last executing test programs:

14m21.300857334s ago: executing program 32 (id=88):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
fchownat(r0, 0x0, 0x0, 0x0, 0x400)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYRES8])

14m20.976715254s ago: executing program 33 (id=35):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fchdir(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)

14m4.976752028s ago: executing program 34 (id=92):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(r0, 0x0, 0x0, 0x24000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2200890, 0x0)
semctl$SEM_STAT(0x0, 0x94a0264f816b4378, 0x12, &(0x7f0000000240)=""/102)
ioprio_set$uid(0x3, 0x0, 0x0)

13m43.97617852s ago: executing program 35 (id=115):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

13m32.230505653s ago: executing program 36 (id=130):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f00000001c0)={[{@lazytime}, {@user_xattr}, {@norecovery}, {@nodioread_nolock}, {@dioread_nolock}, {@nombcache}, {@abort}, {@errors_remount}, {@oldalloc}]}, 0x0, 0x7b8, &(0x7f0000001780)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0imVbchzHslL8+cBY780PvfedN/PmWTNIARxYo+mfXMTRiL40OZzNTyKbEb0Rp+vrPV5dKaRTEmtrr3yX1NZ5tLpSiKZtUoezzB8j4rM3Io7ltpZbWVqenSqVigtZfrw6d3m8srR8/NLc1Exxpjh/cmJy8sSpf5w6uXex/vDl8pH7b///rx+d/un1P9x56/MkTseRbFlzHHtlNEazfdKX7sIN/rfXhXVZ0u0KsCvpqdlTP8vjaAxHzzYt+Z99rRkA0CnXImJtlwZ3vSUA0F2JqzgAHDCNzwEera4UGlPU7+dc7+oHE/vkwX8jYrAef+P+Zn1Jb/2e3VeDtfugQ4+S2j2ShiQiRvag/NGIuHn33O10ig7dhwRo5fqNiLgwMrq5/097uM3PLDyrv+1gndFNef0f7J9P0vHPP7eO/yJy2fk/WPu7efwz0OLc3Y125/96Wbl7G1bo24NCm6Tjv383Pdv2uCn+zEhPlvtNbczXl1y8VCqmfdtvI2Is+gbS/MQ2ZYw9/Plhu2XN47/v33ntg7T89HV9jdy93oGN20xPVaeeJ+ZmD25E/Km3VfzJk/ZP2ox/z+6wjJf+9eb77Zal8afxNqat8XfW2q2Iv7Rs//XnoJJtn08crx0O442DooWPv35vqF35ze1/825a0kqh8b/Afkjbf2j7+EeS5uc1K89exhe3hj9tt2xj/Odup+VvjL/18d+fvFpL92fzrk5VqwsTEf3Jy1vnn1jftpFvrJ/GP/bn1uf/dsd/2g1dyNJrT3n4sff+tx/uPv7OSuOfTts/yYJ4avs/e+LO49meduXvrP0na6mxbM7W/q93y/vutILPtfMAAAAAAAAAAAAAAAAAAAAAAAAAYIdyEXEkklz+STqXy+frv+H9+xjKlcqV6rGL5cX56aj9VvZI9OUaX3U53PR9qBPZ9+E38ic25f8eEb+LiHcHDtXy+UK5NN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgc7jN7/+nvhnodu0AgI4Z7HYFAIB95/oPAAdP/frfs3l2f+u1D3W8PgBA59Wu/0lvt6sBAOwjn/8DwMHj+g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnT1zJp3WflxdKaT56StLi7PlK8eni5XZ/NxiIV8oL1zOz5TLM6VivlCea/tG1+svpXL58mTML14drxYr1fHK0vL5ufLifPX8pbmpmeL5Yt++RQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO1dZWp6dKpWKCxLbJ669ENW4kTVbt/eGxAuRGIiIThXR3Esc6k7nBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAr8EsAAAD//4BOHek=")
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000040)=""/39, 0x27)

13m31.455038505s ago: executing program 37 (id=89):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
inotify_init1(0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f00000005c0)=ANY=[], 0x1, 0x27c, &(0x7f0000000200)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x49, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x31, 0x1, 0xffffffffffffffff})
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)

13m15.889153781s ago: executing program 38 (id=140):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r2, 0x29, 0xcb, 0x0, 0x4b)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)

12m38.67966703s ago: executing program 39 (id=155):
set_mempolicy(0x8000, 0x0, 0x8000002)

9m23.295432005s ago: executing program 3 (id=609):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0xfffffffffffffffe})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f00000008c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

9m22.924355564s ago: executing program 3 (id=610):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[])

9m20.064688609s ago: executing program 3 (id=613):
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0xfffffe02, 0x8})
io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18)

9m18.844244803s ago: executing program 3 (id=617):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x8)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000200)="a38d", 0xffffff4b)

9m14.827416037s ago: executing program 3 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r2, 0x29, 0xcb, 0x0, 0x4b)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

9m1.111557915s ago: executing program 40 (id=594):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
unshare(0x28040600)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x34)
open_tree(0xffffffffffffff9c, 0x0, 0x9801)
sendmsg$unix(r0, 0x0, 0x41)
gettid()
r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}})
socket$inet_udp(0x2, 0x2, 0x0)

9m0.527314392s ago: executing program 41 (id=622):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)={0x20, 0x1, 0x4, "ad610d13"}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x20, 0xb, 0x5, "5b01282760"}, 0x0, 0x0, 0x0, 0x0, 0x0})

8m59.911313204s ago: executing program 42 (id=624):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xf0, 0x3}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0xfffe}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

8m58.960798424s ago: executing program 43 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r2, 0x29, 0xcb, 0x0, 0x4b)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

8m57.474057026s ago: executing program 44 (id=626):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000000))

5m17.619116238s ago: executing program 1 (id=845):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b0001000000000904000001"], 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000000000"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0))

5m13.534258865s ago: executing program 1 (id=849):
ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000d40)={0x0, 0x2, 0x2, 0x8, 0x7, 0x1, 0x6})

5m12.433352196s ago: executing program 1 (id=853):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5m7.910895149s ago: executing program 1 (id=870):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x103b01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m6.727841034s ago: executing program 1 (id=874):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=<r1=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

5m6.126210731s ago: executing program 1 (id=878):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
rt_sigpending(0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x11, 0x0)

4m50.230572125s ago: executing program 45 (id=878):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
rt_sigpending(0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x11, 0x0)

3m59.307565718s ago: executing program 2 (id=1045):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

3m49.51670126s ago: executing program 0 (id=1077):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)=""/191, 0xbf}], 0x2}}], 0x2, 0x40002023, 0x0)

3m48.618918986s ago: executing program 0 (id=1080):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

3m44.586795189s ago: executing program 0 (id=1086):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1)

3m43.684094637s ago: executing program 46 (id=1045):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

3m43.599992123s ago: executing program 0 (id=1088):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0xfffffffffffffffe})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f00000008c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m41.790884208s ago: executing program 0 (id=1096):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

3m37.21106136s ago: executing program 0 (id=1103):
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
eventfd(0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x44040000)

3m21.060908593s ago: executing program 47 (id=1103):
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
eventfd(0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x44040000)

3m15.277663565s ago: executing program 6 (id=1132):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @local}})
syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000500)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="d93eaef6"})
ppoll(&(0x7f0000000140)=[{r2, 0x48}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='spmi_read_begin\x00', r4, 0x0, 0x4}, 0x18)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000240), 0x4)

3m13.475545246s ago: executing program 6 (id=1137):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r0, 0x0, 0x0)

3m11.167329704s ago: executing program 6 (id=1140):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1)

3m10.186095759s ago: executing program 6 (id=1142):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m9.191311565s ago: executing program 6 (id=1144):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004044)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
syz_emit_ethernet(0x36, 0x0, 0x0)

3m8.026413699s ago: executing program 6 (id=1147):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x2f, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="0a000000010001", 0x7)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf253d00000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

2m57.874280682s ago: executing program 48 (id=1136):
r0 = memfd_create(0x0, 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1e, 0x4, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r5)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001f00)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000440)={0x24, r6, 0xc01, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}]]}, 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x20040000)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2712, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)
r10 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010726bd7000fcdbdf2567000000080001003300000008000300", @ANYRES32=r13, @ANYBLOB="0800c300741300200800c4"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, 0x0, 0x4010)

2m52.525855207s ago: executing program 49 (id=1147):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x2f, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="0a000000010001", 0x7)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf253d00000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

2m49.230515202s ago: executing program 7 (id=1173):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1)

2m48.15361735s ago: executing program 7 (id=1174):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, 0x0)

2m47.224253505s ago: executing program 7 (id=1176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000400)="4c8d93", 0x3, 0xffffffffffffffff)
sendfile(r5, r4, 0x0, 0x80009)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @private=0xa010102}, 0xc)
keyctl$setperm(0x5, r6, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21400}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000000c0)={r0, 0x5, 0xfff9})

2m42.095553546s ago: executing program 7 (id=1180):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000000140), 0x0)

2m39.352466998s ago: executing program 7 (id=1183):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')

2m33.75169764s ago: executing program 7 (id=1189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmmsg$sock(r4, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$kvm(0xffffff9c, 0x0, 0x200000, 0x0)

2m18.333511896s ago: executing program 50 (id=1189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmmsg$sock(r4, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$kvm(0xffffff9c, 0x0, 0x200000, 0x0)

2m13.052315129s ago: executing program 3 (id=1162):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9)
times(0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$sndmidi(0x0, 0x4, 0x640a00)
syz_open_dev$sg(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2m5.621352885s ago: executing program 4 (id=1221):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22040300)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

2m4.39893461s ago: executing program 4 (id=1223):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0)

2m3.210594194s ago: executing program 4 (id=1226):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="81104000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m2.380021552s ago: executing program 4 (id=1227):
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)={0x2, 0x6, 0x8, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x6c1df3fe1a78f621}]}, 0x18}}, 0x20008084)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141381)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000050)
socket$inet(0x2, 0x2, 0x0)
ioctl$TIOCGDEV(r3, 0x540e, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$BLKRRPART(r6, 0x125f, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x2000, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x0, '\x00', [@generic={0x31}]}]}}}}}, 0x0)

2m0.471539257s ago: executing program 8 (id=1230):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236)
writev(r2, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1)

1m59.910606885s ago: executing program 8 (id=1231):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x0)

1m59.327847358s ago: executing program 8 (id=1232):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95)

1m58.732856913s ago: executing program 4 (id=1233):
r0 = syz_io_uring_setup(0x525f, &(0x7f0000000100)={0x0, 0xebfd, 0x4, 0x1, 0x269}, &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_allowed, @ioring_restriction_sqe_flags_required={0x3, 0x17}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_op={0x1, 0x17}], 0x7)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$vcs(0xffffff9c, &(0x7f00000002c0), 0x3e1202, 0x0)
ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000003c0))
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r2], 0x1c}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071113c0000000000060000000000000095007400000082d7"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcf, &(0x7f0000000480)=""/207, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000200)='./bus\x00', 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/236)
r7 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4})
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000140)={0x3, r10, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1})
close_range(r7, 0xffffffffffffffff, 0x0)
writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1)

