last executing test programs:

12m28.745477521s ago: executing program 1 (id=2):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x3c}}, 0x4)

12m28.610782622s ago: executing program 0 (id=7):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000007c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x3, 0xfffff034}, {0x6, 0x5, 0x0, 0x8}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48)

12m27.35915261s ago: executing program 1 (id=9):
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x6991, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0)

12m26.880306245s ago: executing program 0 (id=10):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

12m26.587822274s ago: executing program 1 (id=12):
unshare(0x20040600)
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

12m25.818612392s ago: executing program 0 (id=14):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000089d72f894194cc7f416544a000000000000000300000a140000000b0a010800000000000000000000000720000000080a01010000000000000000020000090900010073797a300000000054000000160a01010000000000000000070000060900010073797a31000000000c00054000000000000000021c00038008000240fffffff8080001400000000008000240000000000900010073797a310000000040000000050a0101000000000000000002000006140004800800024014c7da0b08000240796b928808000b400000000408000540200000fc08"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x8084)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12m25.485220378s ago: executing program 1 (id=15):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340"], 0xdc}}, 0x0)

12m24.629140214s ago: executing program 0 (id=17):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x1161, 0x0, 0x0)

12m24.566035012s ago: executing program 1 (id=18):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0xa3, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r3 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x2, 0x4e22, 0xfffc, 0xa}, {0x0, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x8000000000000000, 0x9, 0x53e5, 0x21}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0xa, @in=@multicast1, 0x1502, 0x4, 0x2, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000006200), 0x0, 0x2000000022, 0x0)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

12m23.773548824s ago: executing program 0 (id=20):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="525eb52724d8e9afa919cf57a0c0ad528511e9a3f2931ebb1e5b98c34d33a53a1a354652e2ac56f3e506ad9c6479a98cbc3101cbeafde77b3335bcc7248a2a3ac2c33f0fba1e37d334497ba513fdb799f824962cec57be790f4ab10c2180d4ecb29bb247aa7ae26be5949d696940e698e817cdbb3fbbe888a567ad0b089b410581e70d747472d45c9bde999dbaa1b05d483eb37c1775fe"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

12m22.553130094s ago: executing program 1 (id=22):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

12m17.241607998s ago: executing program 0 (id=31):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x1, 0x4, 0x40)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
unshare(0x22020400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x39, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0)

12m16.282928735s ago: executing program 4 (id=34):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x20008000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc)

12m15.364471732s ago: executing program 4 (id=35):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4)

12m13.939528035s ago: executing program 4 (id=36):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/7, 0x7}, 0x10}], 0x1, 0x20, 0x0)

12m12.375453863s ago: executing program 4 (id=38):
socket$netlink(0x10, 0x3, 0xc)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

12m11.948892913s ago: executing program 4 (id=39):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="2e000400010002", 0x7)

12m11.320426151s ago: executing program 4 (id=41):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x3)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x3)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)

12m6.888897993s ago: executing program 32 (id=22):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

12m1.78047669s ago: executing program 33 (id=31):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x1, 0x4, 0x40)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
unshare(0x22020400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x39, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0)

12m1.470303382s ago: executing program 34 (id=32):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400129009000100626f6e64000000001400028005000100040000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000001080)={@initdev}, &(0x7f0000001100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r2, @ANYBLOB="14000500"], 0x3c}, 0x1, 0x11}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r4, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r9, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000072dc63a19bec3b70ad9090000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
r13 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r12, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x2000)

11m56.020234071s ago: executing program 35 (id=41):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x3)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x3)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)

9m35.706542609s ago: executing program 5 (id=262):
syz_emit_ethernet(0x2d6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6827aa2802a00601fc010000000000000000000000000001fc0200000000000000000000000000012f005a50680000002e1204098008a10afc01000000000000000000000000000000000000000000000000ffff00000000fc00"/114], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

9m32.683670828s ago: executing program 5 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

9m29.947704203s ago: executing program 5 (id=276):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r2}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
close(r1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000900)}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r7)

