last executing test programs:

5m20.794017104s ago: executing program 32 (id=199):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})

4m44.771544108s ago: executing program 33 (id=259):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
lstat(&(0x7f0000000cc0)='./file0\x00', 0x0)
pipe2(&(0x7f0000000340)={<r1=>0xffffffffffffffff}, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000))

4m40.429828804s ago: executing program 5 (id=227):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c0c4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}})
sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)

4m38.672057477s ago: executing program 5 (id=280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(r0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

4m33.994677198s ago: executing program 5 (id=286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="64796e2c00b1"])
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dyn,'])
munlockall()
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r6)
socket$inet6(0xa, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @private2, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4m25.219668525s ago: executing program 5 (id=299):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x4172, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x3, &(0x7f0000000380)=0x6)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "7c96af542266f4b9fcf7c89a4e0e1d7dc4fb4cfee4468a841401ef108a5d7aa4", <r7=>0xffffffffffffffff})
mmap(&(0x7f000020f000/0xf000)=nil, 0xf000, 0xb, 0x50, r7, 0x8fa5c000)

4m9.723481999s ago: executing program 34 (id=299):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x4172, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x3, &(0x7f0000000380)=0x6)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "7c96af542266f4b9fcf7c89a4e0e1d7dc4fb4cfee4468a841401ef108a5d7aa4", <r7=>0xffffffffffffffff})
mmap(&(0x7f000020f000/0xf000)=nil, 0xf000, 0xb, 0x50, r7, 0x8fa5c000)

4m2.269068662s ago: executing program 6 (id=271):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006a0008002dbd7000fddbdf250a0000000000000004000b000400"], 0x3c}, 0x1, 0x0, 0x0, 0x20040020}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000140)='./file1\x00', 0x100)
r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x42, 0x8335}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x10})
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x0, @fd_index=0x4, 0x1, &(0x7f0000000240)=[{0x0}], 0x1})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xbd, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaafe65837f482be597f32a87b3aacaaaaa00000000000088a810008100600008050206274b6243514d767e8ec5fd1f8998fbe9bdba6e5495d3a6208815000100ed0f8f8e4e797d6a2d85b568e1139ad51d17f1dcb45a1159e8182867a034e6a81b657d6555f61165a2761d6fe55a3c2aba6d8fe183c4974983ad7d2f34efa3103633c9af4113b325d3f6161fc73aa15095eacc8dbb2951d1e8cf9550afa41dd0dca01d100114f7e505"], 0x0)
r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000000000f6ffffffffffffff00000000000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000500)="ac0792f4", &(0x7f0000000080)=@udp}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9}, 0x20)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e0000006000028014000700ff01000000000000000000000000000106000200090000000600030006000000080015008af50f000500160011000000050008000100000014000600fc0100000000000000000000000000010500160002000000040012"], 0x9c}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0})
keyctl$chown(0x4, r6, 0x0, 0x0)
syz_emit_ethernet(0x29f, &(0x7f0000000580)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x269, 0x3a, 0x0, @mcast1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x5, 0x6, "e70044", 0x9, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [@dstopts={0xc, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0xc9b2}, @generic={0xa5, 0x91, "b16be22322d77944bb01ad429eb9a6731de63fe176cc7f30f39c6e0d14e9458717b9d2f1a7f5ed59d69f6cd4de144d45765d6aab3b107d230ed920a67035e527012e6be967dad909589f86638d58b334e7fd9b53d63d2314a59f8eec6ff363a150c0f628ffcc7ab41aba1b5781cfb96546f56ddbd65a8b11c2712b88a8d5faeadeca0c298c0de17ad2daf32b9b648936b2"}, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x8, 0x0, 0x9, 0x0, 0x0, 0xb, 0x65}, @dstopts={0xff, 0xe, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x81}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x0, @private2}, @generic={0x6, 0x74, "5323ae73f61a51f876c3f6685d51819d8d68d03244a21f7d62206fd524216b0756fde73f13eaeb98d08b8e3ec6f3c3ed9e1fefd9c31acf5b4902cafb18ec21ebdc1849d6b75484f1a41ab86a8a05f444b7c47f360ad7c409fa9d42b5e1ec0ee4c6d7f1a0ed0bfe960e745d5ff0844bbc020f580d"}, @pad1, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x88, 0x0, 0x7, 0x0, 0x0, 0x16, 0x68}], "b3edc3a3d74606f6feba5b5df68c6b59954c77dbac902e89e74ce634365122831f3ba11182171dabc6ebd086becc3b6fba13ec623773af36e96e1b6a15d5ac3009377246e6a1054c8ac7f9d3dec5768d41db83e4dc9a32d42f9e0e7cd532572de1a3941bb764526cf9a12924c350a2f3d5f2d8090dd2b28bf86d1e7a9a2ea316661db22bcb7f9fa109ff62b583902af0227ff2bc7df95e59e2835a9222a3e2e6c6458949366b96e434be4d40b6de70d341e7ea732bfa07aacada05962cd097fabb932bd670c9a62cbe25c4308d0bb6428ab6202e2ff859d136"}}}}}}}, 0x0)

4m1.172220382s ago: executing program 6 (id=327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000780)=0x2, 0xfdef)
bind$inet6(r1, 0x0, 0x0)
syz_emit_ethernet(0xd2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3m43.112889517s ago: executing program 35 (id=327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000780)=0x2, 0xfdef)
bind$inet6(r1, 0x0, 0x0)
syz_emit_ethernet(0xd2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3m34.264750117s ago: executing program 7 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

3m32.783501398s ago: executing program 4 (id=366):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000100)=0x8, 0x4)
syz_io_uring_setup(0xec5, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)={0x1, 0xa0, "6fe83a5c60fe193866de91333d42f739f12ffff7aefe5c22f1b76ac5604732ff440b853157b451471bf77bccbbb4f7766e41b2ecefbc86d9035de423b4bcfb1d6cc077ae7dec42d3dc11ab54321f7a5766cb53a862defa2b67cf37b900c562e6bf1fddb12ddbb12d23f5da4ae8a6ea34685a543b45d3fb01dd9589b62a96eee90974e5f1604633b3cf1e2465badd971abf04b3e61b8924b7e3467ea66b9db04f"})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_procfs(r2, &(0x7f0000000180)='maps\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
close_range(r1, 0xffffffffffffffff, 0x0)

3m25.971563967s ago: executing program 4 (id=369):
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m24.614304283s ago: executing program 4 (id=371):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

3m23.992234127s ago: executing program 4 (id=372):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7070000080000008500000069000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000000})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

3m22.374877902s ago: executing program 4 (id=374):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32], 0x34}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040055}, 0x2402c014)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d39e6908402000d3b3160102030109021b0001000000000904"], 0x0)

3m16.569140915s ago: executing program 36 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

3m16.404064588s ago: executing program 4 (id=379):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x0, 0xa}, 0xc)

2m58.461953242s ago: executing program 37 (id=379):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x0, 0xa}, 0xc)

2m50.595436379s ago: executing program 3 (id=400):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

2m44.1698831s ago: executing program 3 (id=401):
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, 0x0, 0x0)
connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x700, 0x40000, @empty, 0x0, 0xfffffffe}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c)
sendmsg(0xffffffffffffffff, 0x0, 0x20000080)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)

2m42.908226043s ago: executing program 3 (id=404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

2m33.044441727s ago: executing program 9 (id=378):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000100)=0x8, 0x4)
syz_io_uring_setup(0xec5, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)={0x1, 0xa0, "6fe83a5c60fe193866de91333d42f739f12ffff7aefe5c22f1b76ac5604732ff440b853157b451471bf77bccbbb4f7766e41b2ecefbc86d9035de423b4bcfb1d6cc077ae7dec42d3dc11ab54321f7a5766cb53a862defa2b67cf37b900c562e6bf1fddb12ddbb12d23f5da4ae8a6ea34685a543b45d3fb01dd9589b62a96eee90974e5f1604633b3cf1e2465badd971abf04b3e61b8924b7e3467ea66b9db04f"})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_procfs(r2, &(0x7f0000000180)='maps\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
close_range(r1, 0xffffffffffffffff, 0x0)

2m31.298745855s ago: executing program 9 (id=410):
r0 = io_uring_setup(0x6c00, &(0x7f0000000080)={0x0, 0x569f, 0x2000, 0x6, 0x200})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0})
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone3(&(0x7f0000000700)={0x2000c000, 0x0, 0x0, 0x0, {0x10}, &(0x7f0000000340)=""/37, 0x25, 0x0, &(0x7f00000003c0)}, 0x58)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r3})
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

2m26.586294651s ago: executing program 38 (id=404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

2m15.6821042s ago: executing program 39 (id=410):
r0 = io_uring_setup(0x6c00, &(0x7f0000000080)={0x0, 0x569f, 0x2000, 0x6, 0x200})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0})
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone3(&(0x7f0000000700)={0x2000c000, 0x0, 0x0, 0x0, {0x10}, &(0x7f0000000340)=""/37, 0x25, 0x0, &(0x7f00000003c0)}, 0x58)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r3})
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

1m50.3353516s ago: executing program 2 (id=465):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x218a01, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
sendfile(r4, r3, &(0x7f0000000000)=0x9, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')