1m57.036193519s ago: executing program 51 (id=1162):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9)
times(0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$sndmidi(0x0, 0x4, 0x640a00)
syz_open_dev$sg(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1m56.689892258s ago: executing program 4 (id=1235):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
bind$inet(r6, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x0)
r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[{}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x6b, 0x4, 0x4, '\x00', 0x2})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1, 0x10, 0x1, '\x00', 0x0, 0x3})

1m54.713935974s ago: executing program 8 (id=1238):
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @sdr={0x4f424752}})

1m53.695675911s ago: executing program 8 (id=1239):
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00')
read$FUSE(r5, &(0x7f00000099c0)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2, 0x2, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x1, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x8)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
io_cancel(0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00)
r7 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000280)={0x2009})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0x40000011})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r8, 0x80015b18, 0x0)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)

1m48.937676285s ago: executing program 8 (id=1242):
r0 = io_uring_setup(0x664c, &(0x7f0000000580)={0x0, 0x9779, 0x1880, 0x1, 0x20})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2$watch_queue(0x0, 0x80)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m40.892554772s ago: executing program 52 (id=1235):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
bind$inet(r6, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x0)
r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[{}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x6b, 0x4, 0x4, '\x00', 0x2})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1, 0x10, 0x1, '\x00', 0x0, 0x3})

1m33.370942542s ago: executing program 53 (id=1242):
r0 = io_uring_setup(0x664c, &(0x7f0000000580)={0x0, 0x9779, 0x1880, 0x1, 0x20})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2$watch_queue(0x0, 0x80)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8.935776466s ago: executing program 5 (id=1320):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x2, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
r2 = socket(0x1, 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0))
r3 = io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143})
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000200)=""/166}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xe, 0x1, 0x0, 0x0, 0x100, 0xff81}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x18)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
ioctl$KDSIGACCEPT(r6, 0x5607, 0x38)

7.565333575s ago: executing program 5 (id=1322):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x3, 0x0, 0x2, 0x4, 0x8, 0xc, 0x5, 0x8000, [{0xc569, 0x6, 0x2, 0x4}, {0x9, 0x1, 0x2, 0x8}]}}]}}]}, 0x64}}, 0x44800)

7.44693553s ago: executing program 9 (id=1323):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4008, 0x0, 0x0, 0x22)
msgget$private(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[], 0x0)
gettid()
timer_create(0x2, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$cec(0x0, 0x0, 0xc2b02)
ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x4022}, {r5, 0x20}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f00000003c0), 0x8)

6.502172183s ago: executing program 5 (id=1324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48841}, 0x0)

4.607055663s ago: executing program 5 (id=1325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r1, 0x101, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

3.424234759s ago: executing program 9 (id=1326):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e00001500"/15], 0xa8}}, 0x0)

3.360659407s ago: executing program 2 (id=1234):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef)

2.886400198s ago: executing program 9 (id=1327):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1)

2.52947209s ago: executing program 9 (id=1328):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004044)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
syz_emit_ethernet(0x36, 0x0, 0x0)

2.30533803s ago: executing program 2 (id=1329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0)

1.854495498s ago: executing program 5 (id=1330):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_allowed, @ioring_restriction_sqe_flags_required={0x3, 0x17}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_op={0x1, 0x17}], 0x7)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$vcs(0xffffff9c, &(0x7f00000002c0), 0x3e1202, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f00000003c0))
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071113c0000000000060000000000000095007400000082d7"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcf, &(0x7f0000000480)=""/207, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus\x00', 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/236)
r6 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000140)={0x3, r9, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1})
close_range(r6, 0xffffffffffffffff, 0x0)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1)

1.60436296s ago: executing program 9 (id=1331):
openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r0 = socket$inet(0xa, 0x801, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c000200000000", @ANYRES32=r0], 0x90}}, 0x0)

1.059954838s ago: executing program 2 (id=1332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48841}, 0x0)

909.359512ms ago: executing program 5 (id=1333):
r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xcf38, 0x0, 0x1000, 0xfffffffd})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x11d0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

868.809441ms ago: executing program 9 (id=1334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="84247572017d3def3ee11566550f019bbcf5d233d88221b16c5c8fc7c13ebce2283303750f1891dbcf14b93c", 0x2c}, {&(0x7f0000000580)="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", 0x254}], 0x2)

459.054663ms ago: executing program 2 (id=1335):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e00001500"/15], 0xa8}}, 0x0)

0s ago: executing program 2 (id=1336):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1)

kernel console output (not intermixed with test programs):