9m24.565420317s ago: executing program 5 (id=282):
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

9m20.533278245s ago: executing program 5 (id=290):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

9m17.164011835s ago: executing program 5 (id=296):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(r1, 0x0, 0xb24ab1a979ef5d69)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
ppoll(&(0x7f0000000180)=[{r0, 0x1099}, {r3}, {r2, 0x200}], 0x3, &(0x7f0000000200)={r4, r5+10000000}, &(0x7f0000000280)={[0xa0]}, 0x8)

9m1.747680509s ago: executing program 36 (id=296):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(r1, 0x0, 0xb24ab1a979ef5d69)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
ppoll(&(0x7f0000000180)=[{r0, 0x1099}, {r3}, {r2, 0x200}], 0x3, &(0x7f0000000200)={r4, r5+10000000}, &(0x7f0000000280)={[0xa0]}, 0x8)

5m28.379865485s ago: executing program 7 (id=761):
socket$alg(0x26, 0x5, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000004711070"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa)

5m26.731060556s ago: executing program 7 (id=765):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
socket$packet(0x11, 0x2, 0x300)
socket(0xa, 0x5, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x401)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0)

5m23.788429544s ago: executing program 7 (id=770):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0800030008000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m21.923989453s ago: executing program 7 (id=774):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000089d72f894194cc7f416544a000000000000000300000a140000000b0a010800000000000000000000000720000000080a01010000000000000000020000090900010073797a300000000054000000160a01010000000000000000070000060900010073797a31000000000c00054000000000000000021c00038008000240fffffff8080001400000000008000240000000000900010073797a310000000040000000050a0101000000000000000002000006140004800800024014c7da0b08000240796b928808000b400000000408000540200000fc08000b4000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x8084)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

5m21.012495038s ago: executing program 7 (id=776):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/92, 0x5c}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a"], 0x24}}, 0x40004040)

5m19.839977198s ago: executing program 7 (id=780):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x5a)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r8=>0x0})
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x280c0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81003}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x93a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x200088c1)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0)

5m4.091118486s ago: executing program 37 (id=780):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x5a)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r8=>0x0})
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x280c0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81003}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x93a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x200088c1)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0)

4m56.316954745s ago: executing program 6 (id=815):
setsockopt(0xffffffffffffffff, 0x1000, 0x81, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
syz_io_uring_submit(r4, r5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)

4m52.359760462s ago: executing program 6 (id=819):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/92, 0x5c}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r2, 0x0, 0x40004040)

4m51.389291405s ago: executing program 6 (id=822):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

4m44.709553733s ago: executing program 6 (id=826):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0800030008000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m43.388389141s ago: executing program 6 (id=829):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)
sendmmsg$alg(r1, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000003c0)="5caecdeeccfa6bbed9d8d7f1157bd9da392c9801ef1ec4ddeb8de914f6d28b4df4f53918522446c6db022947713ee8418ebd4880e73fb2da48ccfcd43872223d8d2a0180000000000000ba47b3e600000000000000000000007fcc2c53009a6355f07de60efed9f4354831b2b156664ffd4053843748d91f4cc17135f9d862176a77dfe73ce99c247b0b5acaa44ccfc6ed5cc95b2733705a956165d367c02abfb0f5b192146ff2d41fa06848fd80d13dd4b5d87da7ac1fbcdf74c420e9e564582a5dd1b4fe0ed1ef0acebbde53c8b1ebf03ace0b97", 0xd5}], 0x1}], 0x1, 0x80)

4m42.609167986s ago: executing program 6 (id=830):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x40000000006, 0x4, 0x7}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0x200, 0x260, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x1d, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x0, 0x0, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2)
sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00)

4m26.924336718s ago: executing program 38 (id=830):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xfffffffffffffffb, 0xffffffff, 0x40000000006, 0x4, 0x7}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0x200, 0x260, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x1d, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x0, 0x0, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2)
sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00)

2m30.140287864s ago: executing program 8 (id=954):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bdd"], 0x1c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

2m29.030181327s ago: executing program 8 (id=956):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_create1(0x0)
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0)

