][   T25] as10x_usb: device has been detected
[  273.343640][ T6918] RDS/IB: syz2: added
[  273.345280][ T6918] smc: adding ib device syz2 with port count 1
[  273.347174][ T6918] smc:    ib device syz2 port 1 has pnetid 
[  273.347711][   T25] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  273.389587][   T25] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  273.419425][   T25] as10x_usb: error during firmware upload part1
[  273.422274][   T25] Registered device Sky IT Digital Key (green led)
[  273.549573][ T6914] random: crng reseeded on system resumption
[  273.552423][   T39] audit: type=1400 audit(273.441:459): avc:  denied  { write } for  pid=6913 comm="syz.1.215" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  273.694879][ T6928] binder: BINDER_SET_CONTEXT_MGR already set
[  273.696784][ T6928] binder: 6925:6928 ioctl 4018620d 20000440 returned -16
[  274.052824][ T6936] overlay: Unknown parameter 'smackfstransmute'
[  274.204494][   T12] hsr_slave_0: left promiscuous mode
[  274.223761][   T12] hsr_slave_1: left promiscuous mode
[  274.240182][    T8] usb 6-1: USB disconnect, device number 3
[  274.260875][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.272477][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.275607][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.276169][    T8] Unregistered device Sky IT Digital Key (green led)
[  274.278317][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.279853][    T8] as10x_usb: device has been disconnected
[  274.288796][   T12] hsr_slave_0: left promiscuous mode
[  274.292024][   T12] hsr_slave_1: left promiscuous mode
[  274.295357][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.297302][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.300213][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.302310][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.314886][ T6941] input: syz1 as /devices/virtual/input/input12
[  274.328213][   T12] hsr_slave_0: left promiscuous mode
[  274.344048][   T12] hsr_slave_1: left promiscuous mode
[  274.348698][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.351351][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.354791][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.357398][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.513600][   T12] veth1_macvtap: left promiscuous mode
[  274.516010][   T12] veth0_macvtap: left promiscuous mode
[  274.518192][   T12] veth1_vlan: left promiscuous mode
[  274.520164][   T12] veth0_vlan: left promiscuous mode
[  274.523859][   T12] veth1_macvtap: left promiscuous mode
[  274.526525][   T12] veth0_macvtap: left promiscuous mode
[  274.528617][   T12] veth1_vlan: left promiscuous mode
[  274.531521][   T12] veth0_vlan: left promiscuous mode
[  274.548947][   T12] veth1_macvtap: left promiscuous mode
[  274.550464][   T12] veth0_macvtap: left promiscuous mode
[  274.551933][   T12] veth1_vlan: left promiscuous mode
[  274.557588][   T12] veth0_vlan: left promiscuous mode
[  275.251545][ T6949] netlink: 236 bytes leftover after parsing attributes in process `syz.1.223'.
[  275.255431][ T6949] netlink: 236 bytes leftover after parsing attributes in process `syz.1.223'.
[  275.372292][ T6953] msdos: Unknown parameter 'b±Fs	µÚì'
[  275.723906][   T12] team0 (unregistering): Port device team_slave_1 removed
[  275.819729][   T12] team0 (unregistering): Port device team_slave_0 removed
[  277.176440][   T12] team0 (unregistering): Port device team_slave_1 removed
[  277.273567][   T12] team0 (unregistering): Port device team_slave_0 removed
[  278.558852][   T12] team0 (unregistering): Port device team_slave_1 removed
[  278.644885][   T12] team0 (unregistering): Port device team_slave_0 removed
[  279.177335][ T6941] netlink: 'syz.3.221': attribute type 8 has an invalid length.
[  279.183397][ T6948] tipc: Started in network mode
[  279.185106][ T6948] tipc: Node identity 101, cluster identity 4711
[  279.187287][ T6948] tipc: Node number set to 257
[  279.189186][ T6951] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.224'.
[  279.194614][ T6952] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[  279.222345][ T6952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.223'.