1m49.26151455s ago: executing program 8 (id=467):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x744, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x710, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x4, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x200}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x6e0, 0x7, [@m_ct={0xc4, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x99, 0x6, "1426d3280c9cede5ba3cf25b98b07c1f8bef126c99570c2540016528250f2ac782c3ccf707baef0a06e6063cbc26b1cc375787fd6b9f5a1a38fd65271e32c2972849923cc64febec8211584cad96587bd88f07785ddb6602c2b61bca929bc21252b5f720a779344f4af3c4bd64975321ea2c0f39aa5977c66f631a58b5d1ad29c6e2db23d343014c6d413ef3e670e8ad417c1f0d75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0x58, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0xb58}, 0x2}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x198, 0x18, 0x0, 0x0, {{0x7}, {0x14c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x109, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4, "098523af0734436422fcbc0c1d83bd635050adb5f801f6878ebeb24ffe08eb848b0c376df53faa9cc04aaf9e64460350619119693a0c2a5b7ebb8502186d978c8d692201877a2fe5702a9e3a347cb063ad61494e9a03765ec08c84694a4514547bc775a54b51016ae56c8b00fc4027850888791059274c8ed9203220de99bd8870d70760f05ade0035c3d7c182ea864fd132cc8db9f55c7748958bf66ef6f4a7dd65fffae77df4c955b0a7ab5d79b8b03887d65ada2e1074f00ab2534238ea40aed1e7d68e08278d99104891429dfd2ca2a46586e09371a1535c01bb3d4f5b"}}]}, {0x25, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5aa400010000000000000000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x94, 0x1f, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_LABELS={0x14, 0x7, "615ee6909e304a810095752f1734e5de"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "125a483e6f5bbf5c299e1639de3594fb"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x17}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x74, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x7, 0x1, 0x7, 0xaf}}]}, {0x25, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfe"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x160, 0x0, 0x0, 0x0, {{0x7}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x53, 0x6, {0x800, 'raw\x00', 0xfc, 0xfe96, "c2ec6c581e64b634f0b93ccf1fc452124bc8554967ff1b9d543e05431d7d9fcb78011e227bf381fde2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x93, 0x6, {0x0, 'mangle\x00', 0x60, 0x205, "006682c83731b58bc55bcf44f296780c2fac14fccba2e467ad05f87b4362e9d73c9c287a75833c51b95ed2983ab8928902a3ada68207b27a3ff14654fcd588cab0fca427f625d8511ee06385e8fc0bd2e8ec92339541048845225a54c2e8c9d4ee7b56aa4a4bd61b99"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x88, 0x9, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x4f, 0x6, "00ec1401019fd3c3383bfccc3043483435457d37e088113afa9a5a88375205ae33e0bfcca6890dc29bca949485b57fd7c1298ff77708064f891948a86ae5db1155f4f05f1562bc70c9f89f"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6}]}, 0x744}, 0x1, 0x0, 0x0, 0x1}, 0x6004800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xc3}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m48.114857008s ago: executing program 8 (id=470):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x75)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @request_death], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000680)=""/128}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0)

1m47.165178563s ago: executing program 8 (id=471):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25010000000800", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

1m45.974453741s ago: executing program 8 (id=473):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x2d, 0x2, 0xf901, {0x2, @ah_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x55f, 0x3}, {0x0, @random="7387b57a79d1", 0x3, 0x7, [0x4, 0x8]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x2000200, 0x7, 0x1, 0x14}, {0x0, @remote, 0x9, 0x800, [0x3ff, 0x3]}, 0xfff, 0x7}}})

1m45.006689718s ago: executing program 8 (id=476):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000001080)='cpuset\x00')
r1 = socket(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24)

1m44.103395035s ago: executing program 8 (id=477):
openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
set_mempolicy(0x4005, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xfc}, {0x19, 0x5}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xf}, {}, {0x0, 0x81, 0xbe}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {}, {0x0, 0x50}, {0x0, 0x0, 0x4, '\x00', 0x3}, {0x1}, {0x2, 0x2, 0x4}, {}, {0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x6, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1}, {0xfc, 0x83, 0xe}]}})
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', <r7=>0x0})
sendto$packet(r6, 0x0, 0x0, 0x20004050, &(0x7f0000000440)={0x11, 0x18, r7, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r5, 0xe2c40cf0776ef37, 0x70bd2d, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
set_mempolicy(0x8000, &(0x7f0000000000)=0x7, 0x0)

1m36.127134203s ago: executing program 2 (id=482):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25010000000800", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

1m33.594909381s ago: executing program 5 (id=418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

1m33.290672296s ago: executing program 0 (id=484):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
unshare(0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)

1m32.452686009s ago: executing program 0 (id=486):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c10400000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)

1m31.611693328s ago: executing program 2 (id=487):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xd)

1m30.931031119s ago: executing program 0 (id=489):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

1m30.371300559s ago: executing program 2 (id=490):
r0 = io_uring_setup(0x6c00, &(0x7f0000000080)={0x0, 0x569f, 0x2000, 0x6, 0x200})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0})
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r3})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2)

1m27.375599043s ago: executing program 40 (id=477):
openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
set_mempolicy(0x4005, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xfc}, {0x19, 0x5}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xf}, {}, {0x0, 0x81, 0xbe}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {}, {0x0, 0x50}, {0x0, 0x0, 0x4, '\x00', 0x3}, {0x1}, {0x2, 0x2, 0x4}, {}, {0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x6, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1}, {0xfc, 0x83, 0xe}]}})
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', <r7=>0x0})
sendto$packet(r6, 0x0, 0x0, 0x20004050, &(0x7f0000000440)={0x11, 0x18, r7, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r5, 0xe2c40cf0776ef37, 0x70bd2d, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
set_mempolicy(0x8000, &(0x7f0000000000)=0x7, 0x0)

1m22.681741545s ago: executing program 2 (id=492):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r1, 0x18, 0x29, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x340, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'veth1_to_team\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'geneve0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4c0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000540)={0x81, 0xfe, 0xf000, 0x3})
landlock_create_ruleset(&(0x7f00000000c0)={0x8a, 0x3, 0x2}, 0x18, 0x0)
setsockopt$rose(r0, 0x104, 0x7, 0x0, 0xfffffffffffffe1f)
landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1, 0x2}, 0x18, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4c, &(0x7f0000000080))
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1})

1m22.582819638s ago: executing program 0 (id=493):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x6, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000300)={0x30, 0x4, 0x0, {0x5, 0x8, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1m19.870568797s ago: executing program 2 (id=495):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1m16.813259745s ago: executing program 41 (id=418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

1m16.327503672s ago: executing program 0 (id=498):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x2d, 0x2, 0xf901, {0x2, @ah_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x55f, 0x3}, {0x0, @random="7387b57a79d1", 0x3, 0x7, [0x4, 0x8]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x2000200, 0x7, 0x1, 0x14}, {0x0, @remote, 0x9, 0x800, [0x3ff, 0x3]}, 0xfff, 0x7}}})

1m15.850652514s ago: executing program 0 (id=499):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x9000000, 0x9a77dbe37c821cd5})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd10b00e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2", 0x0, 0x4000, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vlan0\x00'})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup3(r7, 0xffffffffffffffff, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xff, 0x2, 0x422bd7c9, 0x2, 0x7558})

1m4.506470538s ago: executing program 42 (id=495):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1m0.617220639s ago: executing program 43 (id=499):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x9000000, 0x9a77dbe37c821cd5})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd10b00e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2", 0x0, 0x4000, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vlan0\x00'})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup3(r7, 0xffffffffffffffff, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xff, 0x2, 0x422bd7c9, 0x2, 0x7558})

53.067576286s ago: executing program 1 (id=512):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r1, 0x18, 0x29, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x340, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'veth1_to_team\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'geneve0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4c0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000540)={0x81, 0xfe, 0xf000, 0x3})
landlock_create_ruleset(&(0x7f00000000c0)={0x8a, 0x3, 0x2}, 0x18, 0x0)
setsockopt$rose(r0, 0x104, 0x7, 0x0, 0xfffffffffffffe1f)
landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1, 0x2}, 0x18, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4c, &(0x7f0000000080))
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1})

50.83094639s ago: executing program 1 (id=513):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0)
r2 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

48.877738388s ago: executing program 1 (id=514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

47.46143397s ago: executing program 1 (id=515):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000080001", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

46.008654604s ago: executing program 1 (id=516):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_GET_TSC(0x43, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xd)

45.102986659s ago: executing program 1 (id=517):
r0 = io_uring_setup(0x6c00, &(0x7f0000000080)={0x0, 0x569f, 0x2000, 0x6, 0x200})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0})
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2)

29.146984097s ago: executing program 44 (id=517):
r0 = io_uring_setup(0x6c00, &(0x7f0000000080)={0x0, 0x569f, 0x2000, 0x6, 0x200})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0})
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2)

4.806032159s ago: executing program 3 (id=505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.799167847s ago: executing program 3 (id=519):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r1, 0x18, 0x29, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x340, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'veth1_to_team\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'geneve0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4c0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000540)={0x81, 0xfe, 0xf000, 0x3})
landlock_create_ruleset(&(0x7f00000000c0)={0x8a, 0x3, 0x2}, 0x18, 0x0)
setsockopt$rose(r0, 0x104, 0x7, 0x0, 0xfffffffffffffe1f)
landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1, 0x2}, 0x18, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4c, &(0x7f0000000080))
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1})