2m24.215801703s ago: executing program 8 (id=958):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x40000)

2m22.641186137s ago: executing program 8 (id=959):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r0, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)

2m21.56161559s ago: executing program 8 (id=961):
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f0000000140)={[{@uid}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x1, 0x31c, &(0x7f0000000940)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2m20.211807986s ago: executing program 8 (id=962):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x3)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2bc, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8})
r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f00000004c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

2m4.024001045s ago: executing program 39 (id=962):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x3)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2bc, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8})
r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f00000004c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

19.622806839s ago: executing program 2 (id=1048):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r5, &(0x7f00000012c0), 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x21a}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}], 0x2, 0x4004)

17.413173259s ago: executing program 3 (id=1049):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4604c880)
sendto$inet6(r0, &(0x7f0000000440)="f0c0", 0x2, 0x20003bc4, 0x0, 0x0)

16.718828221s ago: executing program 3 (id=1050):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@usrquota}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
keyctl$session_to_parent(0x12)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
capset(0x0, 0x0)
fsopen(0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)

13.366310564s ago: executing program 3 (id=1051):
fsmount(0xffffffffffffffff, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x1e00, &(0x7f0000000240)={[{@usrjquota}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@resgid}, {@block_validity}, {@quota}, {@noquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4})

7.837252933s ago: executing program 2 (id=1052):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r6=>0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r6, 0x100, 0x5, 0x80000003, 0x8}, 0x14)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210004000000070009058103"], 0x0)

3.130316225s ago: executing program 2 (id=1053):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000200)="f30f4a6200c7442400f7ff0000c744240200000000c7442406000000000f0114242e0f23d465906536dcff3ef3abc4e3fd0095b94fdf8a003766ba2000ed3e6680797309", 0x44}], 0x1, 0x15, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.117827115s ago: executing program 2 (id=1054):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0)

1.852780705s ago: executing program 3 (id=1055):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@increfs], 0x50, 0x0, &(0x7f0000000200)="72063e34f9fcc7c8c164dfcdcf13df7773862e16c8e23e33994abfd7fa1c7596289c930b2d203d7397531e1c668c48ce892776fd03bf1ca155bd2d47c4fb8f14dd7e3f02936f92997dd3c61493c12f4e"})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f00000002c0)=[@dead_binder_done], 0x0, 0x0, 0x0})

1.686369922s ago: executing program 2 (id=1056):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00'})
r2 = socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r3, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, 0x0, 0xff00)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x3}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

559.309197ms ago: executing program 3 (id=1057):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f00000002c0))

32.991308ms ago: executing program 2 (id=1058):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xf4})

0s ago: executing program 3 (id=1059):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

kernel console output (not intermixed with test programs):