[  279.246882][   T39] audit: type=1400 audit(279.141:460): avc:  denied  { write } for  pid=6956 comm="syz.3.225" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  279.464590][ T6969] ------------[ cut here ]------------
[  279.466835][ T6969] platform vkms: [drm] vblank wait timed out on crtc 0
[  279.475213][ T6969] WARNING: CPU: 2 PID: 6969 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x334/0x550
[  279.479121][ T6969] Modules linked in:
[  279.480760][ T6969] CPU: 2 UID: 0 PID: 6969 Comm: syz.2.226 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0
[  279.486027][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  279.489762][ T6969] RIP: 0010:drm_wait_one_vblank+0x334/0x550
[  279.491812][ T6969] Code: 85 ed 0f 84 54 01 00 00 e8 f9 a7 62 fc 4c 89 e7 e8 b1 f4 86 00 89 e9 4c 89 ea 48 c7 c7 60 56 e7 8b 48 89 c6 e8 4d 91 23 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 ce a7 62 fc 90 48 8d 7b 08 48 b8 00
[  279.498478][ T6969] RSP: 0018:ffffc90003607b28 EFLAGS: 00010286
[  279.500608][ T6969] RAX: 0000000000000000 RBX: ffff888024e28000 RCX: ffffc900250f7000
[  279.503475][ T6969] RDX: 0000000000040000 RSI: ffffffff814e7336 RDI: 0000000000000001
[  279.506049][ T6969] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  279.506528][   T39] audit: type=1400 audit(279.221:461): avc:  denied  { write } for  pid=6956 comm="syz.3.225" name="fib_trie" dev="proc" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  279.508419][ T6969] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888106d1a010
[  279.517730][ T6969] R13: ffff888106b6c120 R14: 1ffff920006c0f67 R15: 00000000000030b2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  279.520481][ T6969] FS:  00007f105eef66c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
[  279.523475][ T6969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  279.525607][ T6969] CR2: 000000002019c000 CR3: 000000001285a000 CR4: 0000000000352ef0
[  279.528409][ T6969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  279.531128][ T6969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  279.534011][ T6969] Call Trace:
[  279.535182][ T6969]  <TASK>
[  279.536222][ T6969]  ? __warn+0xea/0x3d0
[  279.537684][ T6969]  ? drm_wait_one_vblank+0x334/0x550
[  279.539557][ T6969]  ? report_bug+0x3c0/0x580
[  279.541183][ T6969]  ? handle_bug+0x54/0xa0
[  279.542771][ T6969]  ? exc_invalid_op+0x17/0x50
[  279.544225][ T6969]  ? asm_exc_invalid_op+0x1a/0x20
[  279.546040][ T6969]  ? __warn_printk+0x1a6/0x350
[  279.547753][ T6969]  ? drm_wait_one_vblank+0x334/0x550
[  279.549610][ T6969]  ? drm_wait_one_vblank+0x333/0x550
[  279.551410][ T6969]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  279.553193][ T6969]  ? preempt_schedule_thunk+0x1a/0x30
[  279.554562][ T6969]  ? __pfx_autoremove_wake_function+0x10/0x10
[  279.556398][ T6969]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  279.558403][ T6969]  ? drm_vblank_get+0x150/0x280
[  279.560135][ T6969]  drm_fb_helper_ioctl+0x156/0x1a0
[  279.561956][ T6969]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[  279.564017][ T6969]  do_fb_ioctl+0x3d4/0x7d0
[  279.565530][ T6969]  ? __pfx_do_fb_ioctl+0x10/0x10
[  279.567146][ T6969]  ? do_vfs_ioctl+0x513/0x1990
[  279.568565][ T6969]  ? selinux_file_ioctl+0x180/0x270
[  279.570401][ T6969]  fb_ioctl+0xe5/0x150
[  279.571851][ T6969]  ? __pfx_fb_ioctl+0x10/0x10
[  279.573571][ T6969]  __x64_sys_ioctl+0x18f/0x220
[  279.575458][ T6969]  do_syscall_64+0xcd/0x250
[  279.577062][ T6969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.579039][ T6969] RIP: 0033:0x7f105e17dff9
[  279.580598][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  279.587132][ T6969] RSP: 002b:00007f105eef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  279.589952][ T6969] RAX: ffffffffffffffda RBX: 00007f105e336058 RCX: 00007f105e17dff9
[  279.592622][ T6969] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006
[  279.595427][ T6969] RBP: 00007f105e1f0296 R08: 0000000000000000 R09: 0000000000000000
[  279.598167][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.600832][ T6969] R13: 0000000000000000 R14: 00007f105e336058 R15: 00007ffd53f79568
[  279.603581][ T6969]  </TASK>
[  279.604681][ T6969] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  279.607095][ T6969] CPU: 2 UID: 0 PID: 6969 Comm: syz.2.226 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0