0s ago: executing program 3 (id=520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd", 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c0}, 0x4008010)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000080), 0x4)
sendmsg$802154_dgram(r6, &(0x7f00000018c0)={&(0x7f0000000500), 0x14, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
r7 = dup(r5)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r9 = dup(r8)
sendfile(r9, r7, 0x0, 0x89ffc)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10041)
socket$inet_udplite(0x2, 0x2, 0x88)

kernel console output (not intermixed with test programs):

 for 'fd'
[  385.663821][ T5846] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  385.837836][ T5846] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  385.847379][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.934912][ T5846] usb 4-1: config 0 descriptor??
[  386.286478][ T5847] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  386.417446][ T5846] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  386.427886][ T5846] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  386.441349][ T5846] asix 4-1:0.0: probe with driver asix failed with error -32
[  386.484913][ T5847] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  386.494183][ T5847] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  386.505000][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  386.635321][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  386.649108][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  386.658898][ T5847] usb 3-1: Product: syz
[  386.663203][ T5847] usb 3-1: Manufacturer: syz
[  386.668047][ T5847] usb 3-1: SerialNumber: syz
[  386.676597][ T5846] usb 4-1: USB disconnect, device number 10
[  387.071228][ T5847] usb 3-1: 0:2 : does not exist
[  387.176087][ T5847] usb 3-1: USB disconnect, device number 15
[  387.595393][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  388.325315][ T6765] serio: Serial port ptm0
[  392.704435][ T5847] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  398.038213][ T5793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  398.056261][ T5793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  398.064883][ T5793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  398.100940][ T5793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  398.116123][ T5793] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  398.125301][ T5793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  399.053462][    C1] sched: DL replenish lagged too much
[  399.368918][ T1828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.377740][ T1828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.524839][ T6786] fuse: Unknown parameter '0x0000000000000004'
[  399.599776][ T4035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.768576][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.776910][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.201739][ T5793] Bluetooth: hci6: command tx timeout
[  400.397379][ T4035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.580639][ T4035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.849068][ T4035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.500800][ T4035] bridge_slave_1: left allmulticast mode
[  401.506894][ T4035] bridge_slave_1: left promiscuous mode
[  401.513125][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.649895][ T4035] bridge_slave_0: left allmulticast mode
[  401.656201][ T4035] bridge_slave_0: left promiscuous mode
[  401.662534][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.335701][ T5793] Bluetooth: hci6: command tx timeout
[  402.662891][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.732888][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.767383][ T4035] bond0 (unregistering): Released all slaves
[  402.826533][   T44] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  402.969530][ T6778] chnl_net:caif_netlink_parms(): no params data found
[  403.039028][   T44] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  403.048213][   T44] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  403.059173][   T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  403.173353][   T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  403.185153][   T44] usb 3-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  403.193816][   T44] usb 3-1: Product: syz
[  403.198218][   T44] usb 3-1: Manufacturer: syz
[  403.203048][   T44] usb 3-1: SerialNumber: syz
[  403.579890][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  403.586771][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  403.863866][ T4035] hsr_slave_0: left promiscuous mode
[  403.884804][ T4035] hsr_slave_1: left promiscuous mode
[  403.905963][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.914445][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.979720][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.988172][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.112846][   T44] usb 3-1: 0:2 : does not exist
[  404.122904][ T4035] veth1_macvtap: left promiscuous mode
[  404.130549][ T4035] veth0_macvtap: left promiscuous mode
[  404.136693][ T4035] veth1_vlan: left promiscuous mode
[  404.142378][ T4035] veth0_vlan: left promiscuous mode
[  404.369484][ T5793] Bluetooth: hci6: command tx timeout
[  404.483167][   T44] usb 3-1: USB disconnect, device number 17
[  404.785013][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.829580][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'.
[  405.742716][ T4035] team0 (unregistering): Port device team_slave_1 removed
[  405.879249][ T4035] team0 (unregistering): Port device team_slave_0 removed
[  406.444409][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'.
[  406.506048][ T5793] Bluetooth: hci6: command tx timeout
[  406.561747][ T6816] random: crng reseeded on system resumption
[  408.043070][ T4035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.205529][ T6829] fuse: Unknown parameter '0x0000000000000004'
[  408.373614][ T4035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.698094][ T4035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.823650][ T4035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.266813][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.276893][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.284893][ T6778] bridge_slave_0: entered allmulticast mode
[  409.294110][ T6778] bridge_slave_0: entered promiscuous mode
[  409.427804][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.436014][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.444125][ T6778] bridge_slave_1: entered allmulticast mode
[  409.495404][ T6778] bridge_slave_1: entered promiscuous mode
[  409.506334][ T4035] bridge_slave_1: left allmulticast mode
[  409.512252][ T4035] bridge_slave_1: left promiscuous mode
[  409.519019][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.604658][ T4035] bridge_slave_0: left allmulticast mode
[  409.610684][ T4035] bridge_slave_0: left promiscuous mode
[  409.617421][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.975615][ T3594] Bluetooth: hci2: Frame reassembly failed (-84)
[  410.024305][ T6842] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  410.471684][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.517247][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.579135][ T4035] bond0 (unregistering): Released all slaves
[  410.922884][   T44] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  411.090100][   T44] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  411.099530][   T44] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  411.110356][   T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  411.131262][   T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  411.141559][   T44] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  411.150638][   T44] usb 5-1: Product: syz
[  411.156102][   T44] usb 5-1: Manufacturer: syz
[  411.160960][   T44] usb 5-1: SerialNumber: syz
[  411.605652][   T44] usb 5-1: 0:2 : does not exist
[  411.761849][   T44] usb 5-1: USB disconnect, device number 10
[  412.024642][ T5787] Bluetooth: hci2: command 0x1003 tx timeout
[  412.031437][ T5793] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  412.140194][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  412.595459][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.645144][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.730721][ T4035] hsr_slave_0: left promiscuous mode
[  412.763125][ T4035] hsr_slave_1: left promiscuous mode
[  412.798424][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.806948][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.834163][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.842031][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.881427][ T4035] veth1_macvtap: left promiscuous mode
[  412.887770][ T4035] veth0_macvtap: left promiscuous mode
[  412.894125][ T4035] veth1_vlan: left promiscuous mode
[  412.899702][ T4035] veth0_vlan: left promiscuous mode
[  413.535757][ T4035] team0 (unregistering): Port device team_slave_1 removed
[  413.590545][ T4035] team0 (unregistering): Port device team_slave_0 removed
[  414.278073][ T6778] team0: Port device team_slave_0 added
[  414.312536][ T6778] team0: Port device team_slave_1 added
[  414.564897][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.572110][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.599297][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.682161][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.690529][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.717774][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.942472][ T6778] hsr_slave_0: entered promiscuous mode
[  414.959750][ T6778] hsr_slave_1: entered promiscuous mode
[  414.972360][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  414.980454][ T6778] Cannot create hsr debugfs directory
[  415.102862][   T29] audit: type=1326 audit(1736252451.074:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ad579 code=0x7fc00000
[  415.616294][ T6868] fuse: Unknown parameter '0x0000000000000004'
[  416.423873][ T6778] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  416.519074][ T6778] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  416.630084][ T6778] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  416.704166][ T6778] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  417.842626][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.966597][ T6778] 8021q: adding VLAN 0 to HW filter on device team0
[  418.093838][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.101817][ T4912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.211471][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.219027][ T4912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.388324][ T6884] syz.2.303 uses obsolete (PF_INET,SOCK_PACKET)
[  419.955463][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.256439][ T6778] veth0_vlan: entered promiscuous mode
[  422.371951][ T6778] veth1_vlan: entered promiscuous mode
[  422.681972][ T6778] veth0_macvtap: entered promiscuous mode
[  422.766422][ T6778] veth1_macvtap: entered promiscuous mode
[  422.823658][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.834547][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.844845][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.855714][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.865999][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.877182][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.896215][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.914947][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.925812][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.935972][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.946793][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.956975][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.968147][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.984948][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.031927][ T6778] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.041345][ T6778] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.050586][ T6778] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.060002][ T6778] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.234200][   T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  423.416243][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  423.425533][   T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  423.436275][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  423.602293][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  423.614871][   T10] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  423.623324][   T10] usb 5-1: Product: syz
[  423.631060][   T10] usb 5-1: Manufacturer: syz
[  423.636733][   T10] usb 5-1: SerialNumber: syz
[  424.082137][   T10] usb 5-1: 0:2 : does not exist
[  424.176044][   T10] usb 5-1: USB disconnect, device number 11
[  424.469160][ T6907] serio: Serial port ptm0
[  428.932629][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.267960][ T6918] fuse: Unknown parameter '0x0000000000000004'
[  432.672444][ T6922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.224563][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  434.233255][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  434.242162][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  434.257700][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  434.280038][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  434.288756][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.343758][ T6932] chnl_net:caif_netlink_parms(): no params data found
[  436.344155][ T5787] Bluetooth: hci2: command tx timeout
[  436.913828][ T5847] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  437.080465][ T5847] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  437.090162][ T5847] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  437.100915][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  437.276676][ T5847] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  437.286272][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  437.295119][ T5847] usb 5-1: Product: syz
[  437.299522][ T5847] usb 5-1: Manufacturer: syz
[  437.304502][ T5847] usb 5-1: SerialNumber: syz
[  438.209838][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.218202][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.226571][ T6932] bridge_slave_0: entered allmulticast mode
[  438.237419][ T6932] bridge_slave_0: entered promiscuous mode
[  438.424768][ T5787] Bluetooth: hci2: command tx timeout
[  438.455547][ T4153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.464186][ T4153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.517332][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.525133][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.533696][ T6932] bridge_slave_1: entered allmulticast mode
[  438.544285][ T6932] bridge_slave_1: entered promiscuous mode
[  438.550057][ T5847] usb 5-1: 0:2 : does not exist
[  438.739153][ T5847] usb 5-1: USB disconnect, device number 12
[  438.888982][ T6975] fuse: Unknown parameter 'fd0x0000000000000004'
[  439.029608][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.048873][ T6770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.057216][ T6770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.127154][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  439.189811][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.452895][ T6932] team0: Port device team_slave_0 added
[  439.502971][ T6932] team0: Port device team_slave_1 added
[  439.844573][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.851772][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.878384][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.972861][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.980861][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.007249][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.037717][ T6981] autofs: Unknown parameter '@'
[  440.136699][ T6932] hsr_slave_0: entered promiscuous mode
[  440.148451][ T6932] hsr_slave_1: entered promiscuous mode
[  440.158121][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.167363][ T6932] Cannot create hsr debugfs directory
[  440.504326][ T5787] Bluetooth: hci2: command tx timeout
[  441.051326][ T6932] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  441.118980][ T6932] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  441.152996][ T6932] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  441.195942][ T6932] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  442.044364][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  442.088334][ T6992] delete_channel: no stack
[  442.262280][   T10] usb 5-1: Using ep0 maxpacket: 8