 T7809] erofs (device loop3): read error -117 @ 8200 of nid 36
[  504.698324][ T7803] loop6: detected capacity change from 0 to 1024
[  506.510332][ T7812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  506.624777][ T7815] syzkaller0: entered promiscuous mode
[  506.630498][ T7815] syzkaller0: entered allmulticast mode
[  507.165021][ T7812] tipc: Resetting bearer <eth:syzkaller0>
[  507.284410][ T7810] tipc: Resetting bearer <eth:syzkaller0>
[  507.388859][ T7810] tipc: Disabling bearer <eth:syzkaller0>
[  508.927742][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  508.938022][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  508.974517][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  508.996770][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  509.008980][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  511.143567][   T50] Bluetooth: hci0: command tx timeout
[  512.417649][ T7871] netlink: 'syz.6.471': attribute type 12 has an invalid length.
[  512.426237][ T7871] netlink: 'syz.6.471': attribute type 29 has an invalid length.
[  512.434418][ T7871] netlink: 148 bytes leftover after parsing attributes in process `syz.6.471'.
[  513.203735][ T5785] Bluetooth: hci0: command tx timeout
[  513.298904][   T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.418421][ T7833] chnl_net:caif_netlink_parms(): no params data found
[  513.716193][   T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.976076][   T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.240209][   T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.288329][   T50] Bluetooth: hci0: command tx timeout
[  517.364511][   T50] Bluetooth: hci0: command tx timeout
[  517.382568][   T35] bridge_slave_1: left allmulticast mode
[  517.393050][   T35] bridge_slave_1: left promiscuous mode
[  517.400038][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.434841][   T35] bridge_slave_0: left allmulticast mode
[  517.440742][   T35] bridge_slave_0: left promiscuous mode
[  517.447812][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.312374][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.404549][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.474216][   T35] bond0 (unregistering): Released all slaves
[  519.859975][   T35] hsr_slave_0: left promiscuous mode
[  519.896581][   T35] hsr_slave_1: left promiscuous mode
[  519.974362][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.981982][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.044617][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.052232][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.210448][   T35] veth1_macvtap: left promiscuous mode
[  520.253652][   T35] veth0_macvtap: left promiscuous mode
[  520.259656][   T35] veth1_vlan: left promiscuous mode
[  520.286164][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.490'.
[  520.334930][   T35] veth0_vlan: left promiscuous mode
[  523.083914][  T798] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  523.100046][ T5838] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  523.283754][ T5838] usb 4-1: Using ep0 maxpacket: 16
[  523.320035][  T798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.331925][  T798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.342214][  T798] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  523.355672][  T798] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  523.365150][  T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.398220][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.414607][ T5838] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  523.424164][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.482499][  T798] usb 7-1: config 0 descriptor??
[  523.519952][ T5838] usb 4-1: config 0 descriptor??
[  523.818570][   T35] team0 (unregistering): Port device team_slave_1 removed
[  524.037757][   T35] team0 (unregistering): Port device team_slave_0 removed
[  524.140505][ T5838] kye 0003:0458:5016.0003: control desc unexpectedly large
[  524.162889][  T798] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  524.227324][ T5838] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0003/input/input6
[  524.397691][ T5838] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0003/input/input7
[  524.665576][ T5838] kye 0003:0458:5016.0003: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0
[  524.689318][ T6381] usb 7-1: USB disconnect, device number 4
[  524.955762][ T5838] usb 4-1: USB disconnect, device number 3
[  525.253752][ T7962] fido_id[7962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  525.791340][ T7965] fido_id[7965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  526.086500][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.095841][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.187669][ T7833] bridge_slave_0: entered allmulticast mode
[  526.235304][ T7833] bridge_slave_0: entered promiscuous mode
[  526.345909][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.353747][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.399643][ T7833] bridge_slave_1: entered allmulticast mode
[  526.439648][ T7833] bridge_slave_1: entered promiscuous mode
[  526.675367][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.504'.
[  527.200220][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.369006][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.191465][ T7833] team0: Port device team_slave_0 added
[  528.414145][ T7833] team0: Port device team_slave_1 added
[  529.205534][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.212705][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.244029][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.509486][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.517106][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.548289][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.321730][ T7833] hsr_slave_0: entered promiscuous mode
