last executing test programs:

2m27.146818133s ago: executing program 1 (id=597):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="5100330080000000080211000000080211000000a5fcc8639e9800000000000000000000640000000006020500000000000000060000000000000602000025030000003c04000000007206030303030303000000"], 0x70}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x40000001})
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x400)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r6, &(0x7f0000000740)="91", 0x1, 0x0, 0x0, 0x0)
close(r6)
accept$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0)
syz_emit_ethernet(0x503, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4cd, 0x3a, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x18}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x1, "d429145c793e823829b4376332"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)

2m23.485071147s ago: executing program 1 (id=604):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
r0 = epoll_create1(0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/fscaps', 0x0, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000005c0)={0x80000000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000ec0)=""/87, &(0x7f0000000480)=""/70})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000840)={0x2, 0x0, [{0x10000, 0x73, &(0x7f0000000300)=""/115}, {0x0, 0xc7, &(0x7f0000000d40)=""/199}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27}, 0xcb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="8500000061000000350000000000000085000000230000009500000000000000f4670880271e3542dfa8ba6287066c5197fabc5f7010e81ae0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e20100000000000000c09cc28de194f40800000000b0d3fe2c7e93366796c7224a0c2c0213af2eff010000e3d800000104f4b1fc30dc914bc16543d4baa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3012e95752003b2f7846c744ae6af3c037102124d8eb000013000000000000000000a46aac3abe6c4d7f47ef6d02bad9dddacecf7eaa4a9779f8555ed6aea768c1f28221c110ed050000000ee282ab76ef93d96bc46a7c04b8c5324812d992a4f8dc6fcba00b1b2da951667d0276a0327b56c0ebfb19b3426887b6f1b6070e0ce1f844ce32a9988ca042dca52fbb8c1452b683f60f2744419a2f238f173d0000003cf4fbd775d9c04dac60ff00a629b3b2000000000000000000001d004e41ff9b4d00e07ff771cea08bea2fa81fb4c4c43f74936f333e3ae44f7ddd2fb35d4c46392ae855531b1eaf40aee8c94fd812e40f14e519a264ff3c572eecd5f6ca98b55e78f8d94f57ed7e6a3ab5dd9a4adedbdf0e58f58eb2e83500000000000000934c92002eace9a8d6f3dd008acf8a5c0fb433678060ac0e201e401fb1711d41f45d90a1e19795c995ffdd7055ee872d0e3e62dd578d590e62ff74d667477ac69a806d4552084a87f74fdfc117d4975576c102976c1ef70ceac9ff714bab1f59f8ebd67f2aca41706c147e3e0d3e557de0349c5ca80f10361bedc4832ae62a2b045ef6587710a82c2e27bacc81877b996a708c3a9235bdbec2cde0cfca78205439b4fd312c7106000000000000000000000000df83e1a6c37e26d8f98d7e9419275bc3bba633b47d00000000000000000000000000000000000000000000009d6ccaab1c17bbfdd16cbf3bb706537fe8cfed4272e665566d6ae239a97a1f6d00df0d03a22818be6aba095303e587b2b4520b2c5959d6581b7fe36733eb690b3fad4da9652edab3e76432c4212a38119d64465532c7abdc6f71439ec93bae9cb88349c1e0ba02e7d9d4e636acaae12c3853f388940cf59b056d8318d4cc52182acaa0de24a14600000000000000000000000000006efb26dd3e1d58b159c3828e1cb39cd81410a4d4acb14dbee7207fecf684463e333aa565db09e51caa690171b4c12f5e8f057a6ccb616989b6e4de92ea167928e3957dc9270e0ad2c0178888c9e7366bdf23cc5cd96a41540b6ade1b35c533a5d3022ae4318d66d9f3cced9e13a7f5b0e366edaedaa1d5492a7d189afd83ccca0d732d04f75b9bbb56a12ad943dac925c2f2ab663b5b44e33629c272358097e2d9719b23e9928a15914450bf2508f2c83e13e7ba667fc385bf5b64b774d92b61b1dae0c97dbe12454e2f4219be49888ce974720127c9c1db2238"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0x64, 0x0, &(0x7f0000000fc0)="61df712b7584fed5940e722780b686dd41acf5124ce405e80d7805d21cd541124b73dc894b40654342ec7788d88c3a1063a1b7d4f8657528239506f843e1a5ce57fb9946e0d6619069faeebaea0ea570902984f24c8546792e4e16c3dbcfcaba667869c3", 0x0, 0x8000, 0x0, 0x16, 0x67, &(0x7f0000000800)="96689bf9e7472bf212e23b25f8ce74c6d44c89227b30", &(0x7f0000000f40)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d69763eb9e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x50)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000001040), &(0x7f0000001080), 0x2, 0x3)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000e80)=@o_path={&(0x7f0000000780)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18)

2m19.764316537s ago: executing program 1 (id=612):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffff7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7)
syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x14100)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x8)
syz_emit_ethernet(0xde, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "97d42f", 0xa8, 0x43, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x8, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}, @routing={0x33, 0x12, 0x3, 0x26, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x18}, @remote, @remote, @rand_addr=' \x01\x00']}]}}}}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x805)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000021c0)={0x1, 0x5, {0x200, @struct={0x1, 0x7fff}, 0x0, 0x6, 0xafc, 0x0, 0x7f, 0x8, 0xa0, @usage=0x100000001, 0x80, 0x7, [0x5, 0x7f, 0x8000, 0x8, 0xfffffffffffff801, 0x4d]}, {0xffffffffffffffff, @struct={0x6835e151, 0x2}, 0x0, 0x5, 0xff, 0x4, 0x30f3, 0x80000000, 0x96, @usage=0x101, 0x4, 0xffffffff, [0x1, 0x1, 0x8000000000000001, 0x95, 0x5aa, 0x5]}, {0x0, @struct={0x3, 0x1}, 0x0, 0x3, 0x100000001, 0x7e26, 0x3, 0xa, 0x20, @usage=0x1, 0x1, 0x4, [0xcb05, 0x4, 0x9, 0x2, 0xfffffffffffffffb, 0x9]}, {0x0, 0xc2d, 0xe9}})
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
open_by_handle_at(r8, &(0x7f0000001680)=@FILEID_BTRFS_WITHOUT_PARENT={0x28}, 0x0)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c800397058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a605e31d19f0c095e3d2a0ed41256a3c49aaa6cdaf42c10b9d64818e812f78d7cd6efc1b53e67e02e409e85bad3d3dbd071811aef111d9450013e9ea9fa372dc0d8a04df88c76dc6bf99f6a0e8f1f8e3aa79dcc583276e1703cd87b3a319a5f5ac2b3d885656325ef37c565aaef3c2cd47476599cdeeddcc40c681e661c34773c00a6750652094e27c18f9983ffec86a6ae8cb45a017e14feab38bb011172da3f8b5a2977bf029753930023be4cc0936ee60d3b3c94f387728a4f2235a06ad9dc36a65d84a1ea3660717a03e7107124efd1d5057de26822c9237034a70c51e24e69b531672cb42a1ce304d3a315be3917073b4d366d15d791e08bb32a0a188c0c32467ae0ac80e7c1f296179f4d077ba30eeeca7f0086e827bdad31f5eed0a62489ab67a24bf175d3371219f"], 0x3d)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000b000600050001080200070014fc0b77ed75e43bdb31e83b0fb886cd1462a34a7b3a0300c6483ea9e6e56a209c652d01dc6797d2703c636a1ff5b3198655131bf0938be50000000000000000"], 0xf)

1m58.52576986s ago: executing program 0 (id=641):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x100000000000009)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x5ab, &(0x7f0000000540)={0x0, 0x1bcd, 0x8, 0x0, 0x393}, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0)

1m55.474119761s ago: executing program 0 (id=645):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_continue}, {@errors_remount}, {@namecase}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}, {@umask={'umask', 0x3d, 0x243}}]}, 0x9, 0x1505, &(0x7f0000000180)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendfile(r1, r0, 0x0, 0x80006800)

1m53.751191477s ago: executing program 0 (id=648):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x200003, &(0x7f0000000000)=ANY=[], 0x21, 0x1cf, &(0x7f0000000740)="$eJzsVU+rElEU/x1nHK1Fto6gRRK2SGfGinYZRPQB2kaJTiaN/XGEUoSmld8jAr9Gi/ZtghZBG1tU0MJoGxP33jPjnd5b6HuKPLg/0N+5598998zl3MfRiwgA/i6nHbQg4eAMvhDBBnCBlO5OSfFPR3Gd199txZdZ/5Y5YUTjyZN2GAbDLQlJkrz+33S4d0EVgk32kJVzXGr6tLxf2TTPDgTaXeYjNConiCuwzcKSyvrOt2/t86PkhAeW6uN2Ev7Z93GG9vHCxSBY2/kdcheAhGCtHy4FOmhaLW++KeCXvOmfl9OOEB7ylBK6rvqR7iO+5gfN55wtf2QhyXzEzSeISVNCYzR43ojGkyv9QbsX9IKnvt+87l513Wt+41E/DFz1T9oW6YgS3JJJgFOavQjgKw/Y09DwQ2y7Ko3tpMeK9ic8pGsXkUNBi7WYCe+zWA6DaME9XEIZwMuYNG1VZrEhj3QXBIsXHpcLyvYqS0O98yzszkCgNGwOO8vhLVCUC2dVo7I0b8SpasZcZS4yz5kXzOmblb5FtszwjVe1WJT4qj0aDT3nI4d44tWTOt9Jrf7ZWG+Y2PW3kz/c+RIMDAwMDAwMDE4Y/gUAAP//ruxR0w==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m50.242521162s ago: executing program 0 (id=649):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)

1m14.588202364s ago: executing program 1 (id=627):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e05, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)

1m11.766972006s ago: executing program 3 (id=663):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x2c}}, 0x0)

1m11.11447357s ago: executing program 2 (id=664):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
ppoll(&(0x7f0000000040)=[{r1, 0x314}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)

1m10.849954228s ago: executing program 3 (id=665):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x40000000], 0x0, 0x200394})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0)

1m8.975222048s ago: executing program 0 (id=651):
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x298)
memfd_create(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
connect$caif(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1m8.917448671s ago: executing program 1 (id=667):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x100, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdb2f}]}]}, 0x100}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r6, 0xfffffffd)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x20000000, 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4)
ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x7)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r7, &(0x7f0000000040)='u', 0xa792a, 0x804, 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000100)={'erspan0\x00'})

1m8.917021379s ago: executing program 2 (id=668):
unshare(0x60480)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)

1m6.308003011s ago: executing program 2 (id=669):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20)

51.490252894s ago: executing program 3 (id=666):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x100000000000009)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5ab, &(0x7f0000000540)={0x0, 0x1bcd, 0x8, 0x0, 0x393}, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0)