[  442.317536][   T10] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  442.332404][   T10] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  442.345991][   T10] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  442.358601][   T10] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  442.368185][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.481001][ T6999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  442.587623][ T5787] Bluetooth: hci2: command tx timeout
[  442.758579][   T10] usb 5-1: string descriptor 0 read error: -71
[  442.766971][   T10] hub 5-1:32.0: USB hub found
[  442.789412][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.801069][   T10] hub 5-1:32.0: config failed, can't read hub descriptor (err -22)
[  443.010330][   T10] usb 5-1: USB disconnect, device number 13
[  443.033016][ T6932] 8021q: adding VLAN 0 to HW filter on device team0
[  443.135604][ T1828] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.143118][ T1828] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.227486][ T1828] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.235017][ T1828] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.437231][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  444.330353][ T5847] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  444.769195][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.797188][ T5847] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  444.807519][ T5847] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  444.819147][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  445.042602][ T5847] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  445.052366][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  445.061507][ T5847] usb 5-1: Product: syz
[  445.066667][ T5847] usb 5-1: Manufacturer: syz
[  445.071553][ T5847] usb 5-1: SerialNumber: syz
[  445.198768][   T29] audit: type=1326 audit(1736252481.204:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  445.454834][ T5847] usb 5-1: 0:2 : does not exist
[  445.481075][   T29] audit: type=1326 audit(1736252481.234:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  445.503550][   T29] audit: type=1326 audit(1736252481.294:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  445.525863][   T29] audit: type=1326 audit(1736252481.294:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  445.548091][   T29] audit: type=1326 audit(1736252481.294:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  445.618457][ T5847] usb 5-1: USB disconnect, device number 14
[  445.951052][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  446.010538][ T7019] fuse: Unknown parameter 'fd0x0000000000000004'
[  447.180681][ T6932] veth0_vlan: entered promiscuous mode
[  447.241758][ T7030] autofs: Bad value for 'fd'
[  447.283868][ T6932] veth1_vlan: entered promiscuous mode
[  447.594732][ T6932] veth0_macvtap: entered promiscuous mode
[  447.678719][ T6932] veth1_macvtap: entered promiscuous mode
[  447.877435][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.888865][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.899677][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.911747][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.922259][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.932901][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.942906][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  447.954580][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.967847][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.293028][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.303956][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.314097][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.324733][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.334801][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.348806][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.358915][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.369570][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.382580][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.754854][ T6932] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.763955][ T6932] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.772849][ T6932] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.781885][ T6932] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.828146][   T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  450.939676][ T7069] fuse: Unknown parameter 'fd0x0000000000000004'
[  451.062303][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  451.071523][   T10] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  451.082125][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  451.173906][ T7072] autofs: Bad value for 'fd'
[  451.230624][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  451.240361][   T10] usb 3-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  451.248921][   T10] usb 3-1: Product: syz
[  451.254274][   T10] usb 3-1: Manufacturer: syz
[  451.259004][   T10] usb 3-1: SerialNumber: syz
[  451.766540][   T10] usb 3-1: 0:2 : does not exist
[  451.864802][   T10] usb 3-1: USB disconnect, device number 18
[  452.181519][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.618254][ T7084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  460.224557][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  460.379432][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  460.494795][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  461.233110][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  461.254120][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  461.264153][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  461.894316][ T5846] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  462.114504][ T7120] autofs: Bad value for 'fd'
[  462.927337][ T5846] usb 4-1: config 0 has an invalid interface number: 19 but max is 0
[  462.935827][ T5846] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  462.945343][ T5846] usb 4-1: config 0 has no interface number 1
[  462.951691][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  462.965122][ T5846] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00
[  462.974573][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.007822][ T7110] chnl_net:caif_netlink_parms(): no params data found
[  463.031463][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.039560][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.340680][ T4153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.349325][ T4153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.385270][ T5787] Bluetooth: hci4: command tx timeout
[  463.547774][ T5846] usb 4-1: config 0 descriptor??
[  463.821179][ T5846] usb 4-1: can't set config #0, error -71
[  464.200683][ T5846] usb 4-1: USB disconnect, device number 11
[  464.807311][   T44] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  465.037606][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  465.044479][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  465.260062][   T44] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  465.269531][   T44] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  465.280240][   T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  465.469659][ T5787] Bluetooth: hci4: command tx timeout
[  465.491153][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.498893][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.506718][ T7110] bridge_slave_0: entered allmulticast mode
[  465.515016][ T7110] bridge_slave_0: entered promiscuous mode
[  465.537505][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.545132][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.552774][ T7110] bridge_slave_1: entered allmulticast mode
[  465.561029][ T7110] bridge_slave_1: entered promiscuous mode
[  466.924156][   T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  466.933682][   T44] usb 3-1: New USB device strings: Mfr=1, Product=231, SerialNumber=2
[  466.942258][   T44] usb 3-1: Product: syz
[  466.946852][   T44] usb 3-1: Manufacturer: syz
[  466.951674][   T44] usb 3-1: SerialNumber: syz
[  467.296455][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.327972][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.584492][ T5787] Bluetooth: hci4: command tx timeout
[  468.333935][ T7110] team0: Port device team_slave_0 added
[  468.355660][ T7110] team0: Port device team_slave_1 added
[  469.207991][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.215460][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.241955][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.264388][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.271584][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.299080][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.325699][   T44] usb 3-1: 0:2 : does not exist
[  469.659643][ T5787] Bluetooth: hci4: command tx timeout
[  469.737792][   T44] usb 3-1: USB disconnect, device number 19
[  472.003748][ T7110] hsr_slave_0: entered promiscuous mode
[  474.853033][ T7110] hsr_slave_1: entered promiscuous mode
[  474.959224][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  474.968196][ T7110] Cannot create hsr debugfs directory
[  475.386718][ T7103] udevd[7103]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  477.600597][ T7110] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  477.955248][ T7110] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  478.091906][ T7110] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  478.212580][ T7110] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  479.125531][ T7184] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  479.322381][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.542561][ T7110] 8021q: adding VLAN 0 to HW filter on device team0
[  479.656424][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.663964][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.940666][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'.
[  480.374395][    T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  480.604326][    T8] usb 5-1: Using ep0 maxpacket: 8
[  480.632895][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.640506][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.700024][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.844405][    T8] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  480.856141][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.865158][    T8] usb 5-1: Product: syz
[  480.869450][    T8] usb 5-1: Manufacturer: syz
[  480.874299][    T8] usb 5-1: SerialNumber: syz
[  481.249590][    T8] usb 5-1: config 0 descriptor??
[  485.911902][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  485.920771][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  485.931985][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  485.943639][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  485.982934][   T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  485.992162][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  486.586023][    T8] msi2500 5-1:0.0: Registered as swradio24
[  486.592039][    T8] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  486.755388][    T8] usb 5-1: USB disconnect, device number 15
[  487.252201][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.944313][ T5787] Bluetooth: hci5: command 0x0406 tx timeout
[  488.025177][ T5787] Bluetooth: hci7: command tx timeout
[  488.404670][ T7208] chnl_net:caif_netlink_parms(): no params data found
[  490.067390][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.075212][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.082987][ T7208] bridge_slave_0: entered allmulticast mode
[  490.091176][ T7208] bridge_slave_0: entered promiscuous mode
[  490.126238][ T5787] Bluetooth: hci7: command tx timeout
[  490.306569][ T7110] veth0_vlan: entered promiscuous mode
[  490.316466][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.324098][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.331737][ T7208] bridge_slave_1: entered allmulticast mode
[  490.340149][ T7208] bridge_slave_1: entered promiscuous mode
[  490.431454][ T7110] veth1_vlan: entered promiscuous mode
[  490.770034][ T7208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.942788][ T7208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.966267][ T7110] veth0_macvtap: entered promiscuous mode
[  491.049077][ T7110] veth1_macvtap: entered promiscuous mode
[  491.390068][ T4035] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.467488][ T7208] team0: Port device team_slave_0 added
[  491.502101][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.512897][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.523074][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.533802][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.543956][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.554629][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.564711][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.575519][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.585716][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.596417][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.612828][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.659026][ T7208] team0: Port device team_slave_1 added
[  491.758577][ T4035] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.911454][ T4035] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.094042][ T4035] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.149747][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.157056][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.183542][ T7208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.217124][ T5787] Bluetooth: hci7: command tx timeout
[  492.231576][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.242420][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.252590][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.263258][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.273579][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.284240][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.294296][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.304990][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.315184][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.328437][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.342347][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.423123][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.430436][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.456858][ T7208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.672885][ T4035] bridge_slave_1: left allmulticast mode
[  492.678914][ T4035] bridge_slave_1: left promiscuous mode
[  492.685311][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.738490][ T4035] bridge_slave_0: left allmulticast mode
[  492.745712][ T4035] bridge_slave_0: left promiscuous mode
[  492.751904][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.151696][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.299149][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.350549][ T4035] bond0 (unregistering): Released all slaves
[  493.514676][ T7110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.523890][ T7110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.532777][ T7110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.542127][ T7110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.029435][ T7208] hsr_slave_0: entered promiscuous mode
[  494.136530][ T7208] hsr_slave_1: entered promiscuous mode
[  494.203819][ T7208] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.211535][ T7208] Cannot create hsr debugfs directory
[  494.269332][ T5787] Bluetooth: hci7: command tx timeout
[  494.644424][ T4035] hsr_slave_0: left promiscuous mode
[  494.703959][ T4035] hsr_slave_1: left promiscuous mode
[  494.753169][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.761345][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.836192][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.844185][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.980151][ T4035] veth1_macvtap: left promiscuous mode
[  494.986517][ T4035] veth0_macvtap: left promiscuous mode
[  494.992256][ T4035] veth1_vlan: left promiscuous mode
[  494.997933][ T4035] veth0_vlan: left promiscuous mode
[  496.400755][ T4035] team0 (unregistering): Port device team_slave_1 removed
[  496.522660][ T4035] team0 (unregistering): Port device team_slave_0 removed
[  498.286640][ T7208] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  498.382212][ T7208] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  498.605616][ T7208] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  498.715467][ T7208] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  503.228949][ T7208] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.510633][ T7208] 8021q: adding VLAN 0 to HW filter on device team0