[  530.417836][ T7833] hsr_slave_1: entered promiscuous mode
[  530.484620][ T7833] debugfs: 'hsr0' already exists in 'hsr'
[  530.490577][ T7833] Cannot create hsr debugfs directory
[  531.022614][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'.
[  538.399922][ T8049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  538.436020][ T7833] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  538.628072][ T7833] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  538.632093][ T8049] kvm: pic: non byte read
[  538.681881][ T8049] kvm: pic: level sensitive irq not supported
[  538.684204][ T8049] kvm: pic: non byte read
[  538.732216][ T8049] kvm: pic: level sensitive irq not supported
[  538.733490][ T8049] kvm: pic: non byte read
[  538.791742][ T7833] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  539.054077][ T5785] Bluetooth: hci0: command 0x0405 tx timeout
[  539.115528][ T7833] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  539.965761][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'.
[  541.176468][ T8073] loop6: detected capacity change from 0 to 16
[  541.484368][ T8073] erofs (device loop6): mounted with root inode @ nid 36.
[  542.512016][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  542.518893][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  542.944085][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.261436][ T7833] 8021q: adding VLAN 0 to HW filter on device team0
[  544.465600][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.473475][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.693424][  T891] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  544.706126][  T746] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.713755][  T746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.936304][  T891] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[  544.997236][  T891] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  545.011697][  T891] usb 8-1: config 0 interface 0 has no altsetting 0
[  545.164873][  T891] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  545.175470][  T891] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  545.184115][  T891] usb 8-1: Product: syz
[  545.188501][  T891] usb 8-1: Manufacturer: syz
[  545.193581][  T891] usb 8-1: SerialNumber: syz
[  545.345211][  T891] usb 8-1: config 0 descriptor??
[  545.412834][  T891] hub 8-1:0.0: bad descriptor, ignoring hub
[  545.426062][  T891] hub 8-1:0.0: probe with driver hub failed with error -5
[  545.549921][  T891] usb 8-1: selecting invalid altsetting 0
[  545.896116][  T891] usb 8-1: USB disconnect, device number 3
[  546.272593][ T7365] udevd[7365]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  546.605282][  T891] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  546.773751][  T891] usb 8-1: Using ep0 maxpacket: 32
[  546.825873][  T891] usb 8-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  546.837025][  T891] usb 8-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  546.853558][  T891] usb 8-1: config 1 interface 0 has no altsetting 0
[  547.085919][  T891] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  547.095529][  T891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.104123][  T891] usb 8-1: Product: syz
[  547.108497][  T891] usb 8-1: Manufacturer: syz
[  547.113454][  T891] usb 8-1: SerialNumber: syz
[  547.257991][ T8094] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  547.840362][  T891] usb 8-1: can't set config #1, error -71
[  547.914623][  T891] usb 8-1: USB disconnect, device number 4
[  548.654951][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.544'.
[  548.690707][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.457752][ T8123] bond0: (slave bond_slave_1): Releasing backup interface
[  553.755760][ T5838] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  553.995709][ T5838] usb 8-1: config 1 interface 0 has no altsetting 0
[  554.056616][ T5838] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  554.066587][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.075375][ T5838] usb 8-1: Product: syz
[  554.079759][ T5838] usb 8-1: Manufacturer: syz
[  554.084711][ T5838] usb 8-1: SerialNumber: syz
[  555.013404][ T5838] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  555.341677][ T7833] veth0_vlan: entered promiscuous mode
[  555.548544][ T7833] veth1_vlan: entered promiscuous mode
[  556.241760][ T7833] veth0_macvtap: entered promiscuous mode
[  556.316478][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'.
[  556.358885][ T7833] veth1_macvtap: entered promiscuous mode
[  557.147262][ T5838] usb 8-1: USB disconnect, device number 5
[  557.508545][ T5838] usblp0: removed
[  557.829495][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.274536][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.711584][ T6192] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.983601][ T6192] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.163473][   T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.339727][   T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.195482][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.570'.
[  566.710520][ T8230] x_tables: duplicate underflow at hook 1
[  571.060469][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  571.071803][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  571.082787][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  571.099225][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  571.111192][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  572.805200][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.583'.
[  573.218316][ T5785] Bluetooth: hci5: command tx timeout
[  574.141307][ T8254] chnl_net:caif_netlink_parms(): no params data found