7.953736082s ago: executing program 4 (id=698):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x283, 0x0, &(0x7f0000000140)="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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7f}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r6, 0x2000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYRES16=r7], 0xfffffffffffffd63)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSSb6uuX+S/z6SV/4XEb9+GXE6Xd9ubXFptlSplOfzejGSa8Xa4tKZK3OlmfJM+erE5OS5tyYn3n3n7Z7F+vrFv7/7+P4H5746ufztzw+P3U3ifBzNt7XG8RxutVbGYix/Tobi/DM7jvegsf0k2esOsC0DeZ4PRTYGjMRAnvVtrYzsZteAHfZFltZAn0rkP/Sp5jygeW3fo+vgF8aj91cvgNbHP7j62kgMN66NDi8nT10ZZde7oz1oP2vjlz/u3c2W6N3rEACbunU7Is4ODq4f/5J8/Nu+s13s82wbxj/YPfez+c8b7eY/6dr8J9rMf460yd3t2Dz/04c9aKajbP73Xtv579pNq9GBvPafxpxvKLl8pVLOxrb/RsSpGDqY1Te4n/NZuvxgpdPG1vlftmTtN+eCeT8eDh58+jHTpXrpuYJu8eh2xCtt57/J2vFP2hz/7Pm42GUbJ8r3Xu20bfP4d9bKjxGvtT3+T+5oZaVifa7T/cli43woNs+K9f66c+K3Tu3vdfzZ8T+8cfyjSev92trW2/hh+J9yp23bPf8PJJ82ygfydTdK9fr8eMSB5KP16yeePLZZb+6fxX/q5MbjX7vz/1CW2F3Gf+f4ndZdh7cW/87K4p/e0vHfeuHBh59/36n97o7/m43SqXxNN+Nftx18nucOAAAAAAAA9ps0Io5GkhbWymlaKKy+v+N4HE4r1Vr99OXqwtXpaHxWdjSG0uad7pGW90OM5++HbdYnnqlPRsSxiPhm4FCjXpiqVqb3OngAAAAAAAAAAAAAAAAAAADYJ45EDLf7/H/m94G97h2w4zb4ym/gJdc5//MtvfimJ2Bfas3/g3vYD2D3mf9D/+oi/9Pd6Aew+/z/h/4l/6F/yX/oX/If+tdW8v+nCzvYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAHg5XLxwIVtWlh/fnMrq09cXF2ar189Ml2uzhbmFqcJUdf5aYaZanamUC1PVuc3+XqVavTY+EQs3ivVyrV6sLS5dmqsuXK1fujJXmilfKg/tSlQAAAAAAAAAAAAAAAAAAADwYqktLs2WKpXyvILCtgqD+6MbnQppfqLvl/68MIU9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMW/AQAA//+LGzah")
r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r8, 0xc0185879, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401})

6.492991349s ago: executing program 4 (id=699):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4)
socket$inet6(0xa, 0x0, 0x1000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x0, 0xfffeffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TCSETSW2(r4, 0x5437, 0x0)

4.833225337s ago: executing program 4 (id=700):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/48, 0x30}], 0x1, 0xfffffffe, 0x0)

4.06958407s ago: executing program 4 (id=701):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00118025b57efaa223b473fe7791bc4a506c775674e8733fcc051bb8aa790d9b2bb2e5c90fafb663cdebaede447dc8f6f61c6650d41f07a80e51fc15fcf740adda297ba51296d7dc3af652"], 0x184}}, 0x0)

3.404316189s ago: executing program 4 (id=702):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x1)
capset(&(0x7f0000000080), &(0x7f0000000100))
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='\x00w', 0x2}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x40008}, 0x1c, 0x0}}], 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b00010000000500096966ae6f00"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x984)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)=0xffffffffffffffff)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3)
writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000840)="075df2dc0ed54a5b36dfa55763d1b4c85a282c3e2e28251878f9b58e7e66e96fc1495215764692b454692a3d20565aac510333bd09f366dd299c9c81706c74be0fc49c693255ce5113af7cb011a21d0086e5f42f89d7990bdd2f41b19023a065e5df827b46ff9702475b21d581a1303484b43e581961002eb14703eca50025365b9409b6930b1ed5882c44176eb7fed7f99cae74c818fc2adf44cf4a3b5f1bdd65f378ad8447d7fa4956c3dc4501ad3d73336e48720699922be68ce5e2669e73dd506fc9fdf3daec9f1a05a5461168a95add591309b036a0fdb344da0701422bde23b650b1355dc667600db96618f230b60f40", 0xf3}, {&(0x7f0000000440)="f89c134aeef779eac042f85c874e21d2ea0aacba28487b6e9aa34f1bf8dfce4b6e8427aaa08cc4b39abe12e7f82e4f25fb0759bf25bdb291a773d14bf5de47", 0x3f}, {&(0x7f0000000680)="a84e53113b940bb8300c07d5f2810757942d45a66d4c65a30cd61916ad7da1e90f7ab155668beecf539c6eced924279ee1f152d28229c19ee0991f9446ec73cf5459347d9b3a94e443bbfecca7280f14c44689304e88762d5c493080cc658bbf52cc8d42a7b4cac68c3dc6a11819b9b541c2d8b05bddc1a66190b20c93a534a7389761b0a88e53e5c90211bd25016faff7643713b5ddb54d4286bf3a", 0x9c}, {&(0x7f0000000940)="40ad58d67630bb76b137220a917f1f1029bad2b5297b1ba5bc22ac370cacf4acb27aa28aaf1f8fab7a2a409170c6ec66a28b3f1f66337118b82bd55cb8557762009f82ee3491531f95395e813389ac15fea84311deb6cb09f88b9d7e9b4555bb8653b9d437e5ee3dfd12d8159453c107b8725f703f28e79d0f6a2b4dd1e15bef8b71678c2bbf043f6d01feb328ecf8d9d8c9b4d114261b5348f77fdb9df6ff3d9f98977fd0396b9982e732ae95dad9a0c8387e9754d3f5e6e6e8767807c00d0638b061c7f99cc34686f2f9b263d59b", 0xcf}, {&(0x7f0000000480)="ce7c9ee4c4b451ab806d4f78b22597e4837469d4fc43a685e30cf80b2ba77c02596de251d8c3d79a075b2a1e253021f7fb50dc13db1311e14c3c5346d471586df26f442e2f936f4de696d2aa7b4aef6d891cf18897f90ab09b5abc5383eff5093d7fd0b0cccc1ead98890476607e91", 0x6f}, {&(0x7f0000000780)="02ccd1e5f6089a9e59ac2f64011aa5283545f9fd7a7293718be3bf4c12b2ec1e19dff8f7e7", 0x25}, {&(0x7f0000000a40)="30d1a21c23e760733a4fd81ef40c521e4bd44c5d1b026056ea29e92a956bf17a6ea3cb659c469aaf079a59a88f89f9de81735a7c0083694095c8c1da6630f0ae2bc2f106965ebd543262e0df6acedd11f6b3ce7549168c90d2e9dfae16f2ef4b6a89c7649b66f50735450266525c0c0f60e17785c7192024e32ad29308ed1a4e4774a05107883756f693969a233fa47852e47ffbfcd637d7091ce6bd069298d403532e39f467802b9f648a086f5a12cc09b9d193c324fb3416f8f8f51fad1487afec64308cb2463a78ce493d5a9b62a7ee62882b278d6aee275e04b19621bf56af05e61076f6c02adadf821f27", 0xed}, {&(0x7f0000000b40)="54f57b70115af01b59f1bcaa349d7d25f0abf3e807e467159a3485b51994534e99247e5596c5710f92c9fb5249359dc3e4383aeee85b22c6895b42a1566ac7aacfe505cb051f35ce405bbaefe1ed0a2c672e895924449548f661d1ba6503af8cf3817e78595033f53920a0ddf143e47165b7bb87e7a887cbb8ba86ee194140c02dc67853d602f221c739856f68510f34fb58ba4f4e7beb354aff7e1b8b88c9b74546b13fe99e08088f622c198256ee3a532c8547337a6d8caafe02cca57d0aa094105a66e9562f79c863ab10fb680d75a1a5717102", 0xd5}], 0x8)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010b00000000000000006700000008000100000000000c009900000000007c00000008555c437655b33b2a"], 0x38}}, 0x0)

3.072367969s ago: executing program 2 (id=672):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="5100330080000000080211000000080211000000a5fcc8639e9800000000000000000000640000000006020500000000000000060000000000000602000025"], 0x70}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x40000001})
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x400)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r6, &(0x7f0000000740)="91", 0x1, 0x0, 0x0, 0x0)
close(r6)
accept$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0)
syz_emit_ethernet(0x500, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4ca, 0x3a, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x18}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x1, "d429145c793e823829b4"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)

2.610079988s ago: executing program 0 (id=670):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2)
r7 = dup(r6)
write$char_usb(r7, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = socket(0x0, 0x2, 0x0)
getsockopt$nfc_llcp(r8, 0x107, 0xe, 0x0, 0x209fffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r9, 0x402, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x11c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x100, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e2f60d552ec8b03dfd01233e0f2cc2f"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4d2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7daa383e2ab41a19a64dd52d85fb68bbcd23c847c8480bfb8ad980ea04c9498e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e4963c0fc9ec19fca8ed62af26a0bd5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c11ea6bc0add924c7914f933d537f8197120405e340663d1bccb766be22a3a72"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e857cb7672dff82e9a65729f0bdd58900e9636c06923d762b05d4b3ce4a8d0d2"}]}]}, 0x11c}}, 0x0)

1.625830164s ago: executing program 3 (id=666):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x100000000000009)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5ab, &(0x7f0000000540)={0x0, 0x1bcd, 0x8, 0x0, 0x393}, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0)

1.423089841s ago: executing program 4 (id=703):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x89, 0xf6, 0x57, 0x40, 0x403, 0xbcd9, 0x9433, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd9, 0x22, 0x99}}]}}]}}, 0x0)

1.279615954s ago: executing program 2 (id=704):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
unshare(0x22020600)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

639.747842ms ago: executing program 3 (id=705):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@private0, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r5})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'})

507.343922ms ago: executing program 1 (id=671):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x8)
userfaultfd(0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e44000304"], 0x47)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @multicast2}, 0xc)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="610301032e19d5e1ad9c"], 0xa)
syz_io_uring_setup(0x34bc, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})

298.152212ms ago: executing program 2 (id=706):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x283, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa326"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010000100000000000a000000000000000000000000000008000a4000000000090002eb72797a32000000000800054000000000140000000c0a00000000000000000000140000001000010000000000000000000000000a0000000000000000000000000043b3060eff6f80533afbd74b5e6a4ecfb09d79692ab2e292997bae4a437951dca5ae61e49385c55914eb64d04fe67b61c2ce15f6f3c2ce4159afa249fb12d41b075fa8e291d94d09f247c4d0a6c1b96651e6f9e1df09494b6c24847d78217b219a1e25f7a2211df303fd4ad6f2197717008c7d093d4ea98d171bf3163a03673a90e5a969148994a5e870a4553d9ae82724ac985579483449dad6b2f29a2aba9b1dde73ea5b8853a2ff37cd6bcb688023a9239ef6ff0b26b37d9b"], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7f}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r6, 0x2000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYRES16=r7], 0xfffffffffffffd63)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r8, 0xc0185879, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401})

0s ago: executing program 3 (id=707):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4)
socket$inet6(0xa, 0x0, 0x1000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x0, 0xfffeffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TCSETSW2(r4, 0x5437, 0x0)

kernel console output (not intermixed with test programs):