om eth2
[  862.425483][T10452] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  862.914829][T10610] random: crng reseeded on system resumption
[  863.856385][T10452] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.040088][T10452] 8021q: adding VLAN 0 to HW filter on device team0
[  864.145056][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.152739][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.299978][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.307720][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  866.709098][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.176464][T10452] veth0_vlan: entered promiscuous mode
[  867.307246][T10452] veth1_vlan: entered promiscuous mode
[  867.728908][T10452] veth0_macvtap: entered promiscuous mode
[  867.794156][T10452] veth1_macvtap: entered promiscuous mode
[  867.935597][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.946413][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.956578][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.972196][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.983702][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.995065][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.005192][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.015889][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.030356][T10452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.143147][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.154143][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.164278][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.179883][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.191448][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.202223][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.212325][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.223108][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.237581][T10452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.256757][T10452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.265933][T10452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.280396][T10452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.290886][T10452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  869.260169][ T9295] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  869.560180][ T9295] usb 7-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  869.569691][ T9295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.686004][ T9295] usb 7-1: config 0 descriptor??
[  869.759325][T10672] random: crng reseeded on system resumption
[  870.370843][T10673] binder: 10671:10673 ioctl c0306201 20000100 returned -14
[  870.678095][ T9295] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  870.688510][ T9295] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  870.700445][ T9295] asix 7-1:0.0: probe with driver asix failed with error -71
[  870.805854][ T9295] usb 7-1: USB disconnect, device number 11
[  873.705219][ T5416] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  873.809665][T10720] random: crng reseeded on system resumption
[  874.053973][ T5416] usb 7-1: Using ep0 maxpacket: 16
[  874.072751][ T5416] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  874.084440][ T5416] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  874.094567][ T5416] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  874.107844][ T5416] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  874.119513][ T5416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.270198][ T5416] usb 7-1: config 0 descriptor??
[  874.312745][ T3907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.324012][ T3907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.480869][ T3837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.489163][ T3837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.031382][T10726] netlink: 84 bytes leftover after parsing attributes in process `syz.0.980'.
[  875.683745][ T5416] usbhid 7-1:0.0: can't add hid device: -71
[  875.690388][ T5416] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  875.837800][ T5416] usb 7-1: USB disconnect, device number 12
[  876.246369][T10730] (syz.2.910,10730,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "htw¥ð	ÛÝá(šÄâ÷Øê×
[  876.246369][T10730] P2)iK�ªÉË9ko‚HÓçæÁ]<€ÿ”ö[XᲤ…¡ÄL¶5‰	ÚLy_L3±" or missing value
[  876.269130][T10730] (syz.2.910,10730,1):ocfs2_fill_super:1178 ERROR: status = -22
[  877.365524][ T9295] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  877.458329][T10736] netlink: 344 bytes leftover after parsing attributes in process `syz.6.983'.
[  877.548136][ T9295] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  877.557851][ T9295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.645521][ T9295] usb 6-1: config 0 descriptor??
[  878.358334][ T9295] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  878.369584][ T9295] asix 6-1:0.0: probe with driver asix failed with error -71
[  878.466911][ T9295] usb 6-1: USB disconnect, device number 6
[  879.993984][ T9295] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  880.184104][ T9295] usb 3-1: Using ep0 maxpacket: 16
[  880.221400][ T9295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  880.233231][ T9295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.243494][ T9295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  880.261526][ T9295] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  880.272722][ T9295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.416211][ T9295] usb 3-1: config 0 descriptor??
[  882.011679][ T9295] usbhid 3-1:0.0: can't add hid device: -71
[  882.019046][ T9295] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  882.105086][ T9295] usb 3-1: USB disconnect, device number 14
[  882.321176][T10794] binder: BINDER_SET_CONTEXT_MGR already set
[  882.327569][T10794] binder: 10791:10794 ioctl 4018620d 200001c0 returned -16
[  883.157369][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1008'.
[  883.451693][T10811] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  885.594888][ T9295] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  885.804056][ T9295] usb 7-1: Using ep0 maxpacket: 16
[  885.847501][ T9295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.859163][ T9295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.869340][ T9295] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  885.882541][ T9295] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  885.896451][ T9295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.960912][ T9295] usb 7-1: config 0 descriptor??
[  887.255191][ T9295] usbhid 7-1:0.0: can't add hid device: -71
[  887.261816][ T9295] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  887.362585][ T9295] usb 7-1: USB disconnect, device number 13
[  888.154803][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  890.207020][T10904] binder: BINDER_SET_CONTEXT_MGR already set
[  890.213269][T10904] binder: 10903:10904 ioctl 4018620d 200001c0 returned -16
[  890.459613][T10913] binder: 10903:10913 ioctl c0306201 0 returned -14
[  890.521872][T10911] random: crng reseeded on system resumption
[  890.831745][T10906] nfs4: Unknown parameter '{€Aîβ+utS×ûß'
[  890.860083][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1035'.
[  890.869568][T10906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1035'.
[  890.879030][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1035'.
[  890.888355][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1035'.
[  891.405308][T10917] binder: 10910:10917 ioctl c0306201 20000100 returned -14
[  891.729625][   T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  891.901373][   T25] usb 1-1: Using ep0 maxpacket: 16
[  891.935595][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.947525][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.957709][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  891.971121][   T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  891.980631][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.128641][   T25] usb 1-1: config 0 descriptor??
[  893.339048][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  893.345976][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  893.391499][   T25] usb 1-1: USB disconnect, device number 14
[  895.115695][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  895.122370][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  895.187181][T10968] binder: 10967:10968 ioctl c0306201 0 returned -14
[  895.814980][T10979] random: crng reseeded on system resumption
[  896.039421][ T9295] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  896.487168][ T9295] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  896.496840][ T9295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.526987][ T9295] usb 6-1: config 0 descriptor??
[  897.038884][    C0] hrtimer: interrupt took 471493 ns
[  897.223926][ T9295] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  897.235340][ T9295] asix 6-1:0.0: probe with driver asix failed with error -71
[  897.337253][ T9295] usb 6-1: USB disconnect, device number 7
[  899.295273][T11009] binder: 11008:11009 ioctl c0306201 0 returned -14
[  900.502157][T11023] random: crng reseeded on system resumption
[  900.894720][T11026] binder: 11022:11026 ioctl c0306201 20000100 returned -14
[  901.400211][T11031] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1070'.
[  905.194741][T11069] random: crng reseeded on system resumption
[  909.216184][T11105] binder: BINDER_SET_CONTEXT_MGR already set
[  909.222551][T11105] binder: 11102:11105 ioctl 4018620d 200001c0 returned -16
[  909.789016][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  909.809630][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  909.886233][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  910.104991][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  910.424147][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  910.434649][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  911.696751][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'.
[  912.547845][T11114] chnl_net:caif_netlink_parms(): no params data found
[  912.848426][ T5797] Bluetooth: hci2: command tx timeout
[  914.031290][ T5840] IPVS: starting estimator thread 0...
[  914.144022][T11159] IPVS: using max 336 ests per chain, 16800 per kthread
[  914.502955][T11114] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.510600][T11114] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.518392][T11114] bridge_slave_0: entered allmulticast mode
[  914.526407][T11114] bridge_slave_0: entered promiscuous mode
[  914.642942][T11114] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.650875][T11114] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.659077][T11114] bridge_slave_1: entered allmulticast mode
[  914.671989][T11114] bridge_slave_1: entered promiscuous mode
[  914.910552][ T5797] Bluetooth: hci2: command tx timeout
[  915.044420][T11114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.094647][T11114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.529545][T11114] team0: Port device team_slave_0 added
[  915.546558][T11114] team0: Port device team_slave_1 added
[  915.821576][T11114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.828936][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.855463][T11114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.896826][T11114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.904116][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.932017][T11114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.486949][T11114] hsr_slave_0: entered promiscuous mode
[  916.731647][T11114] hsr_slave_1: entered promiscuous mode
[  916.778708][T11114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  916.787488][T11114] Cannot create hsr debugfs directory
[  916.970054][ T5797] Bluetooth: hci2: command tx timeout
[  919.045067][ T5797] Bluetooth: hci2: command tx timeout
[  919.400644][T11197] random: crng reseeded on system resumption
[  920.273114][    T8] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  920.508410][    T8] usb 7-1: Using ep0 maxpacket: 32
[  920.665015][    T8] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  920.673436][    T8] usb 7-1: config 0 has no interface number 0
[  920.680212][    T8] usb 7-1: config 0 interface 12 has no altsetting 0
[  920.823805][    T8] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  920.833180][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.841738][    T8] usb 7-1: Product: syz
[  920.846280][    T8] usb 7-1: Manufacturer: syz
[  920.851125][    T8] usb 7-1: SerialNumber: syz
[  920.889964][T11114] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  920.939207][T11114] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  921.017950][    T8] usb 7-1: config 0 descriptor??
[  921.031514][    T8] f81534 7-1:0.12: required endpoints missing
[  921.056542][T11114] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  921.122448][T11114] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  922.148118][T11114] 8021q: adding VLAN 0 to HW filter on device bond0
[  922.330448][T11114] 8021q: adding VLAN 0 to HW filter on device team0
[  922.525678][T11114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  922.536251][T11114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  922.561507][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.568984][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  922.581362][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state
[  922.588835][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  923.751064][    T8] usb 7-1: USB disconnect, device number 14
[  924.469088][T11227] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1114'.
[  925.681788][T11114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  928.451955][T11114] veth0_vlan: entered promiscuous mode
[  928.611517][T11114] veth1_vlan: entered promiscuous mode
[  928.861134][T11114] veth0_macvtap: entered promiscuous mode
[  928.989678][T11114] veth1_macvtap: entered promiscuous mode
[  929.184502][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  929.195464][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.209343][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  929.221056][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.231046][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  929.241701][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.251721][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  929.262401][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.272526][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  929.283668][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.296781][T11114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  929.704478][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.719652][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.730727][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.741352][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.751406][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.762072][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.772109][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.782843][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.792903][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.803621][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.823823][T11114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  930.289112][T11269] random: crng reseeded on system resumption
[  930.692582][T11114] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  930.701751][T11114] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  930.710805][T11114] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  930.719930][T11114] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.903906][    T8] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  931.078314][    T8] usb 7-1: Using ep0 maxpacket: 32
[  931.123062][    T8] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  931.131683][    T8] usb 7-1: config 0 has no interface number 0
[  931.138257][    T8] usb 7-1: config 0 interface 12 has no altsetting 0
[  931.328629][    T8] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  931.338045][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.346308][    T8] usb 7-1: Product: syz
[  931.350589][    T8] usb 7-1: Manufacturer: syz
[  931.358691][    T8] usb 7-1: SerialNumber: syz
[  931.644772][    T8] usb 7-1: config 0 descriptor??
[  932.844320][    T8] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  932.852139][    T8] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  932.859748][    T8] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  932.867763][    T8] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  933.284975][    T8] usb 7-1: USB disconnect, device number 15
[  933.719831][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  933.735167][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  933.744935][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  933.798423][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  933.808216][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  933.821410][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  935.917762][ T5795] Bluetooth: hci3: command tx timeout
[  936.541792][T11289] chnl_net:caif_netlink_parms(): no params data found
[  936.875391][ T5795] Bluetooth: hci9: ACL packet for unknown connection handle 0
[  937.736220][T11329] random: crng reseeded on system resumption
[  938.034766][ T5795] Bluetooth: hci3: command tx timeout