[  575.284362][ T5785] Bluetooth: hci5: command tx timeout
[  577.363525][ T5785] Bluetooth: hci5: command tx timeout
[  577.956536][ T6192] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.478891][ T6192] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.533745][ T5785] Bluetooth: hci5: command tx timeout
[  580.870830][ T6192] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.178077][ T6192] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.288938][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.297304][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.379645][ T8254] bridge_slave_0: entered allmulticast mode
[  581.485341][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.596'.
[  581.489911][ T8254] bridge_slave_0: entered promiscuous mode
[  581.592059][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.601985][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.720622][ T8254] bridge_slave_1: entered allmulticast mode
[  581.757367][ T8254] bridge_slave_1: entered promiscuous mode
[  582.084255][   T50] Bluetooth: hci5: command 0x0405 tx timeout
[  583.036027][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.385238][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.878286][ T6192] bridge_slave_1: left allmulticast mode
[  583.887356][ T6192] bridge_slave_1: left promiscuous mode
[  583.896595][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.968515][ T6192] bridge_slave_0: left allmulticast mode
[  583.976797][ T6192] bridge_slave_0: left promiscuous mode
[  583.985892][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.651103][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.847136][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  587.004108][ T6192] bond0 (unregistering): Released all slaves
[  587.436812][ T8254] team0: Port device team_slave_0 added
[  587.548635][ T8254] team0: Port device team_slave_1 added
[  588.912738][ T6192] hsr_slave_0: left promiscuous mode
[  588.954822][ T6192] hsr_slave_1: left promiscuous mode
[  588.995303][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  589.003410][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.061908][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  589.069961][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  589.259715][ T6192] veth1_macvtap: left promiscuous mode
[  589.303702][ T6192] veth0_macvtap: left promiscuous mode
[  589.330946][ T6192] veth1_vlan: left promiscuous mode
[  589.361569][ T6192] veth0_vlan: left promiscuous mode
[  590.445839][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'.
[  590.814429][ T8449] x_tables: duplicate underflow at hook 1
[  594.187753][ T6192] team0 (unregistering): Port device team_slave_1 removed
[  594.212955][ T6192] team0 (unregistering): Port device team_slave_0 removed
[  596.294038][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.301205][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.332411][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.807967][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.820503][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.851766][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.936855][ T8443] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  596.946751][ T8443] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  596.956912][ T8443] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  596.971982][   T30] audit: type=1800 audit(1769065700.734:2): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.619" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  597.894223][ T8254] hsr_slave_0: entered promiscuous mode
[  597.910502][ T8254] hsr_slave_1: entered promiscuous mode
[  597.990282][ T8254] debugfs: 'hsr0' already exists in 'hsr'
[  598.001186][ T8254] Cannot create hsr debugfs directory
[  603.512940][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  603.520006][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  604.432645][ T8254] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  604.591953][ T8254] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  604.761829][ T8530] netlink: 'syz.3.642': attribute type 12 has an invalid length.
[  604.770206][ T8530] netlink: 'syz.3.642': attribute type 29 has an invalid length.
[  604.778528][ T8530] netlink: 148 bytes leftover after parsing attributes in process `syz.3.642'.
[  604.789566][ T8254] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  604.892067][ T8254] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  609.674175][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.990427][ T8254] 8021q: adding VLAN 0 to HW filter on device team0
[  610.181980][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.189762][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.470347][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.478155][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.949658][ T8572] netlink: 'syz.8.654': attribute type 12 has an invalid length.
[  610.963714][ T8572] netlink: 'syz.8.654': attribute type 29 has an invalid length.
[  610.971642][ T8572] netlink: 148 bytes leftover after parsing attributes in process `syz.8.654'.
[  615.056320][ T8607] x_tables: duplicate underflow at hook 1
[  616.572581][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.158862][ T8615] netlink: 'syz.3.667': attribute type 12 has an invalid length.
[  617.167112][ T8615] netlink: 'syz.3.667': attribute type 29 has an invalid length.
[  617.175466][ T8615] netlink: 148 bytes leftover after parsing attributes in process `syz.3.667'.
[  621.982408][ T8254] veth0_vlan: entered promiscuous mode
[  622.184487][ T8254] veth1_vlan: entered promiscuous mode
[  622.563385][ T5790] Bluetooth: hci5: command 0x0405 tx timeout
[  623.009911][ T8671] netlink: 'syz.6.680': attribute type 12 has an invalid length.