_slave_1: left promiscuous mode
[  728.335087][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.447274][   T11] bridge_slave_0: left allmulticast mode
[  728.453425][   T11] bridge_slave_0: left promiscuous mode
[  728.460849][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.084194][ T7820] Bluetooth: hci3: command tx timeout
[  729.210497][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  729.235499][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  729.266825][   T11] bond0 (unregistering): Released all slaves
[  729.543300][ T7820] Bluetooth: hci4: command tx timeout
[  729.743072][   T11] hsr_slave_0: left promiscuous mode
[  729.807058][   T11] hsr_slave_1: left promiscuous mode
[  729.851800][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.859580][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  729.911797][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.919569][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.996653][   T11] veth1_macvtap: left promiscuous mode
[  730.003645][   T11] veth0_macvtap: left promiscuous mode
[  730.009626][   T11] veth1_vlan: left promiscuous mode
[  730.015409][   T11] veth0_vlan: left promiscuous mode
[  730.270006][ T7820] Bluetooth: hci2: command tx timeout
[  730.683693][   T11] team0 (unregistering): Port device team_slave_1 removed
[  730.739394][   T11] team0 (unregistering): Port device team_slave_0 removed
[  731.147304][ T7820] Bluetooth: hci3: command tx timeout
[  731.348572][ T8067] chnl_net:caif_netlink_parms(): no params data found
[  731.369281][ T8064] chnl_net:caif_netlink_parms(): no params data found
[  731.415698][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.423678][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.431766][ T8058] bridge_slave_0: entered allmulticast mode
[  731.441389][ T8058] bridge_slave_0: entered promiscuous mode
[  731.663768][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.675989][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.681248][ T7820] Bluetooth: hci4: command tx timeout
[  731.687677][ T8058] bridge_slave_1: entered allmulticast mode
[  731.699981][ T8058] bridge_slave_1: entered promiscuous mode
[  732.349824][ T7820] Bluetooth: hci2: command tx timeout
[  732.408186][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.566710][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.644142][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.748926][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.052187][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.122272][ T8058] team0: Port device team_slave_0 added
[  733.153146][ T8058] team0: Port device team_slave_1 added
[  733.223047][ T7820] Bluetooth: hci3: command tx timeout
[  733.258876][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.507304][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.515382][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.541921][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.752721][ T7820] Bluetooth: hci4: command tx timeout
[  733.837238][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  733.845063][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.872939][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.069834][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.246566][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.412582][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.420409][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.428583][ T8064] bridge_slave_0: entered allmulticast mode
[  734.438228][ T8064] bridge_slave_0: entered promiscuous mode
[  734.540395][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.548737][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.557056][ T8067] bridge_slave_0: entered allmulticast mode
[  734.566849][ T8067] bridge_slave_0: entered promiscuous mode
[  734.615505][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.702952][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.711577][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.719757][ T8064] bridge_slave_1: entered allmulticast mode
[  734.729313][ T8064] bridge_slave_1: entered promiscuous mode
[  734.809083][ T8058] hsr_slave_0: entered promiscuous mode
[  734.820525][ T8058] hsr_slave_1: entered promiscuous mode
[  734.845747][ T8058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  734.853728][ T8058] Cannot create hsr debugfs directory
[  734.874847][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.882943][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.891139][ T8067] bridge_slave_1: entered allmulticast mode
[  734.908603][ T8067] bridge_slave_1: entered promiscuous mode
[  734.958660][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.234382][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.242780][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.247212][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.402622][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.452391][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.701024][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.887333][ T3684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.897517][ T3684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.933753][ T8064] team0: Port device team_slave_0 added
[  736.219316][ T8064] team0: Port device team_slave_1 added
[  736.295288][ T8067] team0: Port device team_slave_0 added
[  736.392939][ T3684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  736.401281][ T3684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.461899][ T8067] team0: Port device team_slave_1 added
[  736.537308][   T11] bridge_slave_1: left allmulticast mode
[  736.544217][   T11] bridge_slave_1: left promiscuous mode
[  736.551236][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.597040][   T11] bridge_slave_0: left allmulticast mode
[  736.604207][   T11] bridge_slave_0: left promiscuous mode
[  736.611229][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.643586][   T11] bridge_slave_1: left allmulticast mode
[  736.649561][   T11] bridge_slave_1: left promiscuous mode
[  736.656815][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.690006][   T11] bridge_slave_0: left allmulticast mode
[  736.698488][   T11] bridge_slave_0: left promiscuous mode
[  736.708522][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.917475][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  737.039465][ T8154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  737.085434][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  737.795867][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.816006][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.840396][   T11] bond0 (unregistering): Released all slaves
[  737.881524][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.915184][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.931393][   T11] bond0 (unregistering): Released all slaves
[  738.320847][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.328077][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.354663][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.370245][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.380280][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.406854][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.439073][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.446511][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.473132][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.517163][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.526069][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.759250][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.766640][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.794463][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.126911][ T8158] loop0: detected capacity change from 0 to 1024
[  739.204528][ T8064] hsr_slave_0: entered promiscuous mode
[  739.218921][ T8064] hsr_slave_1: entered promiscuous mode
[  739.233407][ T8064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.242234][ T8064] Cannot create hsr debugfs directory
[  739.343453][ T8158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.382636][ T8161] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  739.540564][ T8067] hsr_slave_0: entered promiscuous mode
[  739.555548][ T8067] hsr_slave_1: entered promiscuous mode
[  739.565625][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.573780][ T8067] Cannot create hsr debugfs directory
[  739.852336][ T8166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  739.875320][   T11] hsr_slave_0: left promiscuous mode
[  739.916432][   T11] hsr_slave_1: left promiscuous mode
[  739.949025][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  739.957289][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  739.983668][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  739.991592][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.000575][ T8166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  740.061480][   T11] hsr_slave_0: left promiscuous mode
[  740.081986][ T8166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  740.102809][   T11] hsr_slave_1: left promiscuous mode
[  740.141148][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  740.148974][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  740.166172][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  740.174195][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.207087][   T11] veth1_macvtap: left promiscuous mode
[  740.213132][   T11] veth0_macvtap: left promiscuous mode
[  740.220396][   T11] veth1_vlan: left promiscuous mode
[  740.227055][   T11] veth0_vlan: left promiscuous mode
[  740.236590][   T11] veth1_macvtap: left promiscuous mode
[  740.242700][   T11] veth0_macvtap: left promiscuous mode
[  740.248680][   T11] veth1_vlan: left promiscuous mode
[  740.254477][   T11] veth0_vlan: left promiscuous mode
[  741.395526][   T11] team0 (unregistering): Port device team_slave_1 removed
[  741.427350][   T11] team0 (unregistering): Port device team_slave_0 removed
[  742.037620][   T11] team0 (unregistering): Port device team_slave_1 removed
[  742.068699][   T11] team0 (unregistering): Port device team_slave_0 removed
[  743.433904][ T8058] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  743.583556][ T8058] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  743.771510][ T8058] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  743.819889][ T8058] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  745.646062][ T7820] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  745.709777][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0
[  745.837813][ T8067] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  745.965534][ T8064] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  746.042334][ T8058] 8021q: adding VLAN 0 to HW filter on device team0
[  746.059169][ T8064] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  746.158302][ T8067] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  746.200706][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.208305][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  746.251119][ T8064] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  746.311582][ T8067] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  746.360540][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.368515][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.380528][ T8067] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  746.455132][ T8064] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  748.237884][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.363247][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.519512][ T8064] 8021q: adding VLAN 0 to HW filter on device team0
[  748.659482][ T8067] 8021q: adding VLAN 0 to HW filter on device team0
[  748.735356][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.743277][ T7773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.768227][ T8188] dccp_close: ABORT with 1 bytes unread
[  748.849143][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.857060][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.874000][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.881974][ T7773] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.245883][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.253781][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.616621][ T8067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  749.633538][ T8067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  749.685099][ T8064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  749.787212][    C1] eth0: bad gso: type: 1, size: 1408
[  750.449010][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.721235][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  750.826216][ T4436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  750.846731][ T4436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  750.858183][ T4436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  750.886695][ T4436] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  750.923335][ T4436] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  750.948211][ T4436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  751.125315][   T10] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  751.136082][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  751.149577][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  751.161099][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.294929][   T10] usb 2-1: config 0 descriptor??
[  751.359029][   T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  751.525540][ T8058] veth0_vlan: entered promiscuous mode
[  751.745806][ T8058] veth1_vlan: entered promiscuous mode
[  752.322916][ T8058] veth0_macvtap: entered promiscuous mode
[  752.491887][ T8058] veth1_macvtap: entered promiscuous mode
[  752.765873][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.777174][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.787943][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.799485][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.818626][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  752.882889][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.893780][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.904162][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.916135][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.932533][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.954037][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.025998][ T8058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.035560][ T8058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.044839][ T8058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.054508][ T8058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.064122][ T7820] Bluetooth: hci5: command tx timeout
[  753.086422][ T8064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.333553][ T8206] chnl_net:caif_netlink_parms(): no params data found
[  753.694764][ T7773] usb 2-1: USB disconnect, device number 4
[  753.944972][ T8064] veth0_vlan: entered promiscuous mode
[  754.146557][ T8064] veth1_vlan: entered promiscuous mode
[  754.689816][ T8064] veth0_macvtap: entered promiscuous mode
[  754.839680][ T8064] veth1_macvtap: entered promiscuous mode
[  755.148055][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  755.152012][ T7820] Bluetooth: hci5: command tx timeout
[  755.158770][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.176608][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  755.190325][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.200861][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  755.211844][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.227779][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  755.418442][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.429458][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.440300][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.451619][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.461957][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.473112][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.492215][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  755.947927][ T8064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.957597][ T8064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.966854][ T8064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.976142][ T8064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.034709][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.043270][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.051484][ T8206] bridge_slave_0: entered allmulticast mode
[  756.061304][ T8206] bridge_slave_0: entered promiscuous mode
[  756.114118][ T8245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  756.245740][ T8245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  756.260464][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.268479][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.277354][ T8206] bridge_slave_1: entered allmulticast mode
[  756.285969][ T8206] bridge_slave_1: entered promiscuous mode
[  756.505046][ T8245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  756.965497][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  757.226883][ T7820] Bluetooth: hci5: command tx timeout
[  757.385333][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.562273][ T8206] team0: Port device team_slave_0 added