[  939.042269][T11289] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.051568][T11289] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.059296][T11289] bridge_slave_0: entered allmulticast mode
[  939.070948][T11289] bridge_slave_0: entered promiscuous mode
[  939.368392][T11289] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.376864][T11289] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.384728][T11289] bridge_slave_1: entered allmulticast mode
[  939.392729][T11289] bridge_slave_1: entered promiscuous mode
[  940.035427][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  940.084149][ T5797] Bluetooth: hci3: command tx timeout
[  940.212849][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  940.802652][T11289] team0: Port device team_slave_0 added
[  940.908733][T11289] team0: Port device team_slave_1 added
[  941.468444][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.476522][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.506592][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.768046][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  941.776243][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  941.986049][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.993167][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  942.023354][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.149482][ T3837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  942.158063][ T3837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.214806][ T5797] Bluetooth: hci3: command tx timeout
[  943.152459][T11289] hsr_slave_0: entered promiscuous mode
[  943.285373][T11289] hsr_slave_1: entered promiscuous mode
[  943.394515][T11289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  943.402209][T11289] Cannot create hsr debugfs directory
[  944.253801][T11387] random: crng reseeded on system resumption
[  946.427811][T11289] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  946.557544][T11289] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  946.675058][T11289] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  946.787518][T11289] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  948.321025][T11289] 8021q: adding VLAN 0 to HW filter on device bond0
[  948.668985][T11289] 8021q: adding VLAN 0 to HW filter on device team0
[  948.750058][ T4899] bridge0: port 1(bridge_slave_0) entered blocking state
[  948.757638][ T4899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  948.981884][ T4899] bridge0: port 2(bridge_slave_1) entered blocking state
[  948.989401][ T4899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  949.322529][T11289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  951.892844][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  952.403429][T11442] random: crng reseeded on system resumption
[  955.002133][T11289] veth0_vlan: entered promiscuous mode
[  955.247319][T11289] veth1_vlan: entered promiscuous mode
[  955.770600][T11289] veth0_macvtap: entered promiscuous mode
[  955.906473][T11289] veth1_macvtap: entered promiscuous mode
[  956.146384][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  956.158464][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  956.168747][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  956.179529][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  956.189663][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  956.200508][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  956.210659][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  956.221508][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  956.231888][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  956.248479][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  956.260016][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  956.270921][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  956.284661][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  956.572645][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  956.579470][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  956.805179][ T5795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  956.815555][ T5795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  956.836717][ T5795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  956.898873][ T5795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  956.921772][ T5795] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  956.945960][ T5795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  957.202402][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.213080][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.223153][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.234012][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.244021][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.254684][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.269715][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.281756][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.291751][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.302382][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.312395][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  957.323017][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  957.336103][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  958.201505][T11289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  958.210717][T11289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  958.219742][T11289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  958.228809][T11289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  958.854788][T11472] chnl_net:caif_netlink_parms(): no params data found
[  959.043842][ T5797] Bluetooth: hci5: command tx timeout
[  961.134180][ T5797] Bluetooth: hci5: command tx timeout
[  961.165120][T11506] random: crng reseeded on system resumption
[  961.650230][T11472] bridge0: port 1(bridge_slave_0) entered blocking state
[  961.657817][T11472] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.671679][T11472] bridge_slave_0: entered allmulticast mode
[  961.679848][T11472] bridge_slave_0: entered promiscuous mode
[  961.881080][T11472] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.888982][T11472] bridge0: port 2(bridge_slave_1) entered disabled state
[  961.897016][T11472] bridge_slave_1: entered allmulticast mode
[  961.905321][T11472] bridge_slave_1: entered promiscuous mode
[  962.041518][ T5795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  962.059553][ T5795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  962.070535][ T5795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  962.148789][ T5795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  962.160119][ T5795] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  962.171420][ T5795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  962.818543][T11472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  962.958831][T11472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  963.245286][ T5795] Bluetooth: hci5: command tx timeout
[  963.522954][T11472] team0: Port device team_slave_0 added
[  963.758118][T11472] team0: Port device team_slave_1 added
[  964.238747][ T5795] Bluetooth: hci7: command tx timeout
[  964.246325][T11472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  964.253397][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  964.279955][T11472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  964.693742][T11472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  964.700832][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  964.727491][T11472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  965.278399][ T5795] Bluetooth: hci5: command tx timeout
[  965.342364][T11513] chnl_net:caif_netlink_parms(): no params data found
[  965.781819][T11472] hsr_slave_0: entered promiscuous mode
[  965.944918][T11472] hsr_slave_1: entered promiscuous mode
[  966.024073][T11472] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  966.031775][T11472] Cannot create hsr debugfs directory
[  966.316643][ T5795] Bluetooth: hci7: command tx timeout
[  968.403797][ T5797] Bluetooth: hci7: command tx timeout
[  968.801625][ T5795] Bluetooth: hci0: command 0x0406 tx timeout
[  968.812821][T11513] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.820500][T11513] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.828237][T11513] bridge_slave_0: entered allmulticast mode
[  968.842681][T11513] bridge_slave_0: entered promiscuous mode
[  969.127380][T11565] random: crng reseeded on system resumption
[  969.984144][T11513] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.991678][T11513] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.999677][T11513] bridge_slave_1: entered allmulticast mode
[  970.007749][T11513] bridge_slave_1: entered promiscuous mode
[  970.206321][T11472] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  970.480691][ T5795] Bluetooth: hci7: command tx timeout
[  970.624778][T11472] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  970.706639][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.714804][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.793332][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  970.875420][T11472] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  971.030260][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  971.061532][T11472] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  971.239996][ T3837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.248730][ T3837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.659438][T11513] team0: Port device team_slave_0 added
[  971.765577][T11513] team0: Port device team_slave_1 added
[  972.557237][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.564549][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  972.590747][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  973.141575][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  973.148791][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  973.175152][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  973.797439][T11472] 8021q: adding VLAN 0 to HW filter on device bond0
[  974.482825][T11513] hsr_slave_0: entered promiscuous mode
[  974.615256][T11513] hsr_slave_1: entered promiscuous mode
[  974.725765][T11513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  974.733475][T11513] Cannot create hsr debugfs directory
[  974.832477][T11472] 8021q: adding VLAN 0 to HW filter on device team0
[  975.169060][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state
[  975.176704][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state
[  975.540912][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.548412][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state
[  976.406313][T11606] dlm: no locking on control device
[  977.419457][T11612] random: crng reseeded on system resumption
[  978.472284][T11605] warning: `syz.9.1187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  979.094721][T11616] binder: 11610:11616 ioctl c0306201 20000100 returned -14
[  979.260766][T11513] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  979.408342][T11513] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  979.512577][T11513] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  979.850925][T11513] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  980.134839][T11472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.171135][T11472] veth0_vlan: entered promiscuous mode
[  981.411892][T11472] veth1_vlan: entered promiscuous mode
[  982.014547][T11513] 8021q: adding VLAN 0 to HW filter on device bond0
[  982.025017][T11472] veth0_macvtap: entered promiscuous mode
[  982.296454][T11472] veth1_macvtap: entered promiscuous mode
[  982.368304][T11513] 8021q: adding VLAN 0 to HW filter on device team0
[  982.528226][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.535707][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  982.724341][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.735076][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.745238][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.755939][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.772309][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.784817][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.794927][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.805599][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.815642][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.826270][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.836299][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.847060][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.857111][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  982.874083][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  982.888965][T11472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  982.960131][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state
[  982.967693][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  984.389498][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.406908][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.420677][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.433518][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.443880][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.454523][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.464578][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.475653][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.485708][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.496338][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.512618][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.524958][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.535040][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  984.545781][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.559475][T11472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  985.001260][T11472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  985.019579][T11472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  985.031021][T11472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  985.042684][T11472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  986.487351][T11513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  986.506520][T11665] random: crng reseeded on system resumption
[  987.525167][T11665] binder: 11664:11665 ioctl c0306201 20000100 returned -14
[  990.431394][T11513] veth0_vlan: entered promiscuous mode
[  990.629348][T11513] veth1_vlan: entered promiscuous mode
[  991.102267][T11513] veth0_macvtap: entered promiscuous mode
[  991.249209][T11513] veth1_macvtap: entered promiscuous mode
[  991.540643][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.551373][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.561526][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.578682][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.590663][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.601850][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.611861][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.622538][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.632611][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.643281][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.653338][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.663965][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.682763][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.697000][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.707090][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.717734][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.730921][T11513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  992.220175][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.230965][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.241285][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.251933][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.261956][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.272660][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.289708][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.302154][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.312268][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.400018][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.422576][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.435041][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.445101][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.455788][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.467125][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.478495][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.499806][T11513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  993.237650][T11513] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  993.246794][T11513] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  993.255882][T11513] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  993.264944][T11513] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  996.719923][ T5797] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  996.731039][ T5797] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  996.755969][ T4899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.756354][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.764025][ T4899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.780763][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.960873][ T5797] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  996.975178][ T5797] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  996.987384][ T5797] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  997.008281][ T5797] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  997.587257][T11740] random: crng reseeded on system resumption