[  503.639254][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.646837][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.809604][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.817155][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.980392][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  504.993259][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  505.003946][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  505.046976][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  505.060481][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  505.085153][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  506.736801][ T7208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.281492][   T51] Bluetooth: hci2: command tx timeout
[  507.424450][ T7281] chnl_net:caif_netlink_parms(): no params data found
[  507.598097][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.606332][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.885792][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.894619][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.316492][   T51] Bluetooth: hci2: command tx timeout
[  509.651164][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.658910][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.666661][ T7281] bridge_slave_0: entered allmulticast mode
[  509.674869][ T7281] bridge_slave_0: entered promiscuous mode
[  509.932856][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.940637][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.949253][ T7281] bridge_slave_1: entered allmulticast mode
[  509.957467][ T7281] bridge_slave_1: entered promiscuous mode
[  510.098685][ T7208] veth0_vlan: entered promiscuous mode
[  510.420282][ T7208] veth1_vlan: entered promiscuous mode
[  510.581401][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[  510.622430][ T7281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.768798][ T7281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.313051][ T7208] veth0_macvtap: entered promiscuous mode
[  511.351536][ T7281] team0: Port device team_slave_0 added
[  511.388238][   T51] Bluetooth: hci2: command tx timeout
[  512.441912][ T7281] team0: Port device team_slave_1 added
[  513.439691][ T7208] veth1_macvtap: entered promiscuous mode
[  516.960069][   T51] Bluetooth: hci2: command tx timeout
[  517.131641][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.138991][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.166142][ T7281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.234804][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.246024][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.256147][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.266808][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.276863][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.287619][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.297715][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.311428][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.322589][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.333502][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.346753][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_0
[  517.500329][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.510256][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.537382][ T7281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.314340][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.327669][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.338633][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.349323][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.359339][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.369993][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.380115][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.390781][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.400795][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.411538][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.424621][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.501746][ T7281] hsr_slave_0: entered promiscuous mode
[  518.612947][ T7281] hsr_slave_1: entered promiscuous mode
[  518.676695][ T7281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  518.684617][ T7281] Cannot create hsr debugfs directory
[  520.212186][ T7208] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.221286][ T7208] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.230299][ T7208] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.239381][ T7208] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.966404][ T7281] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  522.077309][ T7281] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  522.191117][ T7281] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  522.286656][ T7281] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  523.386905][   T51] Bluetooth: hci6: command 0x0406 tx timeout
[  523.639020][ T7281] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.929752][ T7281] 8021q: adding VLAN 0 to HW filter on device team0
[  524.029100][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.036673][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.176933][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.184486][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.509080][ T7281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  526.331376][ T7281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.450621][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  526.457291][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  527.122652][ T7281] veth0_vlan: entered promiscuous mode
[  527.302037][ T7281] veth1_vlan: entered promiscuous mode
[  527.524687][ T4153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.532744][ T4153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.697332][ T7281] veth0_macvtap: entered promiscuous mode
[  527.775869][ T7281] veth1_macvtap: entered promiscuous mode
[  527.828554][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.837085][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.026102][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.037410][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.047542][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.062091][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.073256][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.084031][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.094078][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.104743][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.114831][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.125486][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.135649][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.146363][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.164222][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.001885][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.012798][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.022879][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.033757][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.043839][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.054493][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.066877][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.083042][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.094283][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.105002][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.115031][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  529.125689][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.138791][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.784107][ T7383] warning: `syz.8.407' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  529.953937][ T7281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.962962][ T7281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.972065][ T7281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.981086][ T7281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.619701][ T7386] netlink: 124 bytes leftover after parsing attributes in process `syz.8.408'.
[  535.028909][ T7395] serio: Serial port ptm0
[  539.906258][   T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  539.917109][   T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  539.927539][   T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  539.954611][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  539.994607][   T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  540.003216][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  541.962848][ T7412] chnl_net:caif_netlink_parms(): no params data found
[  542.104924][   T51] Bluetooth: hci8: command tx timeout
[  543.827852][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.835666][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.843591][ T7412] bridge_slave_0: entered allmulticast mode
[  543.851668][ T7412] bridge_slave_0: entered promiscuous mode
[  544.042592][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.050297][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.058237][ T7412] bridge_slave_1: entered allmulticast mode
[  544.066473][ T7412] bridge_slave_1: entered promiscuous mode
[  544.195451][   T51] Bluetooth: hci8: command tx timeout
[  544.695552][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.825761][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.192751][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.200935][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.334556][ T7412] team0: Port device team_slave_0 added
[  545.396878][ T7412] team0: Port device team_slave_1 added
[  545.550013][ T4153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.558180][ T4153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.760103][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.767390][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.798469][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.176947][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.189146][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.216866][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.324449][   T51] Bluetooth: hci8: command tx timeout
[  547.218469][ T7453] netlink: 124 bytes leftover after parsing attributes in process `syz.8.420'.
[  547.355423][ T7412] hsr_slave_0: entered promiscuous mode
[  547.487775][ T7412] hsr_slave_1: entered promiscuous mode
[  547.554057][ T7412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  547.561856][ T7412] Cannot create hsr debugfs directory
[  548.082572][ T5787] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  548.102888][ T5787] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  548.129445][ T5787] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  548.154553][ T5787] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  548.167189][ T5787] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  548.175880][ T5787] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  548.463980][ T5787] Bluetooth: hci8: command tx timeout
[  550.288963][   T51] Bluetooth: hci9: command tx timeout
[  550.537795][ T7412] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  550.660647][ T7454] chnl_net:caif_netlink_parms(): no params data found
[  550.775741][ T7412] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  550.971422][ T7412] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  551.209366][ T7412] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  552.013819][ T7490] netlink: 108 bytes leftover after parsing attributes in process `syz.2.429'.
[  552.344243][   T51] Bluetooth: hci9: command tx timeout
[  553.157952][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.165659][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.173542][ T7454] bridge_slave_0: entered allmulticast mode
[  553.181721][ T7454] bridge_slave_0: entered promiscuous mode
[  553.409607][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.471897][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.479645][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.487398][ T7454] bridge_slave_1: entered allmulticast mode
[  553.495726][ T7454] bridge_slave_1: entered promiscuous mode
[  553.677000][ T7412] 8021q: adding VLAN 0 to HW filter on device team0
[  554.105349][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.112865][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.147531][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.275028][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.282560][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.365383][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.436076][   T51] Bluetooth: hci9: command tx timeout
[  554.996379][ T7454] team0: Port device team_slave_0 added
[  555.154048][ T7454] team0: Port device team_slave_1 added
[  555.669697][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.677042][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.708327][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.244145][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.251261][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.277853][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.525097][   T51] Bluetooth: hci9: command tx timeout
[  557.359717][ T7454] hsr_slave_0: entered promiscuous mode
[  557.521616][ T7454] hsr_slave_1: entered promiscuous mode
[  557.592580][ T7454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.600649][ T7454] Cannot create hsr debugfs directory
[  557.829240][ T7523] netlink: 108 bytes leftover after parsing attributes in process `syz.1.439'.
[  558.253110][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.148400][ T7412] veth0_vlan: entered promiscuous mode
[  559.298485][ T7412] veth1_vlan: entered promiscuous mode
[  559.408384][ T7454] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.717221][ T7454] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.918557][ T7454] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.090527][ T7454] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.146644][ T7412] veth0_macvtap: entered promiscuous mode
[  560.228288][ T5847] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  560.300247][ T7412] veth1_macvtap: entered promiscuous mode
[  560.433875][ T5847] usb 3-1: Using ep0 maxpacket: 8
[  560.601569][ T5847] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21
[  560.611587][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.623960][ T5847] usb 3-1: Product: syz
[  560.628257][ T5847] usb 3-1: Manufacturer: syz
[  560.632991][ T5847] usb 3-1: SerialNumber: syz
[  560.710202][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.727206][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.739177][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.750545][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.760661][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.771322][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.781470][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.792169][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.802242][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.812915][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.828264][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.841602][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.852082][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.862755][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.876012][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.997816][ T5847] usb 3-1: config 0 descriptor??
[  561.117319][ T7454] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  561.125700][ T5847] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  561.304597][ T5847] usb 3-1: USB disconnect, device number 20
[  561.314043][ T7454] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  561.459966][ T7454] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  561.616364][ T7454] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  562.231240][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.242210][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.252398][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.268188][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.294746][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.306182][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.316350][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.327535][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.337696][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.349217][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.364483][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.376580][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.386651][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.397304][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.411053][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.397435][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.683868][ T7412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.698338][ T7412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.708991][ T7412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.718286][ T7412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.773614][ T7454] 8021q: adding VLAN 0 to HW filter on device team0