[  757.654622][ T8067] veth0_vlan: entered promiscuous mode
[  757.684819][ T8206] team0: Port device team_slave_1 added
[  757.955837][ T8067] veth1_vlan: entered promiscuous mode
[  758.173710][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.181939][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.208414][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.374898][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.382966][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.410296][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.961877][ T8206] hsr_slave_0: entered promiscuous mode
[  759.017272][ T8206] hsr_slave_1: entered promiscuous mode
[  759.075124][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  759.087639][ T8206] Cannot create hsr debugfs directory
[  759.105995][ T8067] veth0_macvtap: entered promiscuous mode
[  759.311510][ T7820] Bluetooth: hci5: command tx timeout
[  759.456302][ T8067] veth1_macvtap: entered promiscuous mode
[  759.625981][ T7820] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  759.943427][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.961888][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.971993][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.983985][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.994388][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  760.005130][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.015260][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  760.026052][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.040771][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  760.395307][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  760.406600][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.416911][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  760.427662][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.437787][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  760.448524][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.458665][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  760.469395][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  760.484056][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  760.693952][ T8206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.790401][ T8067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  760.802748][ T8067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  760.812671][ T8067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  760.821962][ T8067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  760.929638][ T8206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.219052][ T8206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.574790][ T8206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.216822][ T8206] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  762.363684][ T8206] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  762.512326][ T8206] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  762.624021][ T8206] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  762.924690][ T8292] dccp_close: ABORT with 1 bytes unread
[  763.432507][    C1] eth0: bad gso: type: 1, size: 1408
[  764.050106][ T6093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.059146][ T6093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.140397][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.302144][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.310339][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.358138][ T8206] 8021q: adding VLAN 0 to HW filter on device team0
[  764.432035][ T5111] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  764.475424][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.483421][ T7777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.647997][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.656033][ T7777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.731842][ T5111] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  764.742979][ T5111] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  764.756718][ T5111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  764.766145][ T5111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.866381][ T5111] usb 2-1: config 0 descriptor??
[  764.972186][ T5111] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  765.453339][ T8310] loop2: detected capacity change from 0 to 1024
[  767.238456][ T4093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.246736][ T4093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.403902][ T5111] usb 2-1: USB disconnect, device number 5
[  767.535220][ T8206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  767.578589][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.588594][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.770102][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  767.914597][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  767.998913][ T8332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  768.315441][ T8206] veth0_vlan: entered promiscuous mode
[  768.513798][   T29] audit: type=1326 audit(1721526559.046:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.3.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5347975b59 code=0x0
[  768.656012][ T8206] veth1_vlan: entered promiscuous mode
[  768.755197][ T7820] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  769.074505][ T8157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.207099][ T8206] veth0_macvtap: entered promiscuous mode
[  769.572412][ T8206] veth1_macvtap: entered promiscuous mode
[  770.113790][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.128165][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.139680][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.150565][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.160886][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.171814][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.182004][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.193151][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.203937][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.214756][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.235121][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  770.690281][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  770.701852][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.712446][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  770.723208][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.737115][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  770.750103][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.760795][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  770.771598][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.781733][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  770.792776][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.807124][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.086498][ T8206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.095795][ T8206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.105119][ T8206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.114230][ T8206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.233235][ T8354] dccp_close: ABORT with 1 bytes unread
[  771.647801][ T8358] loop1: detected capacity change from 0 to 1024
[  772.030280][ T4415] bridge_slave_1: left allmulticast mode
[  772.038510][ T4415] bridge_slave_1: left promiscuous mode
[  772.048501][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.174790][ T4415] bridge_slave_0: left allmulticast mode
[  772.180946][ T4415] bridge_slave_0: left promiscuous mode
[  772.187832][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.551044][ T4684] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  772.825390][ T4684] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  772.837650][ T4684] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  772.851396][ T4684] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  772.861127][ T4684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.937280][ T4684] usb 4-1: config 0 descriptor??
[  772.971529][ T4684] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  773.014017][ T4415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.083397][ T4415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.157139][ T4415] bond0 (unregistering): Released all slaves
[  773.402326][ T6093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.410549][ T6093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.713066][ T5111] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  773.858037][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  773.937283][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  773.981301][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.989427][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  774.084552][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  774.175543][ T4415] hsr_slave_0: left promiscuous mode
[  774.178434][ T5111] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  774.200138][ T5111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.244352][ T4415] hsr_slave_1: left promiscuous mode
[  774.267946][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.275964][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.293181][ T5111] usb 2-1: config 0 descriptor??
[  774.307603][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  774.319485][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.356576][ T5111] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  774.436552][ T4415] veth1_macvtap: left promiscuous mode
[  774.443315][ T4415] veth0_macvtap: left promiscuous mode
[  774.449570][ T4415] veth1_vlan: left promiscuous mode
[  774.455791][ T4415] veth0_vlan: left promiscuous mode
[  775.501067][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  775.511270][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  775.602135][ T7769] usb 4-1: USB disconnect, device number 2
[  775.619880][ T5111] gspca_sonixj: reg_r err -110
[  775.625460][ T5111] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  776.024762][ T7820] Bluetooth: hci3: link tx timeout
[  776.030156][ T7820] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  776.095115][ T4436] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  776.316984][ T4415] team0 (unregistering): Port device team_slave_1 removed
[  776.441505][ T4415] team0 (unregistering): Port device team_slave_0 removed
[  777.451619][   T10] usb 2-1: USB disconnect, device number 6
[  778.110054][ T7820] Bluetooth: hci3: command 0x0406 tx timeout
[  779.254222][ T8405] loop3: detected capacity change from 0 to 16
[  779.433476][ T8405] erofs: (device loop3): mounted with root inode @ nid 36.
[  779.582345][ T8405] syz.3.540: attempt to access beyond end of device
[  779.582345][ T8405] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  779.782512][ T4436] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18
[  779.790340][ T4436] Bluetooth: hci3: Invalid handle: 0x6d3f > 0x0eff
[  779.924347][ T4436] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  779.931891][ T4436] Bluetooth: Wrong link type (-22)
[  779.937511][ T4436] Bluetooth: Unknown BR/EDR signaling command 0x10
[  779.943167][ T8410] loop1: detected capacity change from 0 to 1024
[  779.944623][ T4436] Bluetooth: Wrong link type (-22)
[  779.960098][ T4436] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  779.968178][ T4436] Bluetooth: Wrong link type (-22)
[  779.978353][ T4436] Bluetooth: hci3: link tx timeout
[  780.182307][ T8413] syz.3.540: attempt to access beyond end of device
[  780.182307][ T8413] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  780.282164][ T8413] syz.3.540: attempt to access beyond end of device
[  780.282164][ T8413] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  780.702444][ T8405] syz.3.540: attempt to access beyond end of device
[  780.702444][ T8405] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  780.966731][ T4436] Bluetooth: hci1: link tx timeout
[  780.976349][ T4436] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.003808][ T4436] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  781.086011][ T4684] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  781.377898][ T4684] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  781.395636][ T4684] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  781.406627][ T4684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.475333][ T4684] usb 3-1: config 0 descriptor??
[  781.551283][ T4684] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  782.292758][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  782.300419][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  782.631257][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  782.991826][   T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  783.002535][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.064200][ T7820] Bluetooth: hci1: command 0x0406 tx timeout
[  783.108074][   T10] usb 5-1: config 0 descriptor??
[  783.161472][   T10] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  783.956578][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.967126][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.086105][ T7769] usb 3-1: USB disconnect, device number 3
[  784.274215][   T10] gspca_sonixj: reg_r err -110
[  784.279665][   T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  784.301858][ T8445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  784.400145][ T8452] fuse: Bad value for 'fd'
[  784.689376][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  784.698372][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  784.932078][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  784.940497][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  785.207472][ T8459] loop1: detected capacity change from 0 to 16
[  785.327501][ T8457] loop2: detected capacity change from 0 to 1024
[  785.333870][ T8459] erofs: (device loop1): mounted with root inode @ nid 36.
[  785.430188][ T8459] syz.1.556: attempt to access beyond end of device
[  785.430188][ T8459] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  785.529916][ T7769] usb 5-1: USB disconnect, device number 3
[  785.571198][ T7820] Bluetooth: hci1: unexpected subevent 0x01 length: 78 > 18
[  785.578902][ T7820] Bluetooth: hci1: Invalid handle: 0x6d3f > 0x0eff
[  786.165225][ T4436] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  786.173400][ T4436] Bluetooth: Wrong link type (-22)
[  786.179212][ T4436] Bluetooth: Unknown BR/EDR signaling command 0x10
[  786.188932][ T4436] Bluetooth: Wrong link type (-22)
[  786.200429][ T4436] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  786.212208][ T4436] Bluetooth: Wrong link type (-22)
[  786.218148][ T4436] Bluetooth: hci1: link tx timeout
[  786.226712][ T8465] syz.1.556: attempt to access beyond end of device
[  786.226712][ T8465] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  786.247794][ T8465] syz.1.556: attempt to access beyond end of device
[  786.247794][ T8465] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  786.273375][ T8465] syz.1.556: attempt to access beyond end of device
[  786.273375][ T8465] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  786.838595][ T4436] Bluetooth: hci2: link tx timeout
[  786.844717][ T4436] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  786.858989][ T4436] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  787.851124][ T7769] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  788.145814][ T7769] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  788.161025][ T7769] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  788.170400][ T7769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.282950][ T7769] usb 1-1: config 0 descriptor??
[  788.366989][ T7769] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  788.371321][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.485099][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.607686][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.941920][ T4436] Bluetooth: hci2: command 0x0406 tx timeout
[  789.237718][ T8505] loop4: detected capacity change from 0 to 1024
[  789.571017][ T7769] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  789.855938][ T7769] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  789.865646][ T7769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.930902][ T7769] usb 2-1: config 0 descriptor??
[  790.071603][ T7769] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  790.520062][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  790.530205][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  790.799923][ T8511] loop2: detected capacity change from 0 to 16
[  790.841541][ T7769] gspca_sonixj: reg_r err -110
[  790.846881][ T7769] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  790.963411][ T8511] erofs: (device loop2): mounted with root inode @ nid 36.
[  791.099811][ T8511] syz.2.570: attempt to access beyond end of device
[  791.099811][ T8511] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  791.115575][ T7769] usb 1-1: USB disconnect, device number 6
[  791.344799][ T7820] Bluetooth: hci2: unexpected subevent 0x01 length: 78 > 18
[  791.353018][ T7820] Bluetooth: hci2: Invalid handle: 0x6d3f > 0x0eff
[  791.661300][ T7820] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  791.668224][ T7820] Bluetooth: Wrong link type (-22)
[  791.673952][ T7820] Bluetooth: Unknown BR/EDR signaling command 0x10