[  279.610713][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  279.614307][ T6969] Call Trace:
[  279.615419][ T6969]  <TASK>
[  279.616466][ T6969]  dump_stack_lvl+0x3d/0x1f0
[  279.618101][ T6969]  panic+0x71d/0x800
[  279.619483][ T6969]  ? __pfx_panic+0x10/0x10
[  279.621055][ T6969]  ? show_trace_log_lvl+0x29d/0x3d0
[  279.622881][ T6969]  ? drm_wait_one_vblank+0x334/0x550
[  279.624764][ T6969]  check_panic_on_warn+0xab/0xb0
[  279.626560][ T6969]  __warn+0xf6/0x3d0
[  279.627934][ T6969]  ? drm_wait_one_vblank+0x334/0x550
[  279.629806][ T6969]  report_bug+0x3c0/0x580
[  279.631345][ T6969]  handle_bug+0x54/0xa0
[  279.632800][ T6969]  exc_invalid_op+0x17/0x50
[  279.634425][ T6969]  asm_exc_invalid_op+0x1a/0x20
[  279.636109][ T6969] RIP: 0010:drm_wait_one_vblank+0x334/0x550
[  279.638205][ T6969] Code: 85 ed 0f 84 54 01 00 00 e8 f9 a7 62 fc 4c 89 e7 e8 b1 f4 86 00 89 e9 4c 89 ea 48 c7 c7 60 56 e7 8b 48 89 c6 e8 4d 91 23 fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 ce a7 62 fc 90 48 8d 7b 08 48 b8 00
[  279.644800][ T6969] RSP: 0018:ffffc90003607b28 EFLAGS: 00010286
[  279.646906][ T6969] RAX: 0000000000000000 RBX: ffff888024e28000 RCX: ffffc900250f7000
[  279.649674][ T6969] RDX: 0000000000040000 RSI: ffffffff814e7336 RDI: 0000000000000001
[  279.652532][ T6969] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  279.654644][ T6969] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888106d1a010
[  279.657237][ T6969] R13: ffff888106b6c120 R14: 1ffff920006c0f67 R15: 00000000000030b2
[  279.660030][ T6969]  ? __warn_printk+0x1a6/0x350
[  279.661708][ T6969]  ? drm_wait_one_vblank+0x333/0x550
[  279.663539][ T6969]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  279.665468][ T6969]  ? preempt_schedule_thunk+0x1a/0x30
[  279.667370][ T6969]  ? __pfx_autoremove_wake_function+0x10/0x10
[  279.669514][ T6969]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  279.671489][ T6969]  ? drm_vblank_get+0x150/0x280
[  279.673034][ T6969]  drm_fb_helper_ioctl+0x156/0x1a0
[  279.674398][ T6969]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[  279.676071][ T6969]  do_fb_ioctl+0x3d4/0x7d0
[  279.677564][ T6969]  ? __pfx_do_fb_ioctl+0x10/0x10
[  279.678953][ T6969]  ? do_vfs_ioctl+0x513/0x1990
[  279.680230][ T6969]  ? selinux_file_ioctl+0x180/0x270
[  279.681639][ T6969]  fb_ioctl+0xe5/0x150
[  279.682712][ T6969]  ? __pfx_fb_ioctl+0x10/0x10
[  279.683944][ T6969]  __x64_sys_ioctl+0x18f/0x220
[  279.685206][ T6969]  do_syscall_64+0xcd/0x250
[  279.686411][ T6969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.687956][ T6969] RIP: 0033:0x7f105e17dff9
[  279.689132][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  279.694333][ T6969] RSP: 002b:00007f105eef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  279.696492][ T6969] RAX: ffffffffffffffda RBX: 00007f105e336058 RCX: 00007f105e17dff9
[  279.698538][ T6969] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006
[  279.700578][ T6969] RBP: 00007f105e1f0296 R08: 0000000000000000 R09: 0000000000000000
[  279.702627][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.704687][ T6969] R13: 0000000000000000 R14: 00007f105e336058 R15: 00007ffd53f79568
[  279.706746][ T6969]  </TASK>
[  279.708096][ T6969] Kernel Offset: disabled
[  279.709277][ T6969] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:06:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000000001c4 RCX=1ffffffff2dc763c RDX=1ffff1100508aa70
RSI=0000000000000008 RDI=ffff888028455380 RBP=ffffc900034f79e0 RSP=ffffc900034f7890
R8 =0000000000000000 R9 =fffffbfff2dc498f R10=ffffffff96e24c7f R11=0000000000000001
R12=ffff888028454880 R13=0000000000000200 R14=0000000000000009 R15=1ffff9200069ef1a
RIP=ffffffff8169be7a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f21ed80f6c0 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002002f000 CR3=00000000495a0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffc000 Opmask01=0000000001000003 Opmask02=000000007ffbffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000072736d2f302f 7570632f7665642f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000051504e0c130c 5653400c5546470c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000230