[  998.575662][T11740] binder: 11736:11740 ioctl c0306201 20000100 returned -14
[  998.902839][ T3520] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.270182][ T3520] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.362718][ T5797] Bluetooth: hci8: command tx timeout
[ 1001.438268][ T5797] Bluetooth: hci8: command tx timeout
[ 1001.818229][ T3520] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.664356][T11727] chnl_net:caif_netlink_parms(): no params data found
[ 1003.271004][ T3520] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.524015][ T5797] Bluetooth: hci8: command tx timeout
[ 1005.303131][T11727] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.310773][T11727] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.318652][T11727] bridge_slave_0: entered allmulticast mode
[ 1005.326940][T11727] bridge_slave_0: entered promiscuous mode
[ 1005.606602][ T5797] Bluetooth: hci8: command tx timeout
[ 1005.649862][T11727] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.658258][T11727] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.666194][T11727] bridge_slave_1: entered allmulticast mode
[ 1005.674371][T11727] bridge_slave_1: entered promiscuous mode
[ 1005.788070][ T3907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1005.796334][ T3907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.207776][T11727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1006.242413][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.250653][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.401978][T11727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1007.176729][T11727] team0: Port device team_slave_0 added
[ 1007.317913][T11727] team0: Port device team_slave_1 added
[ 1007.923441][T11727] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1007.930713][T11727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1007.964855][T11727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1008.454238][T11727] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1008.469974][T11727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.496069][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1008.504618][T11727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1009.458230][T11727] hsr_slave_0: entered promiscuous mode
[ 1009.560719][T11727] hsr_slave_1: entered promiscuous mode
[ 1009.632616][T11727] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1009.641736][T11727] Cannot create hsr debugfs directory
[ 1013.814235][ T9295] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1014.044089][ T9295] usb 9-1: Using ep0 maxpacket: 16
[ 1014.172064][ T9295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1014.183759][ T9295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1014.201974][ T9295] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1014.217036][ T9295] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1014.226358][ T9295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.939119][ T9295] usb 9-1: config 0 descriptor??
[ 1015.296053][ T3520] bridge_slave_1: left allmulticast mode
[ 1015.302004][ T3520] bridge_slave_1: left promiscuous mode
[ 1015.308825][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.679230][ T3520] bridge_slave_0: left allmulticast mode
[ 1015.685424][ T3520] bridge_slave_0: left promiscuous mode
[ 1015.691929][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.182086][ T9295] usbhid 9-1:0.0: can't add hid device: -71
[ 1017.188670][ T9295] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1017.414673][ T9295] usb 9-1: USB disconnect, device number 5
[ 1018.071441][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1018.078205][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1018.115210][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1018.200152][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1018.209604][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1018.220705][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1018.558512][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1018.936105][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1018.948700][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1018.958298][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1019.030126][ T3520] bond0 (unregistering): Released all slaves
[ 1020.244984][    T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1020.476936][    T8] usb 9-1: Using ep0 maxpacket: 8
[ 1020.491974][    T8] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1020.500566][    T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1020.510603][    T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1020.520695][    T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1020.530872][    T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1020.550548][    T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1020.561789][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.325515][ T5795] Bluetooth: hci4: command tx timeout
[ 1021.624659][    T8] usb 9-1: usb_control_msg returned -32
[ 1021.630450][    T8] usbtmc 9-1:16.0: can't read capabilities
[ 1021.718976][T11727] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1021.957028][ T3520] hsr_slave_0: left promiscuous mode
[ 1022.017897][ T3520] hsr_slave_1: left promiscuous mode
[ 1022.065313][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1022.072958][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1022.196916][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1022.205552][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1022.401071][ T3520] veth1_macvtap: left promiscuous mode
[ 1022.408833][ T3520] veth0_macvtap: left promiscuous mode
[ 1022.415039][ T3520] veth1_vlan: left promiscuous mode
[ 1022.420605][ T3520] veth0_vlan: left promiscuous mode
[ 1023.354769][ T5795] Bluetooth: hci4: command tx timeout
[ 1023.544403][    T8] usb 9-1: USB disconnect, device number 6
[ 1024.782982][ T3520] team0 (unregistering): Port device team_slave_1 removed
[ 1024.964493][ T3520] team0 (unregistering): Port device team_slave_0 removed
[ 1025.319062][T11727] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1025.487141][T11727] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1025.496338][ T5795] Bluetooth: hci4: command tx timeout
[ 1025.629964][T11868] chnl_net:caif_netlink_parms(): no params data found
[ 1025.775643][T11727] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1026.457767][ T3520] IPVS: stop unused estimator thread 0...
[ 1026.836311][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.118246][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.390313][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.520238][ T5795] Bluetooth: hci4: command tx timeout
[ 1027.746766][ T3520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.725148][ T3520] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.864612][T11868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1028.872157][T11868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1028.880436][T11868] bridge_slave_0: entered allmulticast mode
[ 1028.888653][T11868] bridge_slave_0: entered promiscuous mode
[ 1029.037299][ T3520] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.229578][ T3520] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.348501][T11868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1029.367714][T11868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1029.375411][T11868] bridge_slave_1: entered allmulticast mode
[ 1029.383397][T11868] bridge_slave_1: entered promiscuous mode
[ 1029.491797][ T3520] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.044697][T11727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1030.122785][T11868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1030.354313][T11868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1030.416768][T11727] 8021q: adding VLAN 0 to HW filter on device team0
[ 1030.945492][ T3520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.112308][T11868] team0: Port device team_slave_0 added
[ 1031.128732][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.136232][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1031.207506][ T3520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.306404][T11868] team0: Port device team_slave_1 added
[ 1031.409223][ T3520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.526776][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.534268][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1031.650519][ T3520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.326869][T11868] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1032.335924][T11868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1032.362165][T11868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1032.858977][ T3520] bridge_slave_1: left allmulticast mode
[ 1032.865436][ T3520] bridge_slave_1: left promiscuous mode
[ 1032.871602][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.106697][ T3520] bridge_slave_0: left allmulticast mode
[ 1033.112494][ T3520] bridge_slave_0: left promiscuous mode
[ 1033.119205][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.425440][ T3520] bridge_slave_1: left allmulticast mode
[ 1033.431323][ T3520] bridge_slave_1: left promiscuous mode
[ 1033.438248][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.665077][ T8509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1033.685967][ T8509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1033.699958][ T8509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1033.715215][ T8509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1033.725674][ T8509] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1033.745499][ T3520] bridge_slave_0: left allmulticast mode
[ 1033.751273][ T3520] bridge_slave_0: left promiscuous mode
[ 1033.765641][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.792290][ T8509] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1034.035385][ T3520] bridge_slave_1: left allmulticast mode
[ 1034.041185][ T3520] bridge_slave_1: left promiscuous mode
[ 1034.048714][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1034.217093][ T3520] bridge_slave_0: left allmulticast mode
[ 1034.222907][ T3520] bridge_slave_0: left promiscuous mode
[ 1034.229649][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1035.965198][ T5795] Bluetooth: hci2: command 0x0406 tx timeout
[ 1035.971351][ T5795] Bluetooth: hci5: command tx timeout
[ 1036.230064][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1036.305739][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1036.345036][ T3520] bond0 (unregistering): Released all slaves
[ 1036.373422][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1036.444454][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1036.465102][ T3520] bond0 (unregistering): Released all slaves
[ 1036.498124][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1036.579353][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1036.605449][ T3520] bond0 (unregistering): Released all slaves
[ 1036.777133][T11868] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1036.784356][T11868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1036.810664][T11868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1037.817444][T11868] hsr_slave_0: entered promiscuous mode
[ 1037.868659][T11868] hsr_slave_1: entered promiscuous mode
[ 1037.890281][T11868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1037.901373][T11868] Cannot create hsr debugfs directory
[ 1038.009528][ T5797] Bluetooth: hci5: command tx timeout
[ 1038.478878][T11727] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1039.877281][T11868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.108971][ T5797] Bluetooth: hci5: command tx timeout
[ 1040.266524][ T3520] hsr_slave_0: left promiscuous mode
[ 1040.667737][ T3520] hsr_slave_1: left promiscuous mode
[ 1040.675269][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1040.684276][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1040.692026][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1040.714368][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1040.725657][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1040.757635][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1040.771890][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1040.779736][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1040.793125][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1040.802331][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1040.929257][ T3520] hsr_slave_0: left promiscuous mode
[ 1040.966067][ T3520] hsr_slave_1: left promiscuous mode
[ 1041.003183][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.010978][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.076804][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1041.084898][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1041.187904][ T3520] hsr_slave_0: left promiscuous mode
[ 1041.203442][ T3520] hsr_slave_1: left promiscuous mode
[ 1041.219231][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.231441][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.258685][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1041.266629][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1041.326352][ T3520] veth1_macvtap: left promiscuous mode
[ 1041.337373][ T3520] veth0_macvtap: left promiscuous mode
[ 1041.343115][ T3520] veth1_vlan: left promiscuous mode
[ 1041.348668][ T3520] veth0_vlan: left promiscuous mode
[ 1041.375248][ T3520] veth1_macvtap: left promiscuous mode
[ 1041.380942][ T3520] veth0_macvtap: left promiscuous mode
[ 1041.386955][ T3520] veth1_vlan: left promiscuous mode
[ 1041.392382][ T3520] veth0_vlan: left promiscuous mode
[ 1041.441317][ T3520] veth1_macvtap: left promiscuous mode
[ 1041.447114][ T3520] veth0_macvtap: left promiscuous mode
[ 1041.452885][ T3520] veth1_vlan: left promiscuous mode
[ 1041.458421][ T3520] veth0_vlan: left promiscuous mode
[ 1042.274723][ T5795] Bluetooth: hci5: command tx timeout
[ 1042.873805][ T5797] Bluetooth: hci3: command tx timeout
[ 1043.060322][ T3520] team0 (unregistering): Port device team_slave_1 removed
[ 1043.150930][ T3520] team0 (unregistering): Port device team_slave_0 removed
[ 1043.783811][ T3520] team0 (unregistering): Port device team_slave_1 removed
[ 1043.837927][ T3520] team0 (unregistering): Port device team_slave_0 removed
[ 1044.428941][ T3520] team0 (unregistering): Port device team_slave_1 removed
[ 1044.453187][ T3520] team0 (unregistering): Port device team_slave_0 removed
[ 1044.906132][T11868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.974922][ T5797] Bluetooth: hci3: command tx timeout
[ 1045.007828][T11935] chnl_net:caif_netlink_parms(): no params data found
[ 1045.356048][T11727] veth0_vlan: entered promiscuous mode
[ 1045.380917][T11727] veth1_vlan: entered promiscuous mode
[ 1045.621669][T11868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.924577][T11868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.387878][T11868] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1046.414333][T11868] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1046.486374][T11868] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1046.561623][T11727] veth0_macvtap: entered promiscuous mode
[ 1046.572528][T11868] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1046.691251][T11727] veth1_macvtap: entered promiscuous mode
[ 1046.920928][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1046.932549][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1046.943431][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1046.954535][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1046.969653][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1046.981757][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1046.991849][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1047.002602][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.012671][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1047.023335][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.036643][T11727] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1047.137549][ T5797] Bluetooth: hci3: command tx timeout
[ 1047.178654][T11912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.300496][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1047.311212][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.321400][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1047.332072][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.342103][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1047.352729][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.363291][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1047.379421][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.390866][T11727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1047.401566][T11727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1047.414589][T11727] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1047.610243][T11912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.709787][T11912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.743153][T11952] chnl_net:caif_netlink_parms(): no params data found
[ 1047.850288][T11912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.165610][T11727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.174792][T11727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.183936][T11727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.195173][T11727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.671039][T11912] bridge_slave_1: left allmulticast mode