[  791.681093][ T7820] Bluetooth: Wrong link type (-22)
[  791.686603][ T7820] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  791.693535][ T7820] Bluetooth: Wrong link type (-22)
[  791.700758][ T7820] Bluetooth: hci2: link tx timeout
[  791.845961][ T7769] usb 2-1: USB disconnect, device number 7
[  791.887845][ T8517] syz.2.570: attempt to access beyond end of device
[  791.887845][ T8517] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  791.905289][    C1] eth0: bad gso: type: 1, size: 1408
[  792.121463][ T8517] syz.2.570: attempt to access beyond end of device
[  792.121463][ T8517] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  792.297595][ T8522] syz.2.570: attempt to access beyond end of device
[  792.297595][ T8522] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  792.602015][ T7820] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  795.436274][ T7773] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  795.493207][ T8547] loop0: detected capacity change from 0 to 1024
[  795.755823][ T7773] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  795.769542][ T7773] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  795.779249][ T7773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.876315][ T7773] usb 4-1: config 0 descriptor??
[  795.948518][ T7773] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  796.009787][    C1] eth0: bad gso: type: 1, size: 1408
[  796.295033][ T8549] dccp_close: ABORT with 1 bytes unread
[  796.796728][    C1] eth0: bad gso: type: 1, size: 1408
[  797.820327][ T7820] Bluetooth: hci4: link tx timeout
[  797.826170][ T7820] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  797.835385][ T4436] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  798.191513][ T5111] usb 4-1: USB disconnect, device number 3
[  800.290872][ T4436] Bluetooth: hci4: command 0x0406 tx timeout
[  802.265342][    C1] eth0: bad gso: type: 1, size: 1408
[  802.552946][ T8590] dccp_close: ABORT with 1 bytes unread
[  803.050490][    C1] eth0: bad gso: type: 1, size: 1408
[  804.009369][ T7822] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  804.009624][ T7822] Bluetooth: hci2: link tx timeout
[  806.832493][ T8620] IPv6: Can't replace route, no match found
[  807.960262][ T7822] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  808.022564][    C1] eth0: bad gso: type: 1, size: 1408
[  808.744947][ T8627] loop0: detected capacity change from 0 to 4096
[  809.007918][ T8645] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  809.112874][ T8646] dccp_close: ABORT with 1 bytes unread
[  811.364170][ T8627] loop0: detected capacity change from 4096 to 0
[  811.547610][    C1] eth0: bad gso: type: 1, size: 1408
[  811.825048][    C1] eth0: bad gso: type: 1, size: 1408
[  811.853661][ T8206] syz-executor: attempt to access beyond end of device
[  811.853661][ T8206] loop0: rw=395265, sector=2, nr_sectors = 2 limit=0
[  811.867601][ T8206] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  811.876279][ T8206] NILFS (loop0): unable to write superblock: err=-5
[  811.883266][ T8206] syz-executor: attempt to access beyond end of device
[  811.883266][ T8206] loop0: rw=395265, sector=4088, nr_sectors = 2 limit=0
[  811.902753][ T8206] Buffer I/O error on dev loop0, logical block 2044, lost sync page write
[  811.914388][ T8206] NILFS (loop0): unable to write superblock: err=-5
[  812.127392][ T7822] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  812.127575][ T7822] Bluetooth: hci3: link tx timeout
[  816.157995][ T7773] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  816.183886][ T7822] Bluetooth: hci3: link tx timeout
[  816.800019][ T7773] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  816.811098][ T7773] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  816.856295][ T7773] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  816.866181][ T7773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  816.874853][ T7773] usb 5-1: SerialNumber: syz
[  816.889013][ T7820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  816.899991][ T7820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  816.927116][ T7820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  816.947669][ T7820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  816.968063][ T7820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  816.978073][ T7820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  817.698205][ T7773] usb 5-1: invalid UAC_HEADER (v1)
[  817.993025][ T7773] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  818.361343][ T7773] usb 5-1: USB disconnect, device number 4
[  818.726896][ T8200] udevd[8200]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  819.036015][ T7822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  819.057798][ T7822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  819.073407][ T4436] Bluetooth: hci0: command tx timeout
[  819.082045][ T7822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  819.099967][ T7822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  819.116955][ T7822] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  819.126905][ T7822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  819.131798][ T8684] dccp_close: ABORT with 1 bytes unread
[  819.867432][ T8695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'.
[  819.878217][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  820.052441][ T8670] chnl_net:caif_netlink_parms(): no params data found
[  820.547333][ T6093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.583120][    C1] eth0: bad gso: type: 1, size: 1408
[  820.816091][ T6093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.031217][ T6093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.152468][ T7820] Bluetooth: hci0: command tx timeout
[  821.257008][ T6093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.305441][ T7820] Bluetooth: hci6: command tx timeout
[  821.312679][ T7820] Bluetooth: hci1: link tx timeout
[  821.467337][ T8688] chnl_net:caif_netlink_parms(): no params data found
[  821.597603][ T8692] loop4: detected capacity change from 0 to 4096
[  821.886279][ T8709] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  822.175823][ T8692] loop4: detected capacity change from 4096 to 0
[  822.303108][ T6093] bridge_slave_1: left allmulticast mode
[  822.310531][ T6093] bridge_slave_1: left promiscuous mode
[  822.317153][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.416244][ T6093] bridge_slave_0: left allmulticast mode
[  822.422688][ T6093] bridge_slave_0: left promiscuous mode
[  822.429651][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.008208][ T8067] syz-executor: attempt to access beyond end of device
[  823.008208][ T8067] loop4: rw=395265, sector=2, nr_sectors = 2 limit=0
[  823.022221][ T8067] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  823.031036][ T8067] NILFS (loop4): unable to write superblock: err=-5
[  823.037965][ T8067] syz-executor: attempt to access beyond end of device
[  823.037965][ T8067] loop4: rw=395265, sector=4088, nr_sectors = 2 limit=0
[  823.052234][ T8067] Buffer I/O error on dev loop4, logical block 2044, lost sync page write
[  823.067273][ T8067] NILFS (loop4): unable to write superblock: err=-5
[  823.224202][ T7820] Bluetooth: hci0: command tx timeout
[  823.383757][ T7820] Bluetooth: hci6: command tx timeout
[  823.453570][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  823.608950][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  823.683965][ T6093] bond0 (unregistering): Released all slaves
[  823.958645][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.966517][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.974460][ T8670] bridge_slave_0: entered allmulticast mode
[  823.991449][ T8670] bridge_slave_0: entered promiscuous mode
[  824.437978][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.445693][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.453599][ T8670] bridge_slave_1: entered allmulticast mode
[  824.462240][ T8670] bridge_slave_1: entered promiscuous mode
[  824.986217][ T6093] hsr_slave_0: left promiscuous mode
[  825.038841][ T6093] hsr_slave_1: left promiscuous mode
[  825.102287][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.116316][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.124431][ T8734] loop2: detected capacity change from 0 to 8
[  825.164069][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.172247][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.249747][ T6093] veth1_macvtap: left promiscuous mode
[  825.255741][ T6093] veth0_macvtap: left promiscuous mode
[  825.261977][ T6093] veth1_vlan: left promiscuous mode
[  825.267439][ T6093] veth0_vlan: left promiscuous mode
[  825.302901][ T7820] Bluetooth: hci0: command tx timeout
[  825.520963][ T7820] Bluetooth: hci6: command tx timeout
[  826.049444][ T8733] dccp_close: ABORT with 1 bytes unread
[  826.868342][ T6093] team0 (unregistering): Port device team_slave_1 removed
[  826.924845][ T6093] team0 (unregistering): Port device team_slave_0 removed
[  827.310287][ T8670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  827.551156][ T7820] Bluetooth: hci6: command tx timeout
[  827.688442][ T8670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  828.022042][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.030128][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.039636][ T8688] bridge_slave_0: entered allmulticast mode
[  828.048898][ T8688] bridge_slave_0: entered promiscuous mode
[  828.151158][ T8670] team0: Port device team_slave_0 added
[  828.203602][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.211365][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.219027][ T8688] bridge_slave_1: entered allmulticast mode
[  828.227700][ T8688] bridge_slave_1: entered promiscuous mode
[  828.245131][ T8670] team0: Port device team_slave_1 added
[  828.943066][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  828.958029][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_0
[  828.965559][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  828.994572][ T8670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  829.085604][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  829.250381][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_1
[  829.257770][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  829.284406][ T8670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  829.452841][ T8688] team0: Port device team_slave_0 added
[  829.568930][ T8688] team0: Port device team_slave_1 added
[  829.967135][ T6093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.040399][ T8670] hsr_slave_0: entered promiscuous mode
[  830.067657][ T8670] hsr_slave_1: entered promiscuous mode
[  830.223624][ T6093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.266177][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  830.273652][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  830.300243][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  830.405471][ T6093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.454525][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  830.463423][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  830.491501][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  830.563880][ T6093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.185124][ T8688] hsr_slave_0: entered promiscuous mode
[  831.283635][ T8688] hsr_slave_1: entered promiscuous mode
[  831.297223][ T8751] loop0: detected capacity change from 0 to 256
[  831.342237][ T8688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  831.350416][ T8688] Cannot create hsr debugfs directory
[  831.360008][ T8751] exfat: Deprecated parameter 'namecase'
[  831.479634][ T6093] bridge_slave_1: left allmulticast mode
[  831.485956][ T6093] bridge_slave_1: left promiscuous mode
[  831.492888][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.577267][ T6093] bridge_slave_0: left allmulticast mode
[  831.583828][ T6093] bridge_slave_0: left promiscuous mode
[  831.590729][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.620002][ T8751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  832.180943][ T7822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  832.202488][ T7822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  832.256540][ T7822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  832.316632][ T7822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  832.333845][ T7822] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  832.343997][ T7822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  832.590957][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  832.631616][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  832.657070][ T6093] bond0 (unregistering): Released all slaves
[  832.827912][ T7822] Bluetooth: hci5: link tx timeout
[  832.833430][ T7822] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  832.884997][ T4684] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  833.329217][ T4684] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53
[  833.339011][ T4684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.349392][ T4684] usb 5-1: Product: syz
[  833.355213][ T4684] usb 5-1: Manufacturer: syz
[  833.362387][ T4684] usb 5-1: SerialNumber: syz
[  833.413071][ T4684] usb 5-1: config 0 descriptor??
[  833.438905][ T4684] gspca_main: spca506-2.14.0 probing 99fa:8988
[  834.238152][ T6093] hsr_slave_0: left promiscuous mode
[  834.250345][ T6093] hsr_slave_1: left promiscuous mode
[  834.287596][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  834.295749][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  834.316829][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  834.328577][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  834.366545][ T6093] veth0_macvtap: left promiscuous mode
[  834.373214][ T6093] veth1_vlan: left promiscuous mode
[  834.378840][ T6093] veth0_vlan: left promiscuous mode
[  834.421498][ T7822] Bluetooth: hci2: command tx timeout
[  834.911472][ T7822] Bluetooth: hci5: command 0x0406 tx timeout
[  835.234369][ T6093] team0 (unregistering): Port device team_slave_1 removed
[  835.330131][ T6093] team0 (unregistering): Port device team_slave_0 removed
[  836.077806][ T1469] usb 5-1: USB disconnect, device number 5
[  836.511416][ T7820] Bluetooth: hci2: command tx timeout
[  837.297246][ T8688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.416363][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'.
[  837.518615][ T8770] sctp: failed to load transform for md5: -2
[  837.686463][ T8688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.878492][ T6093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.962382][ T8670] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  838.177555][ T8688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.276720][ T6093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.361156][ T8670] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  838.488038][ T8688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.584278][ T7820] Bluetooth: hci2: command tx timeout
[  838.636242][ T6093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.714858][ T8670] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  838.770517][ T8758] chnl_net:caif_netlink_parms(): no params data found
[  838.889165][ T6093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.967421][ T8670] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  839.731758][ T6093] bridge_slave_1: left allmulticast mode
[  839.737715][ T6093] bridge_slave_1: left promiscuous mode
[  839.744668][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.912696][ T6093] bridge_slave_0: left allmulticast mode
[  839.918665][ T6093] bridge_slave_0: left promiscuous mode
[  839.928000][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.373546][ T7820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  840.495223][ T7820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  840.519413][ T7820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  840.537484][ T7820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  840.559289][ T7820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  840.579842][ T7820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  840.589741][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  840.639238][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  840.661351][ T7820] Bluetooth: hci2: command tx timeout
[  840.704026][ T6093] bond0 (unregistering): Released all slaves
[  840.727020][ T8688] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  840.976536][ T8688] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  841.115416][ T8688] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  841.336796][ T8800] loop4: detected capacity change from 0 to 256
[  841.361997][ T8800] exfat: Deprecated parameter 'namecase'
[  841.397697][ T8800] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  841.521261][ T8688] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  841.957819][ T6093] hsr_slave_0: left promiscuous mode
[  841.967225][ T6093] hsr_slave_1: left promiscuous mode
[  841.979203][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.987125][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.025065][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  842.033339][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  842.054325][ T6093] veth1_macvtap: left promiscuous mode
[  842.060174][ T6093] veth0_macvtap: left promiscuous mode
[  842.066584][ T6093] veth1_vlan: left promiscuous mode