[  563.869012][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.876543][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.034779][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.042304][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  565.008632][ T7562] netlink: 108 bytes leftover after parsing attributes in process `syz.8.450'.
[  566.859807][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.938931][ T7610] netlink: 116 bytes leftover after parsing attributes in process `syz.1.460'.
[  570.626877][ T7454] veth0_vlan: entered promiscuous mode
[  570.782701][ T7454] veth1_vlan: entered promiscuous mode
[  571.258801][ T7454] veth0_macvtap: entered promiscuous mode
[  571.407469][ T7454] veth1_macvtap: entered promiscuous mode
[  571.727042][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.738181][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.748413][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.759138][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.769191][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.785017][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.796716][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.807377][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.817578][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.828241][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.838310][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.848939][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.858965][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.872496][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.889403][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.901460][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.915009][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.440073][ T7629] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  573.280954][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.292272][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.302468][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.314459][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.329774][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.341898][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.351943][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.362654][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.372732][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.383581][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.393643][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.404333][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.414385][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.430234][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.441662][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.452338][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.466021][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.402542][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.410748][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.769888][ T6770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.778082][ T6770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.005673][ T7454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.014795][ T7454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.023833][ T7454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.032713][ T7454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.273582][ T7647] netlink: 116 bytes leftover after parsing attributes in process `syz.8.471'.
[  584.825257][ T5787] Bluetooth: hci4: command 0x0406 tx timeout
[  587.075292][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.083332][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.128479][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.136552][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.056666][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  588.070809][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  589.614563][ T7713] netlink: 116 bytes leftover after parsing attributes in process `syz.2.482'.
[  599.979299][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  600.079437][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  600.102639][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  600.122692][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  600.138212][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  600.172123][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  600.373768][ T5846] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  601.090021][ T6770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.312862][ T5846] usb 2-1: Using ep0 maxpacket: 16
[  601.654009][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.665516][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.675806][ T5846] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  601.685250][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.076077][ T5846] usb 2-1: config 0 descriptor??
[  602.264185][ T5787] Bluetooth: hci0: command tx timeout
[  602.333124][ T6770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.717239][ T5846] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  602.795710][ T6770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.803817][ T5846] usb 2-1: USB disconnect, device number 7
[  603.240224][ T6770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.470507][ T6770] bridge_slave_1: left allmulticast mode
[  604.476697][ T6770] bridge_slave_1: left promiscuous mode
[  604.482930][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.612226][ T5787] Bluetooth: hci0: command tx timeout
[  604.660733][ T6770] bridge_slave_0: left allmulticast mode
[  604.668047][ T6770] bridge_slave_0: left promiscuous mode
[  604.674499][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.281363][ T7762] netlink: 116 bytes leftover after parsing attributes in process `syz.1.497'.
[  606.351910][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.379147][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.468022][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  606.478272][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  606.488534][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  606.521086][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  606.550976][ T6770] bond0 (unregistering): Released all slaves
[  606.581535][ T7743] chnl_net:caif_netlink_parms(): no params data found
[  606.674292][   T51] Bluetooth: hci0: command tx timeout
[  606.685010][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  606.693732][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  608.753340][   T51] Bluetooth: hci0: command tx timeout
[  612.620586][   T51] Bluetooth: hci3: command tx timeout
[  612.922171][ T6770] hsr_slave_0: left promiscuous mode
[  612.998468][ T6770] hsr_slave_1: left promiscuous mode
[  613.112212][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.120111][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.165649][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.173772][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  613.274067][ T6770] veth1_macvtap: left promiscuous mode
[  613.279730][ T6770] veth0_macvtap: left promiscuous mode
[  613.285901][ T6770] veth1_vlan: left promiscuous mode
[  613.291306][ T6770] veth0_vlan: left promiscuous mode
[  614.611306][ T6770] team0 (unregistering): Port device team_slave_1 removed
[  614.663891][ T5787] Bluetooth: hci3: command tx timeout
[  614.726822][ T6770] team0 (unregistering): Port device team_slave_0 removed
[  615.882220][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.889897][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.897694][ T7743] bridge_slave_0: entered allmulticast mode
[  615.905934][ T7743] bridge_slave_0: entered promiscuous mode
[  616.086225][ T7782] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  616.113139][ T7782] CIFS mount error: No usable UNC path provided in device string!
[  616.113139][ T7782] 
[  616.129849][ T7782] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  616.377596][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.385253][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.393022][ T7743] bridge_slave_1: entered allmulticast mode
[  616.401523][ T7743] bridge_slave_1: entered promiscuous mode
[  616.521870][ T7760] chnl_net:caif_netlink_parms(): no params data found
[  616.763967][ T5787] Bluetooth: hci3: command tx timeout
[  616.892132][ T7743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.029817][ T7743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.676910][ T6770] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.784958][ T7743] team0: Port device team_slave_0 added
[  617.830125][ T7743] team0: Port device team_slave_1 added
[  617.920704][ T6770] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.367651][ T6770] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.461542][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.468879][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.502266][ T7743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.658958][ T6770] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.836491][ T5787] Bluetooth: hci3: command tx timeout
[  618.912684][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.920135][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.946524][ T7743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.066844][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  619.096141][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  619.118728][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  619.227237][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  619.237257][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  619.246994][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  621.285735][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.293199][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.301274][ T7760] bridge_slave_0: entered allmulticast mode
[  621.310805][ T7760] bridge_slave_0: entered promiscuous mode
[  621.393823][   T51] Bluetooth: hci4: command tx timeout
[  621.696128][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.703835][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.711529][ T7760] bridge_slave_1: entered allmulticast mode
[  621.719859][ T7760] bridge_slave_1: entered promiscuous mode
[  621.782794][ T7743] hsr_slave_0: entered promiscuous mode
[  621.917751][ T7743] hsr_slave_1: entered promiscuous mode
[  621.989870][ T7743] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  621.997982][ T7743] Cannot create hsr debugfs directory
[  622.651511][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  622.661045][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  622.684831][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  622.706898][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  622.729676][   T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  622.741088][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  622.910622][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.068861][ T6770] bridge_slave_1: left allmulticast mode
[  623.075014][ T6770] bridge_slave_1: left promiscuous mode
[  623.089752][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.213957][ T6770] bridge_slave_0: left allmulticast mode
[  623.219850][ T6770] bridge_slave_0: left promiscuous mode
[  623.226381][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.353237][ T6770] bridge_slave_1: left allmulticast mode
[  623.359282][ T6770] bridge_slave_1: left promiscuous mode
[  623.365774][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.421928][ T6770] bridge_slave_0: left allmulticast mode
[  623.428375][ T6770] bridge_slave_0: left promiscuous mode
[  623.434791][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.924733][   T51] Bluetooth: hci4: command tx timeout
[  624.037622][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  624.096801][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.176111][ T6770] bond0 (unregistering): Released all slaves
[  624.280218][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  624.347240][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.402600][ T6770] bond0 (unregistering): Released all slaves
[  624.679985][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  624.834644][   T51] Bluetooth: hci7: command tx timeout
[  625.476098][ T7813] netlink: 116 bytes leftover after parsing attributes in process `syz.1.508'.
[  625.523569][ T7760] team0: Port device team_slave_0 added
[  625.838937][ T7760] team0: Port device team_slave_1 added
[  625.944494][   T51] Bluetooth: hci4: command tx timeout
[  626.351945][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.365182][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.393496][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.414557][ T7789] chnl_net:caif_netlink_parms(): no params data found
[  626.507485][ T7743] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.627944][ T6770] hsr_slave_0: left promiscuous mode
[  626.697762][ T6770] hsr_slave_1: left promiscuous mode
[  626.736754][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.744717][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.808940][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.817034][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.908144][   T51] Bluetooth: hci7: command tx timeout
[  626.926189][ T6770] hsr_slave_0: left promiscuous mode
[  626.994665][ T6770] hsr_slave_1: left promiscuous mode
[  627.016069][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  627.040618][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.091205][ T6770] veth1_macvtap: left promiscuous mode
[  627.097249][ T6770] veth0_macvtap: left promiscuous mode
[  627.102988][ T6770] veth1_vlan: left promiscuous mode
[  627.108731][ T6770] veth0_vlan: left promiscuous mode
[  628.068083][   T51] Bluetooth: hci4: command tx timeout
[  628.252391][ T6770] team0 (unregistering): Port device team_slave_1 removed
[  628.342117][ T6770] team0 (unregistering): Port device team_slave_0 removed
[  628.984158][ T5787] Bluetooth: hci7: command tx timeout
[  629.294832][ T6770] team0 (unregistering): Port device team_slave_1 removed
[  629.401478][ T6770] team0 (unregistering): Port device team_slave_0 removed
[  629.836605][ T7743] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.025771][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  630.032859][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  630.065144][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  630.446739][ T7743] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.647091][ T7743] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.914021][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  631.088836][   T51] Bluetooth: hci7: command tx timeout
[  631.221791][ T7801] chnl_net:caif_netlink_parms(): no params data found
[  631.286716][ T7760] hsr_slave_0: entered promiscuous mode
[  631.383277][ T7760] hsr_slave_1: entered promiscuous mode
[  631.437673][ T7760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  631.445623][ T7760] Cannot create hsr debugfs directory
[  631.904526][ T7743] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  632.107098][ T4153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.256624][ T7743] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  632.343126][ T4153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.584278][ T7743] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  632.667936][ T4153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.724490][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.731952][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.740086][ T7789] bridge_slave_0: entered allmulticast mode
[  632.748275][ T7789] bridge_slave_0: entered promiscuous mode
[  632.828031][ T4153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.891964][ T7743] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  632.965252][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.972730][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.980696][ T7789] bridge_slave_1: entered allmulticast mode