[ 1048.677197][T11912] bridge_slave_1: left promiscuous mode
[ 1048.683931][T11912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.861030][T11912] bridge_slave_0: left allmulticast mode
[ 1048.867205][T11912] bridge_slave_0: left promiscuous mode
[ 1048.873434][T11912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.215741][ T5797] Bluetooth: hci3: command tx timeout
[ 1049.331560][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1049.358142][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1049.380522][T11912] bond0 (unregistering): Released all slaves
[ 1050.037768][ T4671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.045843][ T4671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1050.607160][T11952] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.614991][T11952] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.622512][T11952] bridge_slave_0: entered allmulticast mode
[ 1050.632167][T11952] bridge_slave_0: entered promiscuous mode
[ 1050.783907][T11952] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.791348][T11952] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.799200][T11952] bridge_slave_1: entered allmulticast mode
[ 1050.807331][T11952] bridge_slave_1: entered promiscuous mode
[ 1051.188207][T11952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1051.285313][T11952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1051.552899][T11952] team0: Port device team_slave_0 added
[ 1051.635494][T11952] team0: Port device team_slave_1 added
[ 1051.873290][T11952] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1051.885490][T11952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1051.912774][T11952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1052.032275][T11952] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1052.039847][T11952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1052.066297][T11952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1052.836269][T11868] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1052.957072][T11952] hsr_slave_0: entered promiscuous mode
[ 1053.022007][T11952] hsr_slave_1: entered promiscuous mode
[ 1053.083885][T11952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1053.091580][T11952] Cannot create hsr debugfs directory
[ 1054.571063][T11952] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1054.600661][T11952] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1054.686882][T11952] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1054.732927][T11952] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1055.578514][T11952] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1055.751359][T11952] 8021q: adding VLAN 0 to HW filter on device team0
[ 1056.108602][T11952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1056.119430][T11952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1056.225199][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1056.233860][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1056.244121][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1056.271813][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1056.291194][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1056.299730][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1058.399508][ T5795] Bluetooth: hci0: command tx timeout
[ 1058.916957][   T29] audit: type=1326 audit(1736465950.682:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11991 comm="syz.9.1257" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf713d579 code=0x0
[ 1059.241232][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.248735][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1059.264863][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.272269][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1059.365435][T11868] 8021q: adding VLAN 0 to HW filter on device team0
[ 1059.416723][T11935] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.424423][T11935] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.431940][T11935] bridge_slave_0: entered allmulticast mode
[ 1059.440115][T11935] bridge_slave_0: entered promiscuous mode
[ 1059.604695][T11935] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.612141][T11935] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.619805][T11935] bridge_slave_1: entered allmulticast mode
[ 1059.628344][T11935] bridge_slave_1: entered promiscuous mode
[ 1059.980636][T11868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1059.992091][T11868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1060.476628][ T5795] Bluetooth: hci0: command tx timeout
[ 1060.649937][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.657429][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.670094][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.677572][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.852511][T11935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1060.952596][T11935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1061.423015][T11952] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1061.446706][T11981] chnl_net:caif_netlink_parms(): no params data found
[ 1061.490849][T11935] team0: Port device team_slave_0 added
[ 1061.524569][T11935] team0: Port device team_slave_1 added
[ 1061.642837][T11935] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1061.650865][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1061.678069][T11935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1061.944931][T11935] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1061.952054][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1061.979199][T11935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1062.563987][ T5795] Bluetooth: hci0: command tx timeout
[ 1062.989094][T11912] hsr_slave_0: left promiscuous mode
[ 1063.025237][T11912] hsr_slave_1: left promiscuous mode
[ 1063.074904][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1063.082657][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1063.158267][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1063.166731][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1063.272612][T11912] veth1_macvtap: left promiscuous mode
[ 1063.279220][T11912] veth0_macvtap: left promiscuous mode
[ 1063.285290][T11912] veth1_vlan: left promiscuous mode
[ 1063.290698][T11912] veth0_vlan: left promiscuous mode
[ 1063.554060][    C0] ------------[ cut here ]------------
[ 1063.559757][    C0] WARNING: CPU: 0 PID: 34 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x1a6e/0x3bf0
[ 1063.570150][    C0] Modules linked in:
[ 1063.574375][    C0] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0
[ 1063.585444][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1063.596018][    C0] Workqueue: events_unbound kfree_rcu_work
[ 1063.604861][    C0] RIP: 0010:__ieee80211_beacon_get+0x1a6e/0x3bf0
[ 1063.611693][    C0] Code: 89 d5 44 89 e7 e8 72 66 23 f3 41 89 45 00 e9 89 ef ff ff 44 89 e7 e8 a1 6a 23 f3 45 84 ff 0f 85 b2 ef ff ff e8 23 3c 88 f2 90 <0f> 0b 90 e9 a9 ef ff ff 8b 7d c4 e8 82 6a 23 f3 e9 29 f0 ff ff 8b
[ 1063.631839][    C0] RSP: 0018:ffff88813fc05968 EFLAGS: 00010246
[ 1063.638626][    C0] RAX: ffffffff8f30ecdd RBX: 0000000000000000 RCX: ffff8881003dc180
[ 1063.647482][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1063.655936][    C0] RBP: ffff88813fc05ae0 R08: ffffffff8f30dc72 R09: ffffffff8f30d47b
[ 1063.664360][    C0] R10: 0000000000000003 R11: ffff8881003dc180 R12: 0000000000000000
[ 1063.672630][    C0] R13: ffff88813fca1c80 R14: ffff88803f737224 R15: 0000000000000000
[ 1063.681399][    C0] FS:  0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000
[ 1063.692938][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1063.700000][    C0] CR2: 00007f954151a440 CR3: 0000000011672000 CR4: 00000000003526f0
[ 1063.708182][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1063.716459][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1063.724615][    C0] Call Trace:
[ 1063.727992][    C0]  <IRQ>
[ 1063.730932][    C0]  ? show_trace_log_lvl+0x268/0x3d0
[ 1063.736370][    C0]  ? ieee80211_beacon_get_tim+0x84/0x350
[ 1063.742169][    C0]  ? show_regs+0xb4/0xe0
[ 1063.746631][    C0]  ? __warn+0x2c7/0x780
[ 1063.750947][    C0]  ? __ieee80211_beacon_get+0x1a6e/0x3bf0
[ 1063.756957][    C0]  ? report_bug+0x929/0xbd0
[ 1063.761634][    C0]  ? __ieee80211_beacon_get+0x1a6e/0x3bf0
[ 1063.767678][    C0]  ? handle_bug+0x6d/0x90
[ 1063.772172][    C0]  ? exc_invalid_op+0x1f/0x50
[ 1063.777063][    C0]  ? asm_exc_invalid_op+0x1f/0x30
[ 1063.782264][    C0]  ? __ieee80211_beacon_get+0x20b/0x3bf0
[ 1063.788142][    C0]  ? __ieee80211_beacon_get+0xa02/0x3bf0
[ 1063.794000][    C0]  ? __ieee80211_beacon_get+0x1a6d/0x3bf0
[ 1063.799905][    C0]  ? __ieee80211_beacon_get+0x1a6e/0x3bf0
[ 1063.805884][    C0]  ? __ieee80211_beacon_get+0x1a6d/0x3bf0
[ 1063.811787][    C0]  ? ieee80211_beacon_get_tim+0x4b/0x350
[ 1063.817631][    C0]  ? filter_irq_stacks+0x60/0x1a0
[ 1063.822823][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1063.828229][    C0]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1063.834788][    C0]  ieee80211_beacon_get_tim+0x84/0x350
[ 1063.840404][    C0]  mac80211_hwsim_beacon_tx+0x694/0xc40
[ 1063.846195][    C0]  __iterate_interfaces+0x4d6/0x730
[ 1063.851622][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1063.857999][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1063.864382][    C0]  ieee80211_iterate_active_interfaces_atomic+0x3c/0x50
[ 1063.871523][    C0]  mac80211_hwsim_beacon+0x11c/0x300
[ 1063.877034][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1063.882997][    C0]  __hrtimer_run_queues+0x564/0xe40
[ 1063.888420][    C0]  hrtimer_run_softirq+0x18f/0x750
[ 1063.893785][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1063.899783][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1063.905817][    C0]  ? __pfx_hrtimer_run_softirq+0x10/0x10
[ 1063.911611][    C0]  handle_softirqs+0x1a0/0x7c0
[ 1063.916622][    C0]  ? irqtime_account_irq+0x19d/0x280
[ 1063.922090][    C0]  __irq_exit_rcu+0x68/0x180
[ 1063.926880][    C0]  irq_exit_rcu+0x12/0x20
[ 1063.931347][    C0]  sysvec_apic_timer_interrupt+0x83/0x90
[ 1063.937222][    C0]  </IRQ>
[ 1063.940264][    C0]  <TASK>
[ 1063.943286][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[ 1063.949507][    C0] RIP: 0010:virt_to_page_or_null+0x94/0x150
[ 1063.955637][    C0] Code: 48 85 c9 74 23 48 89 d6 48 c1 ee 23 48 8b 34 f1 48 85 f6 74 13 48 89 d1 48 c1 e9 1b 0f b6 c9 48 c1 e1 04 48 01 ce eb 02 31 f6 <65> ff 05 dd e9 b5 7d 48 85 f6 74 09 4c 8b 06 41 f6 c0 02 75 1a 31
[ 1063.975473][    C0] RSP: 0018:ffff8881003eb4c8 EFLAGS: 00000286
[ 1063.981704][    C0] RAX: ffff8881803eb628 RBX: ffff8881003eb628 RCX: 0000000000000200
[ 1063.989869][    C0] RDX: 00000001003eb628 RSI: ffff88813fffacc0 RDI: ffff8881003eb628
[ 1063.998034][    C0] RBP: ffff8881003eb4c8 R08: ffffea000000000f R09: 0000000000000000
[ 1064.006197][    C0] R10: ffff8881003e8000 R11: 0000000000000000 R12: 0000000000000000
[ 1064.014332][    C0] R13: ffff8881003eb618 R14: 0000000000000001 R15: ffff8881003eb628
[ 1064.022451][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1064.028485][    C0]  kmsan_get_metadata+0x13e/0x1c0
[ 1064.033719][    C0]  kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1064.039507][    C0]  __msan_metadata_ptr_for_load_4+0x24/0x40
[ 1064.045652][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1064.051614][    C0]  unwind_get_return_address_ptr+0x27/0xd0
[ 1064.057653][    C0]  update_stack_state+0x177/0x1e0
[ 1064.062888][    C0]  unwind_next_frame+0x11d/0x360
[ 1064.068136][    C0]  arch_stack_walk+0x1ab/0x260
[ 1064.073075][    C0]  ? kmsan_slab_free+0xd0/0x140
[ 1064.078158][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1064.084555][    C0]  stack_trace_save+0xaa/0xe0
[ 1064.089405][    C0]  kmsan_internal_poison_memory+0x49/0x90
[ 1064.095368][    C0]  ? stack_depot_save_flags+0x2c/0x750
[ 1064.101035][    C0]  ? kmsan_internal_poison_memory+0x49/0x90
[ 1064.107180][    C0]  ? kmsan_slab_free+0xd0/0x140
[ 1064.112209][    C0]  ? kmem_cache_free_bulk+0x352/0xea0
[ 1064.117813][    C0]  ? kvfree_rcu_bulk+0x204/0x570
[ 1064.122901][    C0]  ? kfree_rcu_work+0x377/0x770
[ 1064.127959][    C0]  ? process_scheduled_works+0xae0/0x1c40
[ 1064.133913][    C0]  ? worker_thread+0xea7/0x14f0
[ 1064.138938][    C0]  ? kthread+0x3e2/0x540
[ 1064.143319][    C0]  ? ret_from_fork+0x6d/0x90
[ 1064.148119][    C0]  ? ret_from_fork_asm+0x1a/0x30
[ 1064.153233][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1064.158657][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1064.164686][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1064.170188][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1064.176211][    C0]  ? kmem_cache_free_bulk+0x88/0xea0
[ 1064.181671][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1064.187080][    C0]  ? kmsan_get_shadow_origin_ptr+0x38/0xb0
[ 1064.193041][    C0]  ? build_detached_freelist+0x506/0xd00
[ 1064.198920][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1064.204307][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1064.210272][    C0]  kmsan_slab_free+0xd0/0x140
[ 1064.215179][    C0]  kmem_cache_free_bulk+0x352/0xea0
[ 1064.220559][    C0]  ? kvfree_rcu_bulk+0x204/0x570
[ 1064.225755][    C0]  kvfree_rcu_bulk+0x204/0x570
[ 1064.230786][    C0]  kfree_rcu_work+0x377/0x770
[ 1064.235685][    C0]  ? __pfx_kfree_rcu_work+0x10/0x10
[ 1064.241032][    C0]  process_scheduled_works+0xae0/0x1c40
[ 1064.246837][    C0]  worker_thread+0xea7/0x14f0
[ 1064.251704][    C0]  kthread+0x3e2/0x540
[ 1064.255977][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1064.261265][    C0]  ? __pfx_kthread+0x10/0x10
[ 1064.266057][    C0]  ret_from_fork+0x6d/0x90
[ 1064.270686][    C0]  ? __pfx_kthread+0x10/0x10
[ 1064.275486][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1064.280439][    C0]  </TASK>
[ 1064.283632][    C0] ---[ end trace 0000000000000000 ]---
[ 1064.634697][ T5795] Bluetooth: hci0: command tx timeout
[ 1064.829375][T11912] team0 (unregistering): Port device team_slave_1 removed
[ 1064.853131][T11912] team0 (unregistering): Port device team_slave_0 removed
[ 1065.031071][T11935] hsr_slave_0: entered promiscuous mode
[ 1065.074098][T11935] hsr_slave_1: entered promiscuous mode
[ 1065.210416][T11935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1065.218292][T11935] Cannot create hsr debugfs directory
[ 1066.599825][T11868] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1066.778461][T11981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.787564][T11981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.795755][T11981] bridge_slave_0: entered allmulticast mode
[ 1066.804974][T11981] bridge_slave_0: entered promiscuous mode
[ 1066.842136][T11935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.051176][T11981] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.059103][T11981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.067011][T11981] bridge_slave_1: entered allmulticast mode
[ 1067.075360][T11981] bridge_slave_1: entered promiscuous mode
[ 1067.210139][T11935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.582348][T11935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.743884][T11912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.075687][T11935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.288237][T11912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.457852][T11912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.850690][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1068.931165][T11912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.028540][T11868] veth0_vlan: entered promiscuous mode
[ 1069.064265][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1069.658775][T11868] veth1_vlan: entered promiscuous mode
[ 1069.742835][T11981] team0: Port device team_slave_0 added
[ 1069.750632][T11912] bridge_slave_1: left allmulticast mode
[ 1069.758682][T11912] bridge_slave_1: left promiscuous mode
[ 1069.764926][T11912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.824897][T11912] bridge_slave_0: left allmulticast mode
[ 1069.830686][T11912] bridge_slave_0: left promiscuous mode
[ 1069.842889][T11912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.871654][T11912] bridge_slave_1: left allmulticast mode
[ 1069.877852][T11912] bridge_slave_1: left promiscuous mode
[ 1069.884244][T11912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.957450][T11912] bridge_slave_0: left allmulticast mode
[ 1069.963249][T11912] bridge_slave_0: left promiscuous mode
[ 1069.969644][T11912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.775672][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1070.841091][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1070.869817][T11912] bond0 (unregistering): Released all slaves
[ 1070.915059][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1070.980300][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1071.012571][T11912] bond0 (unregistering): Released all slaves
[ 1071.175757][T11981] team0: Port device team_slave_1 added
[ 1071.317052][T11935] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1071.369757][T11935] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1071.422147][T11952] veth0_vlan: entered promiscuous mode
[ 1071.485890][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1071.492970][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1071.519722][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1071.608451][T11935] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1071.727481][T11935] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1071.788906][T11952] veth1_vlan: entered promiscuous mode