[  842.072666][ T6093] veth0_vlan: left promiscuous mode
[  842.649165][ T6093] team0 (unregistering): Port device team_slave_1 removed
[  842.670032][ T7820] Bluetooth: hci3: command tx timeout
[  842.702258][ T6093] team0 (unregistering): Port device team_slave_0 removed
[  843.361412][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.369212][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.378131][ T8758] bridge_slave_0: entered allmulticast mode
[  843.387604][ T8758] bridge_slave_0: entered promiscuous mode
[  843.422739][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.430812][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.442958][ T8758] bridge_slave_1: entered allmulticast mode
[  843.452819][ T8758] bridge_slave_1: entered promiscuous mode
[  843.753579][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  843.760321][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  843.837943][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  844.024880][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  844.317889][ T8670] 8021q: adding VLAN 0 to HW filter on device bond0
[  844.396351][ T8758] team0: Port device team_slave_0 added
[  844.479374][ T8758] team0: Port device team_slave_1 added
[  844.658337][ T8670] 8021q: adding VLAN 0 to HW filter on device team0
[  844.733510][ T6093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.749543][ T7820] Bluetooth: hci3: command tx timeout
[  844.918704][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  844.926975][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  844.954350][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  844.982325][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  844.989537][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  845.016907][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  845.036276][ T8791] chnl_net:caif_netlink_parms(): no params data found
[  845.087703][ T6093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.238202][ T6093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.363379][ T6093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.405917][ T7822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  845.416022][ T7822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  845.420472][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.426256][ T7822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  845.430953][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  845.444722][ T7822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  845.449438][ T7822] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  845.554476][ T7822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  845.676951][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.684964][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  845.938690][ T8758] hsr_slave_0: entered promiscuous mode
[  845.972962][ T8758] hsr_slave_1: entered promiscuous mode
[  846.003412][ T8758] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  846.011774][ T8758] Cannot create hsr debugfs directory
[  846.385625][ T6093] bridge_slave_1: left allmulticast mode
[  846.391681][ T6093] bridge_slave_1: left promiscuous mode
[  846.398374][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.442771][ T6093] bridge_slave_0: left allmulticast mode
[  846.448723][ T6093] bridge_slave_0: left promiscuous mode
[  846.455717][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.481949][ T6093] bridge_slave_1: left allmulticast mode
[  846.487983][ T6093] bridge_slave_1: left promiscuous mode
[  846.494928][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.528589][ T6093] bridge_slave_0: left allmulticast mode
[  846.535205][ T6093] bridge_slave_0: left promiscuous mode
[  846.542205][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.851654][ T7822] Bluetooth: hci3: command tx timeout
[  847.568052][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  847.587077][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  847.616895][ T6093] bond0 (unregistering): Released all slaves
[  847.623355][ T7822] Bluetooth: hci1: command tx timeout
[  847.653811][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  847.670300][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  847.703446][ T6093] bond0 (unregistering): Released all slaves
[  848.695076][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.706091][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.716135][ T8791] bridge_slave_0: entered allmulticast mode
[  848.731934][ T8791] bridge_slave_0: entered promiscuous mode
[  848.767882][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.776326][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.784565][ T8791] bridge_slave_1: entered allmulticast mode
[  848.794116][ T8791] bridge_slave_1: entered promiscuous mode
[  848.818796][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.913261][ T7822] Bluetooth: hci3: command tx timeout
[  849.107801][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  849.139267][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  849.378139][ T8688] 8021q: adding VLAN 0 to HW filter on device team0
[  849.638005][ T8791] team0: Port device team_slave_0 added
[  849.683050][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.691290][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.719522][ T7822] Bluetooth: hci1: command tx timeout
[  849.782228][ T6093] hsr_slave_0: left promiscuous mode
[  849.816068][ T6093] hsr_slave_1: left promiscuous mode
[  849.840117][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  849.849445][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.871146][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  849.878942][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.961433][ T6093] hsr_slave_0: left promiscuous mode
[  849.974935][ T6093] hsr_slave_1: left promiscuous mode
[  850.007467][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  850.015442][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  850.045071][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  850.054725][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  850.087615][ T6093] veth1_macvtap: left promiscuous mode
[  850.094144][ T6093] veth0_macvtap: left promiscuous mode
[  850.100117][ T6093] veth1_vlan: left promiscuous mode
[  850.106096][ T6093] veth0_vlan: left promiscuous mode
[  850.119046][ T6093] veth0_macvtap: left promiscuous mode
[  850.125596][ T6093] veth1_vlan: left promiscuous mode
[  850.131437][ T6093] veth0_vlan: left promiscuous mode
[  851.337978][ T6093] team0 (unregistering): Port device team_slave_1 removed
[  851.373333][ T6093] team0 (unregistering): Port device team_slave_0 removed
[  851.782388][ T7822] Bluetooth: hci1: command tx timeout
[  852.062911][ T6093] team0 (unregistering): Port device team_slave_1 removed
[  852.152436][ T6093] team0 (unregistering): Port device team_slave_0 removed
[  852.447869][ T8791] team0: Port device team_slave_1 added
[  853.030953][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.038758][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  853.084986][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  853.092472][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  853.122129][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  853.215109][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  853.224754][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  853.252261][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  853.476450][ T8791] hsr_slave_0: entered promiscuous mode
[  853.486215][ T8791] hsr_slave_1: entered promiscuous mode
[  853.496430][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  853.506785][ T8791] Cannot create hsr debugfs directory
[  853.562115][ T8812] chnl_net:caif_netlink_parms(): no params data found
[  853.742480][ T8670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  853.858512][ T8758] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  853.867856][ T7822] Bluetooth: hci1: command tx timeout
[  853.934548][ T8758] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  854.005700][ T8758] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  854.075855][ T8758] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  855.012532][ T8670] veth0_vlan: entered promiscuous mode
[  855.245979][ T8670] veth1_vlan: entered promiscuous mode
[  855.675707][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.684705][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.692839][ T8812] bridge_slave_0: entered allmulticast mode
[  855.702503][ T8812] bridge_slave_0: entered promiscuous mode
[  855.890990][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.898834][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.908249][ T8812] bridge_slave_1: entered allmulticast mode
[  855.918105][ T8812] bridge_slave_1: entered promiscuous mode
[  856.175654][ T8670] veth0_macvtap: entered promiscuous mode
[  856.223066][ T8670] veth1_macvtap: entered promiscuous mode
[  856.338052][ T8791] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  856.383295][ T8791] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  856.437756][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  856.502019][ T8791] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  856.555877][ T8791] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  856.603560][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0
[  856.623252][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  856.871582][ T8812] team0: Port device team_slave_0 added
[  856.926328][ T8758] 8021q: adding VLAN 0 to HW filter on device team0
[  856.964400][ T8812] team0: Port device team_slave_1 added
[  856.984372][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_0
[  857.033399][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  857.196041][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.204037][ T4684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.311201][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_1
[  857.345667][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  857.353501][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  857.380092][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  857.461951][ T4684] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.469813][ T4684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  857.527476][ T8670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  857.536708][ T8670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  857.547587][ T8670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  857.556850][ T8670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  857.614306][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  857.624752][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  857.652181][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  858.011516][ T8812] hsr_slave_0: entered promiscuous mode
[  858.055294][ T8812] hsr_slave_1: entered promiscuous mode
[  858.075510][ T8812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  858.083484][ T8812] Cannot create hsr debugfs directory
[  858.491888][ T8688] veth0_vlan: entered promiscuous mode
[  858.682230][ T8688] veth1_vlan: entered promiscuous mode
[  859.034819][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[  859.298019][ T8791] 8021q: adding VLAN 0 to HW filter on device team0
[  859.737912][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.745832][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  859.758893][ T8688] veth0_macvtap: entered promiscuous mode
[  859.882442][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.890253][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  859.923618][ T8688] veth1_macvtap: entered promiscuous mode
[  860.417976][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  860.428918][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.445746][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  860.594199][ T8791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  860.695304][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.707697][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.727790][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  860.846171][ T8812] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  860.946838][ T8812] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  861.030392][ T8688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  861.043085][ T8688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  861.054952][ T8688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  861.064811][ T8688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  861.113701][ T8812] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  861.202875][ T8812] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  861.530083][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  862.246982][ T8758] veth0_vlan: entered promiscuous mode
[  862.335127][ T8758] veth1_vlan: entered promiscuous mode
[  862.924340][ T8758] veth0_macvtap: entered promiscuous mode
[  863.030024][ T8758] veth1_macvtap: entered promiscuous mode
[  863.063826][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.084044][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  863.421505][ T8758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  863.432442][ T8758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  863.444212][ T8758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  863.457098][ T8758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  863.474159][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  863.497332][ T8812] 8021q: adding VLAN 0 to HW filter on device team0
[  863.688894][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.696936][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  863.716585][ T8758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  863.727616][ T8758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  863.739666][ T8758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  863.750516][ T8758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  863.766381][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  863.879279][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.887176][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.194107][ T8791] veth0_vlan: entered promiscuous mode
[  864.219430][ T8758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  864.228878][ T8758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  864.239039][ T8758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  864.248261][ T8758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  864.416458][ T8791] veth1_vlan: entered promiscuous mode
[  864.952397][ T8791] veth0_macvtap: entered promiscuous mode
[  865.055117][ T8791] veth1_macvtap: entered promiscuous mode
[  865.361272][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  865.372309][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  865.384224][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  865.396028][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  865.406235][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  865.417097][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  865.433606][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  865.740867][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  865.751685][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  865.762150][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  865.775047][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  865.786249][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  865.797116][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  865.813396][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  866.173733][ T8791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.183029][ T8791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.192305][ T8791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.201486][ T8791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  867.171870][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.326489][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.335092][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.738233][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.747543][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.801399][ T8812] veth0_vlan: entered promiscuous mode
[  870.953654][ T8812] veth1_vlan: entered promiscuous mode
[  870.967995][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.977543][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.329892][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.338196][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.532645][ T8812] veth0_macvtap: entered promiscuous mode
[  871.683300][ T8812] veth1_macvtap: entered promiscuous mode
[  871.821707][ T8990] syz.3.661: attempt to access beyond end of device
[  871.821707][ T8990] loop3: rw=0, sector=64, nr_sectors = 1 limit=0
[  871.835604][ T8990] syz.3.661: attempt to access beyond end of device
[  871.835604][ T8990] loop3: rw=0, sector=256, nr_sectors = 1 limit=0
[  871.849265][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  871.859709][ T8990] syz.3.661: attempt to access beyond end of device
[  871.859709][ T8990] loop3: rw=0, sector=512, nr_sectors = 1 limit=0
[  871.884926][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  871.981632][ T8990] syz.3.661: attempt to access beyond end of device
[  871.981632][ T8990] loop3: rw=0, sector=64, nr_sectors = 2 limit=0
[  871.995485][ T8990] syz.3.661: attempt to access beyond end of device