[  632.989226][ T7789] bridge_slave_1: entered promiscuous mode
[  633.902935][ T4153] bridge_slave_1: left allmulticast mode
[  633.909102][ T4153] bridge_slave_1: left promiscuous mode
[  633.915614][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.024111][ T4153] bridge_slave_0: left allmulticast mode
[  634.030009][ T4153] bridge_slave_0: left promiscuous mode
[  634.036393][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.773222][ T7845] netlink: 116 bytes leftover after parsing attributes in process `syz.1.515'.
[  634.824327][ T4153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.896676][ T4153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.930259][ T4153] bond0 (unregistering): Released all slaves
[  635.131635][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.204867][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.212392][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.220321][ T7801] bridge_slave_0: entered allmulticast mode
[  635.229475][ T7801] bridge_slave_0: entered promiscuous mode
[  635.386770][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  635.502842][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.512417][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.521655][ T7801] bridge_slave_1: entered allmulticast mode
[  635.532129][ T7801] bridge_slave_1: entered promiscuous mode
[  636.008061][ T7789] team0: Port device team_slave_0 added
[  636.091918][ T4153] hsr_slave_0: left promiscuous mode
[  636.114517][ T4153] hsr_slave_1: left promiscuous mode
[  636.147160][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.155326][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.215706][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.223719][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.304598][ T4153] veth1_macvtap: left promiscuous mode
[  636.310268][ T4153] veth0_macvtap: left promiscuous mode
[  636.316176][ T4153] veth1_vlan: left promiscuous mode
[  636.321587][ T4153] veth0_vlan: left promiscuous mode
[  637.492412][ T4153] team0 (unregistering): Port device team_slave_1 removed
[  640.945025][ T4153] team0 (unregistering): Port device team_slave_0 removed
[  641.612270][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.705354][ T7789] team0: Port device team_slave_1 added
[  641.760900][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  642.250667][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.257980][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.285164][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.340946][ T7801] team0: Port device team_slave_0 added
[  642.377836][ T7760] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  642.471206][ T7801] team0: Port device team_slave_1 added
[  642.521877][ T7760] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  642.650872][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.658171][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.684605][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.782530][ T7760] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  642.864032][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.871130][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.897528][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.928237][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.943218][ T7760] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  643.230455][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.237806][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.268919][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.298807][ T7743] 8021q: adding VLAN 0 to HW filter on device team0
[  643.425107][ T7789] hsr_slave_0: entered promiscuous mode
[  643.495236][ T7789] hsr_slave_1: entered promiscuous mode
[  643.514779][ T7789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.522512][ T7789] Cannot create hsr debugfs directory
[  643.571916][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.579457][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.901890][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.909430][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.237239][ T7801] hsr_slave_0: entered promiscuous mode
[  644.275431][ T7801] hsr_slave_1: entered promiscuous mode
[  644.303932][ T7801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  644.311643][ T7801] Cannot create hsr debugfs directory
[  645.185664][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.641795][ T7760] 8021q: adding VLAN 0 to HW filter on device team0
[  645.783765][ T4153] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.791215][ T4153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.118435][ T4153] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.125965][ T4153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.518368][ T7789] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  646.710230][ T7789] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  646.925651][ T7789] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  647.006669][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.059563][ T7789] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  647.240629][ T7801] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  647.397590][ T7801] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  647.535101][ T7801] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  647.669482][ T7801] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  648.779200][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.961583][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.112534][ T7789] 8021q: adding VLAN 0 to HW filter on device team0
[  649.285301][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.292756][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.356162][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  649.362698][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  649.619791][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.651457][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.659011][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.956423][ T7801] 8021q: adding VLAN 0 to HW filter on device team0
[  650.072921][ T7789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  650.194470][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.201915][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.501029][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.508598][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.855617][ T7743] veth0_vlan: entered promiscuous mode
[  651.064976][ T7743] veth1_vlan: entered promiscuous mode
[  651.696663][ T7743] veth0_macvtap: entered promiscuous mode
[  651.868160][ T7743] veth1_macvtap: entered promiscuous mode
[  652.198065][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.208935][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.219120][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.229810][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.239875][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.250643][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.260705][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.277765][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.289447][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.300127][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.310182][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.320813][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.334427][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.225853][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.251116][ T7760] veth0_vlan: entered promiscuous mode
[  653.449723][ T7760] veth1_vlan: entered promiscuous mode
[  653.646260][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.657668][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.668515][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.679689][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.689770][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.705592][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.717107][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.727841][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.737925][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.748752][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.758805][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.769496][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.782919][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.929493][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.090849][ T7760] veth0_macvtap: entered promiscuous mode
[  654.235137][ T7760] veth1_macvtap: entered promiscuous mode
[  654.556749][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.567534][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.577637][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.589413][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.599496][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.610168][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.625369][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.637570][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.647739][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.658420][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.669502][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.680274][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.690345][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.700971][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.714563][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.862033][ T7801] veth0_vlan: entered promiscuous mode
[  655.001568][ T7801] veth1_vlan: entered promiscuous mode
[  655.096441][ T5787] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  655.171347][ T7743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.182433][ T7743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.191612][ T7743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.200712][ T7743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.264586][ T5787] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  655.395284][ T5787] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  655.510545][ T7801] veth0_macvtap: entered promiscuous mode
[  655.600658][ T7801] veth1_macvtap: entered promiscuous mode
[  655.636326][ T5787] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  655.701040][ T5787] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  655.774994][ T5787] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  655.997226][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.008556][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.018740][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.029519][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.039656][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.050312][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.065476][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.077683][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.087769][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.098443][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.110910][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.123999][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.134126][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.144829][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.154885][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.170552][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.186373][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.452115][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.468109][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.480157][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.490871][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.500932][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.511767][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.521941][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.532698][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.542929][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.553592][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.563695][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.579399][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.592429][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.604246][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.617726][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.844379][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.855112][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.865244][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.880997][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.892628][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.903333][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.913337][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.924262][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.934388][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.945024][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.955091][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.965958][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.981110][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  656.997978][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  657.009384][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  657.020118][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  657.033686][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.703868][ T7760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.712801][ T7760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.721886][ T7760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.730904][ T7760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.044061][ T5787] Bluetooth: hci9: command tx timeout
[  658.211176][ T7801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.220333][ T7801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.229361][ T7801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.238361][ T7801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.478727][ T7789] veth0_vlan: entered promiscuous mode
[  658.591142][ T7890] chnl_net:caif_netlink_parms(): no params data found
[  658.776197][ T7789] veth1_vlan: entered promiscuous mode
[  659.428779][ T7789] veth0_macvtap: entered promiscuous mode
[  659.652796][ T7789] veth1_macvtap: entered promiscuous mode
[  660.137336][ T5787] Bluetooth: hci9: command tx timeout
[  660.162620][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.173492][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.193176][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.205661][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.215754][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.226456][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.236468][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.247113][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.262224][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.274486][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.284618][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.295260][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.305290][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.315894][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.325958][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.336646][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.346881][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  660.362740][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  660.378036][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.222076][ T5787] Bluetooth: hci9: command tx timeout
[  662.342994][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.353956][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.364129][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.374845][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.385087][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.395749][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.410952][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.423084][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.433332][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.444055][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.454108][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.464828][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.474964][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.485739][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.495877][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.511641][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.523132][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.533842][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.546862][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.558199][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.567481][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.575752][ T7890] bridge_slave_0: entered allmulticast mode