[ 1071.843356][T11868] veth0_macvtap: entered promiscuous mode
[ 1071.971893][T11868] veth1_macvtap: entered promiscuous mode
[ 1072.103722][T11952] veth0_macvtap: entered promiscuous mode
[ 1072.149011][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.163523][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.176457][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.187122][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.197152][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.207756][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.217815][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.228477][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.238705][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.249338][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.267053][T11868] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1072.310951][T11952] veth1_macvtap: entered promiscuous mode
[ 1072.332471][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.339673][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1072.369429][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.599495][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.610241][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.620340][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.630984][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.641109][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.651726][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.662411][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.678235][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.689499][T11868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.700140][T11868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.713093][T11868] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1072.794042][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.804821][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.814919][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.825738][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.835835][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.846566][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.856678][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.867520][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.879597][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.891185][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.901358][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.912094][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.926843][T11952] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1072.948315][T11868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.961205][T11868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.972550][T11868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.986889][T11868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.532134][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.543460][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.555160][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.565793][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.575798][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.589714][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.606235][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.618913][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.629007][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.639655][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.651029][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.661680][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.674689][T11952] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1074.029435][T11981] hsr_slave_0: entered promiscuous mode
[ 1074.075898][T11981] hsr_slave_1: entered promiscuous mode
[ 1074.113791][T11981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1074.121582][T11981] Cannot create hsr debugfs directory
[ 1074.314516][T11912] hsr_slave_0: left promiscuous mode
[ 1074.328472][T11912] hsr_slave_1: left promiscuous mode
[ 1074.360163][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1074.368533][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1074.469839][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1074.477826][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1074.626337][T11912] hsr_slave_0: left promiscuous mode
[ 1074.676027][T11912] hsr_slave_1: left promiscuous mode
[ 1074.698799][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1074.706637][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1074.806540][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1074.817910][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1074.953420][T11912] veth1_macvtap: left promiscuous mode
[ 1074.959280][T11912] veth0_macvtap: left promiscuous mode
[ 1074.965140][T11912] veth1_vlan: left promiscuous mode
[ 1074.970582][T11912] veth0_vlan: left promiscuous mode
[ 1075.044487][T11912] veth1_macvtap: left promiscuous mode
[ 1075.050184][T11912] veth0_macvtap: left promiscuous mode
[ 1075.056133][T11912] veth1_vlan: left promiscuous mode
[ 1075.061547][T11912] veth0_vlan: left promiscuous mode
[ 1076.093267][T11912] team0 (unregistering): Port device team_slave_1 removed
[ 1076.141695][T11912] team0 (unregistering): Port device team_slave_0 removed
[ 1076.903334][ T5795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1076.909022][T11912] team0 (unregistering): Port device team_slave_1 removed
[ 1076.935127][T11912] team0 (unregistering): Port device team_slave_0 removed
[ 1077.178159][ T5795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1077.295612][T11952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.305092][T11952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.314310][T11952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.323378][T11952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.353043][ T5795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1077.372434][ T5795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1077.386136][ T5795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1077.395376][ T5795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1078.585697][T11935] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.057085][T11935] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.236036][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.243514][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1079.435712][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1079.442224][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1079.580433][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.587948][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1079.705645][ T5795] Bluetooth: hci6: command tx timeout
[ 1080.355902][T12042] chnl_net:caif_netlink_parms(): no params data found
[ 1080.798185][T11981] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1081.241975][T11981] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1081.634160][T11981] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1081.757828][ T5795] Bluetooth: hci6: command tx timeout
[ 1082.106698][T11981] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1082.388865][ T8617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.631876][ T8617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.893117][ T8617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.079371][ T8617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.836979][ T5795] Bluetooth: hci6: command tx timeout
[ 1083.960574][T12042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.968412][T12042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.976735][T12042] bridge_slave_0: entered allmulticast mode
[ 1083.985903][T12042] bridge_slave_0: entered promiscuous mode
[ 1083.999252][ T8617] bridge_slave_1: left allmulticast mode
[ 1084.006197][ T8617] bridge_slave_1: left promiscuous mode
[ 1084.012749][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.175539][ T8617] bridge_slave_0: left allmulticast mode
[ 1084.181446][ T8617] bridge_slave_0: left promiscuous mode
[ 1084.188748][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1084.766901][ T8617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1084.823791][ T8617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1084.856950][ T8617] bond0 (unregistering): Released all slaves
[ 1084.976997][T12042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1084.984753][T12042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.992364][T12042] bridge_slave_1: entered allmulticast mode
[ 1085.002011][T12042] bridge_slave_1: entered promiscuous mode
[ 1085.181749][ T8617] hsr_slave_0: left promiscuous mode
[ 1085.214006][ T8617] hsr_slave_1: left promiscuous mode
[ 1085.254559][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1085.266992][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1085.369969][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1085.377917][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1085.486064][ T8617] veth1_macvtap: left promiscuous mode
[ 1085.491725][ T8617] veth0_macvtap: left promiscuous mode
[ 1085.497776][ T8617] veth1_vlan: left promiscuous mode
[ 1085.503186][ T8617] veth0_vlan: left promiscuous mode
[ 1085.922325][ T8509] Bluetooth: hci6: command tx timeout
[ 1086.351933][ T8617] team0 (unregistering): Port device team_slave_1 removed
[ 1086.384255][ T8617] team0 (unregistering): Port device team_slave_0 removed
[ 1087.182871][T12042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1087.331513][T12042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.645795][T12042] team0: Port device team_slave_0 added
[ 1087.740123][T12042] team0: Port device team_slave_1 added
[ 1088.056954][T11981] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1088.081438][T12042] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1088.088751][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.114749][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1088.121146][T12042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1088.296943][T11981] 8021q: adding VLAN 0 to HW filter on device team0
[ 1088.353128][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.360700][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.418513][T12042] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1088.425792][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.454589][T12042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.509739][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.517282][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.901936][T11935] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1089.037921][T12042] hsr_slave_0: entered promiscuous mode
[ 1089.095129][T12042] hsr_slave_1: entered promiscuous mode
[ 1090.059327][T11935] veth0_vlan: entered promiscuous mode
[ 1090.181552][T11912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1090.189810][T11912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1090.274221][T11935] veth1_vlan: entered promiscuous mode
[ 1090.459650][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1090.467911][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.008612][T11935] veth0_macvtap: entered promiscuous mode
[ 1091.121644][T11935] veth1_macvtap: entered promiscuous mode
[ 1091.331856][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.342588][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.352656][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.363973][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.374034][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.384738][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.394766][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.409131][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.423031][T11935] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1091.525262][T12042] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1091.627666][T12042] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1091.731734][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.742490][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.752648][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.764029][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.774034][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.784740][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.794770][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.805547][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.823203][T11935] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1091.889817][T12042] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1092.085442][T12042] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1092.456985][T11981] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1093.119071][T11981] veth0_vlan: entered promiscuous mode
[ 1093.320443][T11981] veth1_vlan: entered promiscuous mode
[ 1093.799541][T12042] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1094.082860][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1094.214653][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1094.367877][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1094.390993][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1094.403397][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1094.414087][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1094.491422][T12042] 8021q: adding VLAN 0 to HW filter on device team0
[ 1094.541839][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1094.549593][ T4671] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1094.565657][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1094.573300][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1094.660832][T11981] veth0_macvtap: entered promiscuous mode
[ 1095.078404][T11981] veth1_macvtap: entered promiscuous mode
[ 1095.414629][ T5860] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1095.712729][ T5860] usb 10-1: Using ep0 maxpacket: 32
[ 1095.761048][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.771888][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.782096][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.792833][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.803088][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.815857][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.826925][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.837792][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.847959][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.858746][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.873107][T11981] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1096.010617][ T5860] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[ 1096.021027][ T5860] usb 10-1: config 0 has no interface number 0
[ 1096.028287][ T5860] usb 10-1: config 0 interface 12 has no altsetting 0
[ 1096.279337][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.290098][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.300275][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.311148][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.324224][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.334995][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.345122][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.355855][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.366132][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.376879][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.391253][T11981] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1096.534572][ T5860] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1096.544320][ T5860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.552723][ T5860] usb 10-1: Product: syz
[ 1096.557494][ T5860] usb 10-1: Manufacturer: syz
[ 1096.562475][ T5860] usb 10-1: SerialNumber: syz
[ 1096.649008][ T5795] Bluetooth: hci4: command tx timeout
[ 1096.678876][T11981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.688232][T11981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.697485][T11981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.706614][T11981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.316152][T11912] bridge_slave_1: left allmulticast mode
[ 1097.322075][T11912] bridge_slave_1: left promiscuous mode
[ 1097.328866][T11912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1097.379058][ T5860] usb 10-1: config 0 descriptor??
[ 1097.777048][T11912] bridge_slave_0: left allmulticast mode
[ 1097.783161][T11912] bridge_slave_0: left promiscuous mode
[ 1097.790425][T11912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.345344][ T5860] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[ 1098.354086][ T5860] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[ 1098.361768][ T5860] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1098.372298][ T5860] f81534 10-1:0.12: probe with driver f81534 failed with error -71
[ 1098.652964][ T5860] usb 10-1: USB disconnect, device number 14
[ 1098.719846][ T5795] Bluetooth: hci4: command tx timeout
[ 1099.379265][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1099.467839][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1099.539868][T11912] bond0 (unregistering): Released all slaves
[ 1099.608564][T12146] chnl_net:caif_netlink_parms(): no params data found
[ 1099.865983][T12042] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1100.816441][ T5795] Bluetooth: hci4: command tx timeout
[ 1102.778393][T11912] hsr_slave_0: left promiscuous mode
[ 1102.801748][T11912] hsr_slave_1: left promiscuous mode