[  871.995485][ T8990] loop3: rw=0, sector=512, nr_sectors = 2 limit=0
[  872.012689][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  872.024010][ T8990] syz.3.661: attempt to access beyond end of device
[  872.024010][ T8990] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  872.037814][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  872.081568][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  872.093522][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.106583][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  872.118671][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.129239][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  872.140146][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.150467][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  872.161411][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.175972][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  872.241132][ T8990] syz.3.661: attempt to access beyond end of device
[  872.241132][ T8990] loop3: rw=0, sector=64, nr_sectors = 4 limit=0
[  872.254918][ T8990] syz.3.661: attempt to access beyond end of device
[  872.254918][ T8990] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  872.268642][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  872.279027][ T8990] syz.3.661: attempt to access beyond end of device
[  872.279027][ T8990] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  872.293007][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  872.323422][ T8990] syz.3.661: attempt to access beyond end of device
[  872.323422][ T8990] loop3: rw=0, sector=64, nr_sectors = 8 limit=0
[  872.338427][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  872.351634][ T8990] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  872.361693][ T8990] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  872.463336][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.474284][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.485060][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.495926][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.514870][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.533102][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.544416][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.555558][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.571577][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  872.703250][ T8812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.712580][ T8812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  872.723725][ T8812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  872.733415][ T8812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  873.515311][ T9006] loop3: detected capacity change from 0 to 256
[  873.629999][ T9006] exfat: Deprecated parameter 'namecase'
[  873.772465][ T9006] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  873.801792][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.809996][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.154660][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.164450][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.413900][    C1] eth0: bad gso: type: 1, size: 1408
[  875.483535][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.494524][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.759491][ T3684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.891297][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.902617][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.986875][ T3684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.217383][ T3684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.465579][ T3684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.887046][ T3684] bridge_slave_1: left allmulticast mode
[  876.893218][ T3684] bridge_slave_1: left promiscuous mode
[  876.899986][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.992997][ T3684] bridge_slave_0: left allmulticast mode
[  876.998951][ T3684] bridge_slave_0: left promiscuous mode
[  877.005952][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.849922][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  879.660303][ T9035] loop0: detected capacity change from 0 to 40427
[  879.731529][ T9035] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  879.739598][ T9035] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  879.825980][ T9035] F2FS-fs (loop0): Found nat_bits in checkpoint
[  880.045870][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  880.150373][ T9035] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  880.158475][ T9035] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  880.176509][ T3684] bond0 (unregistering): Released all slaves
[  882.782004][ T7822] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  892.746613][ T7822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  894.532979][ T3684] hsr_slave_0: left promiscuous mode
[  894.615536][ T3684] hsr_slave_1: left promiscuous mode
[  894.658991][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  894.667157][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  894.741533][ T9043] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  894.751380][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  894.759135][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  894.949052][ T3684] veth1_macvtap: left promiscuous mode
[  894.955109][ T3684] veth0_macvtap: left promiscuous mode
[  894.962093][ T3684] veth1_vlan: left promiscuous mode
[  894.967736][ T3684] veth0_vlan: left promiscuous mode
[  895.003013][ T4436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  895.015738][ T4436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  895.025668][ T4436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  895.143232][ T4436] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  895.157185][ T4436] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  895.177256][ T7823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  895.190336][ T7823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  895.217500][ T7823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  895.230303][ T7823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  895.342279][ T7823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  895.358473][ T7823] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  895.368447][ T7823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  895.666697][ T7823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  895.699671][ T7823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  895.713099][ T7823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  895.731240][ T7823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  895.776014][ T7823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  895.816342][ T7823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  896.302426][ T3684] team0 (unregistering): Port device team_slave_1 removed
[  896.420787][ T3684] team0 (unregistering): Port device team_slave_0 removed
[  897.483842][ T7823] Bluetooth: hci5: command tx timeout
[  897.489525][ T7823] Bluetooth: hci4: command tx timeout
[  898.003725][ T7823] Bluetooth: hci0: command tx timeout
[  899.216061][ T9057] chnl_net:caif_netlink_parms(): no params data found
[  899.537347][ T7822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  899.546759][ T7822] Bluetooth: hci4: command tx timeout
[  899.558196][ T7822] Bluetooth: hci5: command tx timeout
[  899.566323][ T9056] chnl_net:caif_netlink_parms(): no params data found
[  899.673872][ T4436] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  899.688600][ T4436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  899.708724][ T4436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  899.741538][ T4436] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  899.772405][ T4436] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  899.835455][ T3684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.022647][ T4436] Bluetooth: hci0: command tx timeout
[  900.253474][ T3684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.463040][ T3684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.537913][ T9060] chnl_net:caif_netlink_parms(): no params data found
[  900.659441][ T3684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.618799][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.627016][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.635206][ T9057] bridge_slave_0: entered allmulticast mode
[  901.645033][ T9057] bridge_slave_0: entered promiscuous mode
[  901.659265][ T4436] Bluetooth: hci4: command tx timeout
[  901.660171][ T7823] Bluetooth: hci5: command tx timeout
[  901.861426][ T7823] Bluetooth: hci2: command tx timeout
[  901.887882][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.896213][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.904404][ T9056] bridge_slave_0: entered allmulticast mode
[  901.917048][ T9056] bridge_slave_0: entered promiscuous mode
[  901.966875][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.974832][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.983147][ T9057] bridge_slave_1: entered allmulticast mode
[  901.994131][ T9057] bridge_slave_1: entered promiscuous mode
[  902.102359][ T7823] Bluetooth: hci0: command tx timeout
[  902.122452][ T3684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.148165][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.156746][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.164785][ T9056] bridge_slave_1: entered allmulticast mode
[  902.174609][ T9056] bridge_slave_1: entered promiscuous mode
[  902.344084][ T3684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.532028][ T3684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.665854][ T3684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.692136][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.700440][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  902.803335][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  902.833092][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  902.902308][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  902.936960][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  903.049963][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.058017][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.066184][ T9060] bridge_slave_0: entered allmulticast mode
[  903.075884][ T9060] bridge_slave_0: entered promiscuous mode
[  903.220415][ T9084] chnl_net:caif_netlink_parms(): no params data found
[  903.250875][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.258711][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.266825][ T9060] bridge_slave_1: entered allmulticast mode
[  903.276293][ T9060] bridge_slave_1: entered promiscuous mode
[  903.294857][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  903.303286][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  903.356665][ T9057] team0: Port device team_slave_0 added
[  903.418571][ T9056] team0: Port device team_slave_0 added
[  903.553321][ T9057] team0: Port device team_slave_1 added
[  903.623605][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  903.642605][ T9056] team0: Port device team_slave_1 added
[  903.722176][ T7823] Bluetooth: hci5: command tx timeout
[  903.727874][ T7823] Bluetooth: hci4: command tx timeout
[  903.946262][ T4436] Bluetooth: hci2: command tx timeout
[  903.977772][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  904.147256][ T3684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.182031][ T4436] Bluetooth: hci0: command tx timeout
[  904.199254][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  904.207175][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  904.234004][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  904.397022][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  904.404460][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  904.431082][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  904.453461][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  904.460895][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  904.492533][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  904.556618][ T3684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.612638][ T9060] team0: Port device team_slave_0 added
[  904.624721][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  904.632276][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  904.659017][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  904.784245][ T3684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.855372][ T9060] team0: Port device team_slave_1 added
[  904.962454][ T3684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.167430][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  905.174595][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  905.218992][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  905.226672][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  905.255236][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  905.483195][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  905.495924][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  905.524106][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  905.615555][ T9057] hsr_slave_0: entered promiscuous mode
[  905.663141][ T9057] hsr_slave_1: entered promiscuous mode
[  905.858220][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.866328][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.874495][ T9084] bridge_slave_0: entered allmulticast mode
[  905.887373][ T9084] bridge_slave_0: entered promiscuous mode
[  906.137851][ T4436] Bluetooth: hci2: command tx timeout
[  906.231575][ T9056] hsr_slave_0: entered promiscuous mode
[  906.257160][ T9056] hsr_slave_1: entered promiscuous mode
[  906.415879][ T9056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  906.425618][ T9056] Cannot create hsr debugfs directory
[  906.865623][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.874030][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.882193][ T9084] bridge_slave_1: entered allmulticast mode
[  906.892019][ T9084] bridge_slave_1: entered promiscuous mode
[  906.971299][ T3684] bridge_slave_1: left allmulticast mode
[  906.977374][ T3684] bridge_slave_1: left promiscuous mode
[  906.984399][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.102656][ T3684] bridge_slave_0: left allmulticast mode
[  907.108596][ T3684] bridge_slave_0: left promiscuous mode
[  907.115653][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.181631][ T3684] bridge_slave_1: left allmulticast mode
[  907.187749][ T3684] bridge_slave_1: left promiscuous mode
[  907.194920][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.256060][ T3684] bridge_slave_0: left allmulticast mode
[  907.262216][ T3684] bridge_slave_0: left promiscuous mode
[  907.268913][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.345188][ T3684] bridge_slave_1: left allmulticast mode
[  907.352392][ T3684] bridge_slave_1: left promiscuous mode
[  907.359173][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.431986][ T3684] bridge_slave_0: left allmulticast mode
[  907.442001][ T3684] bridge_slave_0: left promiscuous mode
[  907.448718][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.341836][ T4436] Bluetooth: hci2: command tx timeout
[  909.531713][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.583671][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.632963][ T3684] bond0 (unregistering): Released all slaves
[  909.674422][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.772781][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.819125][ T3684] bond0 (unregistering): Released all slaves
[  909.965601][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.995137][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  910.023871][ T3684] bond0 (unregistering): Released all slaves
[  910.825856][ T9147] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in;
[  910.825856][ T9147]    program syz.4.676 not setting count and/or reply_len properly
[  911.365430][ T9060] hsr_slave_0: entered promiscuous mode
[  911.423911][ T9060] hsr_slave_1: entered promiscuous mode
[  911.481863][ T9060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  911.489714][ T9060] Cannot create hsr debugfs directory
[  911.581326][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  911.982572][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  912.470571][    C1] sched: RT throttling activated
[  913.108883][ T9084] team0: Port device team_slave_0 added
[  913.398257][ T9084] team0: Port device team_slave_1 added
[  913.841542][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.848763][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.875668][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.961977][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.969202][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.997082][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  914.116547][ T3684] hsr_slave_0: left promiscuous mode
[  914.155118][ T3684] hsr_slave_1: left promiscuous mode
[  914.168464][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  914.176586][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  914.191650][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  914.200890][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  914.200955][ T9154] loop4: detected capacity change from 0 to 512
[  914.243160][ T9154] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.679: corrupted in-inode xattr: invalid ea_ino