[  662.584145][ T7890] bridge_slave_0: entered promiscuous mode
[  662.805425][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.819428][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.828898][ T7890] bridge_slave_1: entered allmulticast mode
[  662.837228][ T7890] bridge_slave_1: entered promiscuous mode
[  662.977306][ T4153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.164584][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  663.257280][ T4153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.295438][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  663.374336][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  663.418649][ T4153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.616340][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  663.709023][ T4153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.725197][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  663.775664][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  663.804939][ T7890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.073627][ T7890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.356014][   T51] Bluetooth: hci9: command tx timeout
[  664.509150][ T7890] team0: Port device team_slave_0 added
[  664.715834][ T7789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.724951][ T7789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.734128][ T7789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  664.743021][ T7789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  664.783045][ T7890] team0: Port device team_slave_1 added
[  665.117777][ T4153] bridge_slave_1: left allmulticast mode
[  665.123840][ T4153] bridge_slave_1: left promiscuous mode
[  665.130011][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.279209][ T4153] bridge_slave_0: left allmulticast mode
[  665.285571][ T4153] bridge_slave_0: left promiscuous mode
[  665.291775][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.013713][ T5787] Bluetooth: hci0: command tx timeout
[  666.205060][ T4153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.290384][ T4153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.348139][ T4153] bond0 (unregistering): Released all slaves
[  666.619823][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.627575][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.655308][ T7890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.849278][ T5787] Bluetooth: hci8: command 0x0406 tx timeout
[  667.025665][ T4153] hsr_slave_0: left promiscuous mode
[  667.084781][ T4153] hsr_slave_1: left promiscuous mode
[  667.130553][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  667.138485][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.287365][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  667.295345][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  667.486634][ T4153] veth1_macvtap: left promiscuous mode
[  667.492341][ T4153] veth0_macvtap: left promiscuous mode
[  667.498349][ T4153] veth1_vlan: left promiscuous mode
[  667.503858][ T4153] veth0_vlan: left promiscuous mode
[  667.884213][ T5793] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  667.927910][ T5793] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  667.964690][ T5793] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  668.033240][ T5793] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  668.046858][ T5793] Bluetooth: hci0: command tx timeout
[  668.056384][ T5787] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  668.065142][ T5787] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  668.891949][ T4153] team0 (unregistering): Port device team_slave_1 removed
[  668.981566][ T4153] team0 (unregistering): Port device team_slave_0 removed
[  669.505440][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.512585][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  669.539056][ T7890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  670.191787][   T51] Bluetooth: hci0: command tx timeout
[  670.197662][   T51] Bluetooth: hci10: command tx timeout
[  670.421560][ T7927] chnl_net:caif_netlink_parms(): no params data found
[  670.642815][ T7890] hsr_slave_0: entered promiscuous mode
[  670.704597][ T7890] hsr_slave_1: entered promiscuous mode
[  670.729138][ T7890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  670.737050][ T7890] Cannot create hsr debugfs directory
[  670.847991][ T4153] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.263154][ T4153] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.447481][ T4153] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.637490][ T4153] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.319150][ T5787] Bluetooth: hci10: command tx timeout
[  672.325403][ T5787] Bluetooth: hci0: command tx timeout
[  672.557793][ T4153] bridge_slave_1: left allmulticast mode
[  672.565030][ T4153] bridge_slave_1: left promiscuous mode
[  672.571871][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.693269][ T4153] bridge_slave_0: left allmulticast mode
[  672.699348][ T4153] bridge_slave_0: left promiscuous mode
[  672.705783][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.267063][ T4153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  673.307075][ T4153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  673.336446][ T4153] bond0 (unregistering): Released all slaves
[  673.644281][ T7946] chnl_net:caif_netlink_parms(): no params data found
[  673.802501][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.810182][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.818066][ T7927] bridge_slave_0: entered allmulticast mode
[  673.826454][ T7927] bridge_slave_0: entered promiscuous mode
[  673.924295][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.932270][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.098625][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.106296][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.114183][ T7927] bridge_slave_1: entered allmulticast mode
[  674.122536][ T7927] bridge_slave_1: entered promiscuous mode
[  674.189390][ T4153] hsr_slave_0: left promiscuous mode
[  674.254803][ T4153] hsr_slave_1: left promiscuous mode
[  674.298534][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  674.306542][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  674.354974][   T51] Bluetooth: hci10: command tx timeout
[  674.404286][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  674.411976][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  674.501390][ T4153] veth1_macvtap: left promiscuous mode
[  674.507328][ T4153] veth0_macvtap: left promiscuous mode
[  674.513055][ T4153] veth1_vlan: left promiscuous mode
[  674.518740][ T4153] veth0_vlan: left promiscuous mode
[  675.258524][ T4153] team0 (unregistering): Port device team_slave_1 removed
[  675.365279][ T4153] team0 (unregistering): Port device team_slave_0 removed
[  675.812379][ T5012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.824780][ T5012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.149812][ T7927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.436119][ T7927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.464828][   T51] Bluetooth: hci10: command tx timeout
[  676.799837][ T7890] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  676.887255][ T7927] team0: Port device team_slave_0 added
[  676.924672][ T7890] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  677.031340][ T7927] team0: Port device team_slave_1 added
[  677.086781][ T7890] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  677.264694][ T4153] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.582256][ T7890] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  677.652130][ T4153] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.931975][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.939367][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.967572][ T7927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  678.195813][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.203809][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.211731][ T7946] bridge_slave_0: entered allmulticast mode
[  678.221769][ T7946] bridge_slave_0: entered promiscuous mode
[  678.257361][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.268048][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.285216][ T7946] bridge_slave_1: entered allmulticast mode
[  678.293928][ T7946] bridge_slave_1: entered promiscuous mode
[  678.495298][ T4153] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.627061][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  678.634344][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  678.660820][ T7927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  678.773775][ T4153] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.028602][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.352425][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.982623][ T7927] hsr_slave_0: entered promiscuous mode
[  680.052176][ T7927] hsr_slave_1: entered promiscuous mode
[  680.161119][ T7927] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  680.169074][ T7927] Cannot create hsr debugfs directory
[  680.198980][ T4153] bridge_slave_1: left allmulticast mode
[  680.205121][ T4153] bridge_slave_1: left promiscuous mode
[  680.211316][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.464979][ T4153] bridge_slave_0: left allmulticast mode
[  680.470907][ T4153] bridge_slave_0: left promiscuous mode
[  680.477752][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.049564][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  681.059113][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  681.068126][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  681.079132][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  681.088927][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  681.097524][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  681.903190][ T4153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.039166][ T4153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.141392][ T4153] bond0 (unregistering): Released all slaves
[  682.449833][ T7946] team0: Port device team_slave_0 added
[  682.927250][ T7946] team0: Port device team_slave_1 added
[  683.146748][ T5787] Bluetooth: hci3: command tx timeout
[  683.176096][ T7994] =====================================================
[  683.184520][ T7994] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x971/0xb90
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  683.192223][ T7994]  ieee802154_hdr_push+0x971/0xb90
[  683.197734][ T7994]  ieee802154_header_create+0x9bc/0xc70
[  683.203598][ T7994]  dgram_sendmsg+0xd5a/0x15a0
[  683.208470][ T7994]  ieee802154_sock_sendmsg+0x96/0xd0
[  683.214213][ T7994]  __sock_sendmsg+0x30f/0x380
[  683.219112][ T7994]  ____sys_sendmsg+0x877/0xb60
[  683.224277][ T7994]  ___sys_sendmsg+0x28d/0x3c0
[  683.229229][ T7994]  __sys_sendmsg+0x1b6/0x300
[  683.234152][ T7994]  __ia32_compat_sys_sendmsg+0x9d/0xe0
[  683.239829][ T7994]  ia32_sys_call+0x2685/0x4180
[  683.244963][ T7994]  __do_fast_syscall_32+0xb0/0x110
[  683.250263][ T7994]  do_fast_syscall_32+0x38/0x80
[  683.255424][ T7994]  do_SYSENTER_32+0x1f/0x30
[  683.260105][ T7994]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  683.266828][ T7994] 
[  683.269253][ T7994] Local variable hdr created at:
[  683.274525][ T7994]  ieee802154_header_create+0x4e/0xc70
[  683.280189][ T7994]  dgram_sendmsg+0xd5a/0x15a0
[  683.285136][ T7994] 
[  683.287602][ T7994] CPU: 1 UID: 0 PID: 7994 Comm: syz.3.520 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[  683.298492][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  683.308894][ T7994] =====================================================
[  683.316066][ T7994] Disabling lock debugging due to kernel taint
[  683.322350][ T7994] Kernel panic - not syncing: kmsan.panic set ...
[  683.328926][ T7994] CPU: 1 UID: 0 PID: 7994 Comm: syz.3.520 Tainted: G    B              6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[  683.341249][ T7994] Tainted: [B]=BAD_PAGE
[  683.345528][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  683.355759][ T7994] Call Trace:
[  683.359164][ T7994]  <TASK>
[  683.362208][ T7994]  dump_stack_lvl+0x216/0x2d0
[  683.367102][ T7994]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  683.373121][ T7994]  dump_stack+0x1e/0x24
[  683.377490][ T7994]  panic+0x4e2/0xcf0
[  683.381713][ T7994]  ? kmsan_get_metadata+0x81/0x1c0
[  683.387044][ T7994]  kmsan_report+0x2c7/0x2d0
[  683.391738][ T7994]  ? kmsan_internal_chain_origin+0xb0/0xd0
[  683.397784][ T7994]  ? __msan_warning+0x95/0x120
[  683.402774][ T7994]  ? ieee802154_hdr_push+0x971/0xb90
[  683.408284][ T7994]  ? ieee802154_header_create+0x9bc/0xc70
[  683.414223][ T7994]  ? dgram_sendmsg+0xd5a/0x15a0
[  683.419265][ T7994]  ? ieee802154_sock_sendmsg+0x96/0xd0
[  683.424939][ T7994]  ? __sock_sendmsg+0x30f/0x380
[  683.430011][ T7994]  ? ____sys_sendmsg+0x877/0xb60
[  683.435185][ T7994]  ? ___sys_sendmsg+0x28d/0x3c0
[  683.440235][ T7994]  ? __sys_sendmsg+0x1b6/0x300
[  683.445191][ T7994]  ? __ia32_compat_sys_sendmsg+0x9d/0xe0
[  683.451051][ T7994]  ? ia32_sys_call+0x2685/0x4180
[  683.456177][ T7994]  ? __do_fast_syscall_32+0xb0/0x110
[  683.461672][ T7994]  ? do_fast_syscall_32+0x38/0x80
[  683.466904][ T7994]  ? do_SYSENTER_32+0x1f/0x30
[  683.471781][ T7994]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  683.478643][ T7994]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  683.485426][ T7994]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  683.492016][ T7994]  ? kmsan_get_metadata+0x13e/0x1c0
[  683.497427][ T7994]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  683.503445][ T7994]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  683.509489][ T7994]  ? stack_depot_save_flags+0x6db/0x750
[  683.515268][ T7994]  ? kmsan_get_metadata+0x13e/0x1c0
[  683.520758][ T7994]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  683.527346][ T7994]  ? kmsan_get_metadata+0x13e/0x1c0
[  683.532756][ T7994]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  683.538775][ T7994]  __msan_warning+0x95/0x120
[  683.543595][ T7994]  ieee802154_hdr_push+0x971/0xb90
[  683.548973][ T7994]  ? __msan_memcpy+0x108/0x1c0
[  683.553974][ T7994]  ieee802154_header_create+0x9bc/0xc70
[  683.559758][ T7994]  ? __pfx_ieee802154_header_create+0x10/0x10
[  683.566035][ T7994]  dgram_sendmsg+0xd5a/0x15a0
[  683.570926][ T7994]  ? __pfx_dgram_sendmsg+0x10/0x10
[  683.576232][ T7994]  ieee802154_sock_sendmsg+0x96/0xd0
[  683.581819][ T7994]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  683.588036][ T7994]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  683.594244][ T7994]  __sock_sendmsg+0x30f/0x380
[  683.599157][ T7994]  ____sys_sendmsg+0x877/0xb60
[  683.604147][ T7994]  ___sys_sendmsg+0x28d/0x3c0
[  683.609026][ T7994]  ? kmsan_get_metadata+0x13e/0x1c0
[  683.614422][ T7994]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  683.620444][ T7994]  ? __rcu_read_unlock+0x7b/0xe0
[  683.625618][ T7994]  ? __fget_files+0x42b/0x500
[  683.630510][ T7994]  ? kmsan_get_metadata+0x13e/0x1c0
[  683.635903][ T7994]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  683.641916][ T7994]  __sys_sendmsg+0x1b6/0x300
[  683.646737][ T7994]  __ia32_compat_sys_sendmsg+0x9d/0xe0
[  683.652439][ T7994]  ia32_sys_call+0x2685/0x4180
[  683.657409][ T7994]  __do_fast_syscall_32+0xb0/0x110
[  683.662728][ T7994]  ? switch_fpu_return+0x17/0x20
[  683.667847][ T7994]  do_fast_syscall_32+0x38/0x80
[  683.672886][ T7994]  do_SYSENTER_32+0x1f/0x30
[  683.677570][ T7994]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  683.684192][ T7994] RIP: 0023:0xf7faf579
[  683.688423][ T7994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  683.708383][ T7994] RSP: 002b:00000000f50e555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  683.717028][ T7994] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200018c0
[  683.725179][ T7994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  683.733319][ T7994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  683.741454][ T7994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  683.749595][ T7994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  683.757752][ T7994]  </TASK>
[  683.761196][ T7994] Kernel Offset: disabled
[  683.765585][ T7994] Rebooting in 86400 seconds..