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000205899d RBX=0000000000000001 RCX=ffffffff8b21cd99 RDX=0000000000000000
RSI=ffffffff8b6cd040 RDI=ffffffff8bd19d40 RBP=ffffed1003b58910 RSP=ffffc90000187e08
R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000
R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f3088 R15=0000000000000000
RIP=ffffffff8b21e17f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b304f6ff8 CR3=00000000495a0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813344f3 ffffffff8133449d
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e4934 ffffffff813344f3
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813e4934
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21ec9f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8209d7b2 ffffffff8209940f ffffffff8209938f ffffffff8209935c
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8209d8a7 ffffffff8209d7b2 ffffffff00040008 000c00130014000c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8209935c ffffffff8209933f ffffffff820991c1 ffffffff82099194
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000230
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff850a6c05 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc90003607488
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000020 R14=ffffffff850a6ba0 R15=0000000000000000
RIP=ffffffff850a6c2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f105eef66c0 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002019c000 CR3=000000001285a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff88efc28f ffffffff81334525
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff88efc28f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa39f9f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa39f9f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa39f9f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa39f9f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa39f9f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa39f9f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000050a00 000000200a000020 0000000000000000 0007001000000014
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000002010a03 0000004000000000 307a797300010009 0000000100000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000040020008 8004001400000000 327a797300030009 0000000100000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010a06 0000005400000000 307a797300010009 0000000040010008
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200080000000040 0100080900000040 0500088002001c00 74616e0001000880
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100288004002c00 000000307a797300 0100090000000040 0b00080000000100
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 010a060000005400 000000307a797300 0100090000000040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100080000000040 0200088004001400 000000327a797300 0300090000000100
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffffffff81faefd4 RCX=ffffffff905f6398 RDX=dffffc0000000000
RSI=ffffffff8bd19cc0 RDI=ffffffff8da61b98 RBP=0000000000000000 RSP=ffffc90003c476c8
R8 =0000000000000000 R9 =fffffbfff20be611 R10=ffffffff905f308f R11=0000000000000000
R12=0000000000000000 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff816ab866 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555574f9d500 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020088000 CR3=000000001285a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff819e9420 ffffffff813344f3
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff819ed7c0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e1f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e1f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e1f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e1f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e1f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e1f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 165755070058cc93 aa6411dd3644ecf1 9736ee27b55a0000 00000000022d4174
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105ee6d100 00007f105e30b440 00007f1000040008 000c00130014000c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105e30b498 00007f105e30b490 00007f105e30b488 00007f105e30b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000