[ 1102.818095][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1102.826455][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1102.851277][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1102.859210][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1102.883521][ T5795] Bluetooth: hci4: command tx timeout
[ 1103.263493][T11912] veth1_macvtap: left promiscuous mode
[ 1103.269296][T11912] veth0_macvtap: left promiscuous mode
[ 1103.275200][T11912] veth1_vlan: left promiscuous mode
[ 1103.280604][T11912] veth0_vlan: left promiscuous mode
[ 1103.907625][T11912] team0 (unregistering): Port device team_slave_1 removed
[ 1104.106982][T11912] team0 (unregistering): Port device team_slave_0 removed
[ 1104.661014][T12042] veth0_vlan: entered promiscuous mode
[ 1110.479919][T12042] veth1_vlan: entered promiscuous mode
[ 1110.514513][ T8617] bridge_slave_1: left allmulticast mode
[ 1110.520495][ T8617] bridge_slave_1: left promiscuous mode
[ 1110.530180][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1110.701462][ T8617] bridge_slave_0: left allmulticast mode
[ 1110.708231][ T8617] bridge_slave_0: left promiscuous mode
[ 1110.716508][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1111.462666][ T8617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1111.526375][ T8617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1111.573167][ T8617] bond0 (unregistering): Released all slaves
[ 1112.326590][T12268] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1299'.
[ 1112.393873][T12146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.405010][T12146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.412833][T12146] bridge_slave_0: entered allmulticast mode
[ 1112.422030][T12146] bridge_slave_0: entered promiscuous mode
[ 1112.583235][T12146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.591472][T12146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1112.599383][T12146] bridge_slave_1: entered allmulticast mode
[ 1112.611397][T12146] bridge_slave_1: entered promiscuous mode
[ 1112.796957][ T8617] hsr_slave_0: left promiscuous mode
[ 1112.827285][ T8617] hsr_slave_1: left promiscuous mode
[ 1112.863951][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1112.871893][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1112.966648][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1112.974936][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1113.074321][ T8617] veth1_macvtap: left promiscuous mode
[ 1113.080183][ T8617] veth0_macvtap: left promiscuous mode
[ 1113.087033][ T8617] veth1_vlan: left promiscuous mode
[ 1113.092555][ T8617] veth0_vlan: left promiscuous mode
[ 1114.066612][ T8617] team0 (unregistering): Port device team_slave_1 removed
[ 1114.097021][ T8617] team0 (unregistering): Port device team_slave_0 removed
[ 1114.671096][T12146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1114.684277][T12042] veth0_macvtap: entered promiscuous mode
[ 1114.717384][T12146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1114.832380][T12042] veth1_macvtap: entered promiscuous mode
[ 1115.103391][T12146] team0: Port device team_slave_0 added
[ 1115.147576][T12146] team0: Port device team_slave_1 added
[ 1115.332000][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.342974][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.353084][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.363823][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.376437][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.387757][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.397786][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.408477][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.421434][T12042] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1115.641030][T12146] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1115.649134][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1115.677439][T12146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1115.931267][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.942801][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.953154][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.963949][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.974183][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.986861][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.997495][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.008234][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.022406][T12042] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.032186][T12146] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1116.039473][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1116.065697][T12146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1116.396005][T12042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.405615][T12042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.414788][T12042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.424179][T12042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.047165][T12306] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1308'.
[ 1117.067173][T12146] hsr_slave_0: entered promiscuous mode
[ 1117.222792][ T8509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1117.244838][ T8509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1117.270511][ T8509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1117.284092][ T8509] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1117.308594][ T8509] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1117.326154][ T8509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1117.362769][T12146] hsr_slave_1: entered promiscuous mode
[ 1117.500734][T12146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1117.509621][T12146] Cannot create hsr debugfs directory
[ 1118.851050][ T4899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.205930][ T4899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.457288][ T8509] Bluetooth: hci1: command tx timeout
[ 1119.523862][ T4899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.746507][ T4899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.380248][T12308] chnl_net:caif_netlink_parms(): no params data found
[ 1120.509323][T12146] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1120.584885][ T4899] bridge_slave_1: left allmulticast mode
[ 1120.595292][ T4899] bridge_slave_1: left promiscuous mode
[ 1120.601878][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1120.776416][ T4899] bridge_slave_0: left allmulticast mode
[ 1120.782216][ T4899] bridge_slave_0: left promiscuous mode
[ 1120.788517][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1121.520866][ T8509] Bluetooth: hci1: command tx timeout
[ 1121.548972][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1121.695675][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1121.749971][ T4899] bond0 (unregistering): Released all slaves
[ 1121.915473][T12146] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1122.401020][T12146] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1122.607321][ T4899] hsr_slave_0: left promiscuous mode
[ 1122.665061][ T4899] hsr_slave_1: left promiscuous mode
[ 1122.698436][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1122.707192][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1122.827343][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1122.836698][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1122.897966][ T4899] veth1_macvtap: left promiscuous mode
[ 1122.904031][ T4899] veth0_macvtap: left promiscuous mode
[ 1122.909913][ T4899] veth1_vlan: left promiscuous mode
[ 1122.916834][ T4899] veth0_vlan: left promiscuous mode
[ 1123.196348][T12377] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1317'.
[ 1123.595982][ T8509] Bluetooth: hci1: command tx timeout
[ 1123.868316][ T4899] team0 (unregistering): Port device team_slave_1 removed
[ 1124.141715][ T4899] team0 (unregistering): Port device team_slave_0 removed
[ 1124.401257][T12146] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1125.307781][ T4899] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.526024][ T4899] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.600633][ T4899] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.674529][ T8509] Bluetooth: hci1: command tx timeout
[ 1125.792883][ T4899] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.853338][T12308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1125.860983][T12308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1125.868609][T12308] bridge_slave_0: entered allmulticast mode
[ 1125.877609][T12308] bridge_slave_0: entered promiscuous mode
[ 1126.387978][T12308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1126.395901][T12308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.404209][T12308] bridge_slave_1: entered allmulticast mode
[ 1126.413238][T12308] bridge_slave_1: entered promiscuous mode
[ 1126.504837][    T8] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1126.549564][ T4899] bridge_slave_1: left allmulticast mode
[ 1126.555643][ T4899] bridge_slave_1: left promiscuous mode
[ 1126.562019][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.585362][ T4899] bridge_slave_0: left allmulticast mode
[ 1126.591426][ T4899] bridge_slave_0: left promiscuous mode
[ 1126.598739][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.076418][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1127.202554][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1127.255084][ T4899] bond0 (unregistering): Released all slaves
[ 1127.478993][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1127.602750][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.611540][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1127.655425][T12146] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1127.913440][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1128.290581][T11912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1128.298972][T11912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1128.527167][T12308] team0: Port device team_slave_0 added
[ 1128.600003][ T4899] hsr_slave_0: left promiscuous mode
[ 1128.623118][ T4899] hsr_slave_1: left promiscuous mode
[ 1128.668387][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1128.676479][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1128.734542][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1128.742271][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1128.826071][ T4899] veth1_macvtap: left promiscuous mode
[ 1128.831816][ T4899] veth0_macvtap: left promiscuous mode
[ 1128.837899][ T4899] veth1_vlan: left promiscuous mode
[ 1128.843349][ T4899] veth0_vlan: left promiscuous mode
[ 1129.780510][ T4899] team0 (unregistering): Port device team_slave_1 removed
[ 1129.811130][ T4899] team0 (unregistering): Port device team_slave_0 removed
[ 1130.205564][T12308] team0: Port device team_slave_1 added
[ 1130.341780][T12429] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1328'.
[ 1130.351650][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1328'.
[ 1130.361069][T12429] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1328'.
[ 1130.401923][T12146] 8021q: adding VLAN 0 to HW filter on device team0
[ 1130.539172][T12086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1130.546942][T12086] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1130.567672][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1130.575233][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1130.601523][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1130.678989][T12086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1130.686713][T12086] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1130.838173][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1130.845964][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1130.872733][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1131.406660][T12439] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1331'.
[ 1131.417701][T12439] nbd: must specify at least one socket
[ 1131.669194][T12308] hsr_slave_0: entered promiscuous mode
[ 1131.778017][T12308] hsr_slave_1: entered promiscuous mode
[ 1131.823830][T12308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1131.831676][T12308] Cannot create hsr debugfs directory
[ 1132.429915][T12146] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1133.064595][ T4899] =====================================================
[ 1133.071800][ T4899] BUG: KMSAN: uninit-value in ppp_sync_receive+0x56a/0xf20
[ 1133.079206][ T4899]  ppp_sync_receive+0x56a/0xf20
[ 1133.084262][ T4899]  tty_ldisc_receive_buf+0x202/0x290
[ 1133.089774][ T4899]  tty_port_default_receive_buf+0xdf/0x190
[ 1133.095809][ T4899]  flush_to_ldisc+0x473/0xdb0
[ 1133.100707][ T4899]  process_scheduled_works+0xae0/0x1c40
[ 1133.106474][ T4899]  worker_thread+0xea7/0x14f0
[ 1133.111365][ T4899]  kthread+0x3e2/0x540
[ 1133.115599][ T4899]  ret_from_fork+0x6d/0x90
[ 1133.120198][ T4899]  ret_from_fork_asm+0x1a/0x30
[ 1133.125171][ T4899] 
[ 1133.127585][ T4899] Uninit was created at:
[ 1133.132076][ T4899]  __kmalloc_noprof+0x923/0x1230
[ 1133.137199][ T4899]  __tty_buffer_request_room+0x36e/0x6d0
[ 1133.143043][ T4899]  __tty_insert_flip_string_flags+0x140/0x570
[ 1133.149328][ T4899]  uart_insert_char+0x39e/0xa10
[ 1133.154372][ T4899]  serial8250_read_char+0x1a7/0x5d0
[ 1133.159767][ T4899]  serial8250_handle_irq+0x970/0x1130
[ 1133.165335][ T4899]  serial8250_default_handle_irq+0x120/0x2b0
[ 1133.171550][ T4899]  serial8250_interrupt+0xc5/0x360
[ 1133.176840][ T4899]  __handle_irq_event_percpu+0x118/0xca0
[ 1133.182690][ T4899]  handle_irq_event+0xef/0x2c0
[ 1133.187658][ T4899]  handle_edge_irq+0x340/0xfb0
[ 1133.192604][ T4899]  __common_interrupt+0x97/0x1f0
[ 1133.197712][ T4899]  common_interrupt+0x92/0xb0
[ 1133.202566][ T4899]  asm_common_interrupt+0x2b/0x40
[ 1133.207794][ T4899] 
[ 1133.210233][ T4899] CPU: 1 UID: 0 PID: 4899 Comm: kworker/u8:28 Tainted: G        W          6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0
[ 1133.222857][ T4899] Tainted: [W]=WARN
[ 1133.226767][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1133.236976][ T4899] Workqueue: events_unbound flush_to_ldisc
[ 1133.243006][ T4899] =====================================================
[ 1133.250040][ T4899] Disabling lock debugging due to kernel taint
[ 1133.256311][ T4899] Kernel panic - not syncing: kmsan.panic set ...
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1133.262867][ T4899] CPU: 1 UID: 0 PID: 4899 Comm: kworker/u8:28 Tainted: G    B   W          6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0
[ 1133.275518][ T4899] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1133.280647][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1133.290852][ T4899] Workqueue: events_unbound flush_to_ldisc
[ 1133.296883][ T4899] Call Trace:
[ 1133.300271][ T4899]  <TASK>
[ 1133.303307][ T4899]  dump_stack_lvl+0x216/0x2d0
[ 1133.308197][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.314182][ T4899]  dump_stack+0x1e/0x24
[ 1133.318535][ T4899]  panic+0x4e2/0xcf0
[ 1133.322621][ T4899]  ? kmsan_get_metadata+0x81/0x1c0
[ 1133.327927][ T4899]  kmsan_report+0x2c7/0x2d0
[ 1133.332594][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.338593][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.344576][ T4899]  ? __msan_warning+0x95/0x120
[ 1133.349555][ T4899]  ? ppp_sync_receive+0x56a/0xf20
[ 1133.354780][ T4899]  ? tty_ldisc_receive_buf+0x202/0x290
[ 1133.360457][ T4899]  ? tty_port_default_receive_buf+0xdf/0x190
[ 1133.366668][ T4899]  ? flush_to_ldisc+0x473/0xdb0
[ 1133.371722][ T4899]  ? process_scheduled_works+0xae0/0x1c40
[ 1133.377660][ T4899]  ? worker_thread+0xea7/0x14f0
[ 1133.382726][ T4899]  ? kthread+0x3e2/0x540
[ 1133.387130][ T4899]  ? ret_from_fork+0x6d/0x90
[ 1133.391903][ T4899]  ? ret_from_fork_asm+0x1a/0x30
[ 1133.397055][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.403039][ T4899]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1133.408396][ T4899]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1133.413756][ T4899]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1133.420297][ T4899]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1133.425662][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.431646][ T4899]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1133.437002][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.442985][ T4899]  ? __netdev_alloc_skb+0x559/0x720
[ 1133.448350][ T4899]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1133.453715][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.459697][ T4899]  __msan_warning+0x95/0x120
[ 1133.464495][ T4899]  ppp_sync_receive+0x56a/0xf20
[ 1133.469556][ T4899]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1133.476106][ T4899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1133.482102][ T4899]  ? __pfx_ppp_sync_receive+0x10/0x10
[ 1133.487669][ T4899]  tty_ldisc_receive_buf+0x202/0x290
[ 1133.493177][ T4899]  tty_port_default_receive_buf+0xdf/0x190
[ 1133.499208][ T4899]  flush_to_ldisc+0x473/0xdb0
[ 1133.504093][ T4899]  ? __pfx_tty_port_default_receive_buf+0x10/0x10
[ 1133.510728][ T4899]  ? __pfx_flush_to_ldisc+0x10/0x10
[ 1133.516123][ T4899]  process_scheduled_works+0xae0/0x1c40
[ 1133.521917][ T4899]  worker_thread+0xea7/0x14f0
[ 1133.526826][ T4899]  kthread+0x3e2/0x540
[ 1133.531053][ T4899]  ? __pfx_worker_thread+0x10/0x10
[ 1133.536371][ T4899]  ? __pfx_kthread+0x10/0x10
[ 1133.541128][ T4899]  ret_from_fork+0x6d/0x90
[ 1133.545715][ T4899]  ? __pfx_kthread+0x10/0x10
[ 1133.550471][ T4899]  ret_from_fork_asm+0x1a/0x30
[ 1133.555453][ T4899]  </TASK>
[ 1133.558831][ T4899] Kernel Offset: disabled
[ 1133.563215][ T4899] Rebooting in 86400 seconds..