[  914.258105][ T9154] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.679: couldn't read orphan inode 15 (err -117)
[  914.294457][ T3684] hsr_slave_0: left promiscuous mode
[  914.302067][ T9154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  914.318848][ T3684] hsr_slave_1: left promiscuous mode
[  914.330955][ T9154] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.679: Directory hole found for htree leaf block 0
[  914.351034][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  914.359069][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  914.379845][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  914.388172][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  914.430273][ T3684] hsr_slave_0: left promiscuous mode
[  914.447039][ T3684] hsr_slave_1: left promiscuous mode
[  914.456146][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  914.464188][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  914.481683][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  914.489461][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  914.494018][ T8812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.583585][ T3684] veth1_macvtap: left promiscuous mode
[  914.589420][ T3684] veth0_macvtap: left promiscuous mode
[  914.595772][ T3684] veth1_vlan: left promiscuous mode
[  914.601749][ T3684] veth0_vlan: left promiscuous mode
[  914.612350][ T3684] veth1_macvtap: left promiscuous mode
[  914.618155][ T3684] veth0_macvtap: left promiscuous mode
[  914.625690][ T3684] veth1_vlan: left promiscuous mode
[  914.631976][ T3684] veth0_vlan: left promiscuous mode
[  914.655319][ T3684] veth1_macvtap: left promiscuous mode
[  914.661569][ T3684] veth0_macvtap: left promiscuous mode
[  914.667642][ T3684] veth1_vlan: left promiscuous mode
[  914.673657][ T3684] veth0_vlan: left promiscuous mode
[  916.436469][ T3684] team0 (unregistering): Port device team_slave_1 removed
[  916.633408][ T3684] team0 (unregistering): Port device team_slave_0 removed
[  917.754409][ T3684] team0 (unregistering): Port device team_slave_1 removed
[  917.828429][ T3684] team0 (unregistering): Port device team_slave_0 removed
[  918.812431][ T3684] team0 (unregistering): Port device team_slave_1 removed
[  918.933416][ T3684] team0 (unregistering): Port device team_slave_0 removed
[  919.585926][ T9084] hsr_slave_0: entered promiscuous mode
[  919.597393][ T9084] hsr_slave_1: entered promiscuous mode
[  919.607058][ T9084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  919.618368][ T9084] Cannot create hsr debugfs directory
[  921.185007][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.686'.
[  921.366821][ T9056] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  921.426679][ T9056] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  921.682361][ T9057] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  921.721568][ T9056] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  921.831950][ T9056] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  921.872628][ T9057] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  921.899166][ T9057] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  922.133127][ T9057] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  923.038445][ T9060] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  923.173424][ T9060] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  923.255519][ T9084] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  923.334343][ T9060] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  923.369541][ T9084] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  923.432392][ T9084] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  923.482553][ T9060] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  923.591584][ T9084] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  923.675869][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.016356][ T9056] 8021q: adding VLAN 0 to HW filter on device team0
[  924.146167][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.346934][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.354948][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.671279][ T9057] 8021q: adding VLAN 0 to HW filter on device team0
[  925.558850][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.566928][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.503613][ T9056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  926.515604][ T9056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  926.548410][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.556399][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.595465][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.603342][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.990086][ T9057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  927.002612][ T9057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  927.559687][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0
[  927.691627][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0
[  927.856405][ T9084] 8021q: adding VLAN 0 to HW filter on device team0
[  927.872581][ T9207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  928.072959][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state
[  928.080972][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  928.187329][ T9060] 8021q: adding VLAN 0 to HW filter on device team0
[  928.256851][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state
[  928.264839][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  928.485780][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state
[  928.493691][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  928.510292][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state
[  928.518199][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  928.819322][ T9084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  928.834428][ T9084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  929.064489][ T9060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  929.640113][ T9214] loop4: detected capacity change from 0 to 1024
[  929.904709][ T9214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  930.130966][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  930.463301][ T8812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.606538][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  930.919697][ T9056] veth0_vlan: entered promiscuous mode
[  931.147573][ T9056] veth1_vlan: entered promiscuous mode
[  931.495529][ T9057] veth0_vlan: entered promiscuous mode
[  931.666078][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  931.695620][ T9057] veth1_vlan: entered promiscuous mode
[  931.741401][ T9056] veth0_macvtap: entered promiscuous mode
[  931.855070][ T9056] veth1_macvtap: entered promiscuous mode
[  931.959330][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  932.273942][ T9057] veth0_macvtap: entered promiscuous mode
[  932.300719][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  932.352438][ T9057] veth1_macvtap: entered promiscuous mode
[  932.427554][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  932.438610][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  932.456050][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  932.561064][ T9237] loop4: detected capacity change from 0 to 128
[  932.654291][ T9056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  932.667833][ T9056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  932.680775][ T9056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  932.689873][ T9056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  932.718733][ T9084] veth0_vlan: entered promiscuous mode
[  932.733957][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  932.747180][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  932.763832][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  932.808971][ T9237] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  932.848847][ T9237] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  932.949724][ T9084] veth1_vlan: entered promiscuous mode
[  932.964144][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  932.978696][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  932.990312][ T9057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  933.001508][ T9057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  933.017231][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  933.203782][ T9060] veth0_vlan: entered promiscuous mode
[  933.364847][ T9057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  933.376544][ T9057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.388164][ T9057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.398090][ T9057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  933.455413][ T9060] veth1_vlan: entered promiscuous mode
[  933.515706][ T9084] veth0_macvtap: entered promiscuous mode
[  933.660349][ T9084] veth1_macvtap: entered promiscuous mode
[  933.958775][ T9060] veth0_macvtap: entered promiscuous mode
[  933.988334][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  933.999353][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.009807][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  934.023608][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.041482][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  934.072595][ T8812] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  934.139753][ T9060] veth1_macvtap: entered promiscuous mode
[  934.282904][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  934.294280][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.305767][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  934.316767][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.327019][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  934.337887][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.360042][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  934.552030][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  934.565008][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.577678][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  934.591694][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.603219][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  934.614183][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.630045][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  934.804281][ T9084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  934.813605][ T9084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  934.822950][ T9084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  934.832188][ T9084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  934.927558][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  934.938471][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.950264][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  934.961064][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.971394][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  934.984931][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  934.996615][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  935.007509][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  935.023541][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  935.377394][ T9060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  935.392287][ T9060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  935.405384][ T9060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  935.414961][ T9060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  936.030293][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.694'.
[  939.334943][ T9296] loop4: detected capacity change from 0 to 1024
[  939.603309][ T9296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.113656][ T8812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.494960][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  942.503281][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.809506][ T9351] netlink: 288 bytes leftover after parsing attributes in process `syz.4.701'.
[  942.976370][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  942.984772][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.993762][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  943.002055][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  943.258836][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  943.267219][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  944.001936][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  944.002046][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  944.361790][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  944.361899][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  944.514696][ T9364] dccp_close: ABORT with 1 bytes unread
[  945.185396][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.194113][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.479318][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.487696][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.681531][   T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  945.961949][   T44] usb 5-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33
[  945.972209][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.050365][   T44] usb 5-1: config 0 descriptor??
[  946.118270][   T44] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG
[  946.345484][   T44] usb 5-1: USB disconnect, device number 6
[  946.447287][ T4436] Bluetooth: hci0: unexpected cc 0x0403 length: 65 > 1
[  946.692929][ T3336] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19
[  946.701981][ T3336] =====================================================
[  946.709321][ T3336] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2ac6/0x39c0
[  946.717048][ T3336]  nci_ntf_packet+0x2ac6/0x39c0
[  946.722242][ T3336]  nci_rx_work+0x408/0x6f0
[  946.726860][ T3336]  process_scheduled_works+0xae0/0x1c40
[  946.732951][ T3336]  worker_thread+0xea5/0x1520
[  946.737865][ T3336]  kthread+0x3e2/0x540
[  946.746986][ T3336]  ret_from_fork+0x6d/0x90
[  946.754762][ T3336]  ret_from_fork_asm+0x1a/0x30
[  946.764778][ T3336] 
[  946.767231][ T3336] Uninit was created at:
[  946.773507][ T3336]  kmem_cache_alloc_node_noprof+0x6bf/0xb80
[  946.780148][ T3336]  kmalloc_reserve+0x13d/0x4a0
[  946.785331][ T3336]  __alloc_skb+0x363/0x7b0
[  946.790017][ T3336]  virtual_ncidev_write+0x6d/0x390
[  946.795694][ T3336]  vfs_write+0x493/0x1550
[  946.800257][ T3336]  ksys_write+0x20f/0x4c0
[  946.804913][ T3336]  __x64_sys_write+0x93/0xe0
[  946.809755][ T3336]  x64_sys_call+0x3490/0x3c10
[  946.814866][ T3336]  do_syscall_64+0xcd/0x1e0
[  946.819623][ T3336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.825963][ T3336] 
[  946.828434][ T3336] CPU: 0 PID: 3336 Comm: kworker/u8:14 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[  946.838908][ T3336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  946.849299][ T3336] Workqueue: nfc2_nci_rx_wq nci_rx_work
[  946.855251][ T3336] =====================================================
[  946.867106][ T3336] Disabling lock debugging due to kernel taint
[  946.874984][ T3336] Kernel panic - not syncing: kmsan.panic set ...
[  946.881560][ T3336] CPU: 0 PID: 3336 Comm: kworker/u8:14 Tainted: G    B              6.10.0-syzkaller-10729-g3c3ff7be9729 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  946.893250][ T3336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  946.903600][ T3336] Workqueue: nfc2_nci_rx_wq nci_rx_work
[  946.909413][ T3336] Call Trace:
[  946.912939][ T3336]  <TASK>
[  946.916005][ T3336]  dump_stack_lvl+0x216/0x2d0
[  946.920964][ T3336]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  946.927074][ T3336]  dump_stack+0x1e/0x30
[  946.931490][ T3336]  panic+0x4e2/0xcd0
[  946.935637][ T3336]  ? kmsan_get_metadata+0xb1/0x1d0
[  946.941060][ T3336]  kmsan_report+0x2d5/0x2e0
[  946.945869][ T3336]  ? __msan_warning+0x95/0x120
[  946.951066][ T3336]  ? nci_ntf_packet+0x2ac6/0x39c0
[  946.956311][ T3336]  ? nci_rx_work+0x408/0x6f0
[  946.961076][ T3336]  ? process_scheduled_works+0xae0/0x1c40
[  946.967028][ T3336]  ? worker_thread+0xea5/0x1520
[  946.972229][ T3336]  ? kthread+0x3e2/0x540
[  946.976700][ T3336]  ? ret_from_fork+0x6d/0x90
[  946.981479][ T3336]  ? ret_from_fork_asm+0x1a/0x30
[  946.986668][ T3336]  ? vprintk_emit+0xae2/0xbc0
[  946.991553][ T3336]  ? vprintk_default+0x3e/0x50
[  946.996501][ T3336]  ? vprintk+0xee/0xf0
[  947.000764][ T3336]  ? _printk+0x157/0x190
[  947.005229][ T3336]  ? kmsan_get_metadata+0x146/0x1d0
[  947.010693][ T3336]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  947.016750][ T3336]  __msan_warning+0x95/0x120
[  947.021563][ T3336]  nci_ntf_packet+0x2ac6/0x39c0
[  947.026625][ T3336]  ? kmsan_get_metadata+0x146/0x1d0
[  947.032089][ T3336]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  947.038399][ T3336]  ? sk_skb_reason_drop+0x1a3/0x510
[  947.043877][ T3336]  nci_rx_work+0x408/0x6f0
[  947.048488][ T3336]  ? __pfx_nci_rx_work+0x10/0x10
[  947.053613][ T3336]  process_scheduled_works+0xae0/0x1c40
[  947.059407][ T3336]  worker_thread+0xea5/0x1520
[  947.064320][ T3336]  kthread+0x3e2/0x540
[  947.068629][ T3336]  ? __pfx_worker_thread+0x10/0x10
[  947.073974][ T3336]  ? __pfx_kthread+0x10/0x10
[  947.078780][ T3336]  ret_from_fork+0x6d/0x90
[  947.083374][ T3336]  ? __pfx_kthread+0x10/0x10
[  947.088183][ T3336]  ret_from_fork_asm+0x1a/0x30
[  947.093184][ T3336]  </TASK>
[  947.096570][ T3336] Kernel Offset: disabled
[  947.100980][ T3336] Rebooting in 86400 seconds..