[  623.020213][ T8671] netlink: 'syz.6.680': attribute type 29 has an invalid length.
[  623.029905][ T8671] netlink: 148 bytes leftover after parsing attributes in process `syz.6.680'.
[  623.092908][ T8254] veth0_macvtap: entered promiscuous mode
[  623.282347][ T8254] veth1_macvtap: entered promiscuous mode
[  623.470777][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.711804][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.998275][ T8307] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.084877][ T8307] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.146038][ T8307] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.246755][   T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  628.671747][ T8728] netlink: 'syz.7.694': attribute type 12 has an invalid length.
[  628.679902][ T8728] netlink: 'syz.7.694': attribute type 29 has an invalid length.
[  628.688133][ T8728] netlink: 148 bytes leftover after parsing attributes in process `syz.7.694'.
[  631.960103][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  632.009638][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  632.021298][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  632.039232][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  632.077120][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  634.040478][ T8776] netlink: 'syz.8.705': attribute type 12 has an invalid length.
[  634.048813][ T8776] netlink: 'syz.8.705': attribute type 29 has an invalid length.
[  634.057109][ T8776] netlink: 148 bytes leftover after parsing attributes in process `syz.8.705'.
[  634.169003][   T50] Bluetooth: hci0: command tx timeout
[  636.248596][   T50] Bluetooth: hci0: command tx timeout
[  636.621665][ T8762] chnl_net:caif_netlink_parms(): no params data found
[  637.650584][ T6192] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.969556][ T6192] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.202576][ T6192] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.323824][   T50] Bluetooth: hci0: command tx timeout
[  638.368240][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.718'.
[  638.528577][ T6192] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.257677][ T6192] bridge_slave_1: left allmulticast mode
[  640.264647][ T6192] bridge_slave_1: left promiscuous mode
[  640.271484][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.399148][ T6192] bridge_slave_0: left allmulticast mode
[  640.405478][ T5790] Bluetooth: hci0: command tx timeout
[  640.411348][ T6192] bridge_slave_0: left promiscuous mode
[  640.418955][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.486192][ T5790] Bluetooth: hci0: command 0x0405 tx timeout
[  643.062930][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  643.197423][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  643.351659][ T6192] bond0 (unregistering): Released all slaves
[  644.352970][ T6192] hsr_slave_0: left promiscuous mode
[  644.412177][ T6192] hsr_slave_1: left promiscuous mode
[  644.426275][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  644.434097][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.494484][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  644.507197][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.515522][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.614134][ T6192] veth1_macvtap: left promiscuous mode
[  644.619913][ T6192] veth0_macvtap: left promiscuous mode
[  644.690042][ T6192] veth1_vlan: left promiscuous mode
[  644.713747][ T6192] veth0_vlan: left promiscuous mode
[  647.543486][ T8901] loop6: detected capacity change from 0 to 512
[  648.544748][ T6192] team0 (unregistering): Port device team_slave_1 removed
[  649.297351][ T6192] team0 (unregistering): Port device team_slave_0 removed
[  650.735594][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'.
[  650.995583][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.007420][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.033783][ T8762] bridge_slave_0: entered allmulticast mode
[  651.054334][ T8762] bridge_slave_0: entered promiscuous mode
[  651.108567][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.116303][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.179084][ T8762] bridge_slave_1: entered allmulticast mode
[  651.193392][ T8762] bridge_slave_1: entered promiscuous mode
[  651.228684][ T8914] tipc: Cannot configure node identity twice
[  652.878599][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.017361][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.522727][ T8762] team0: Port device team_slave_0 added
[  653.584977][ T8762] team0: Port device team_slave_1 added
[  654.179906][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.187323][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.214027][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.419167][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.430058][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.456300][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.668474][ T8762] hsr_slave_0: entered promiscuous mode
[  655.691566][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'.
[  655.718684][ T8762] hsr_slave_1: entered promiscuous mode
[  655.747335][ T8762] debugfs: 'hsr0' already exists in 'hsr'
[  655.757736][ T8762] Cannot create hsr debugfs directory
[  659.944163][ T8762] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  660.075831][ T8762] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  660.279065][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'.
[  660.293808][ T8762] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  660.465690][ T8762] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  660.475106][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.764'.
[  661.902698][ T9005] loop3: detected capacity change from 0 to 2048
[  662.166859][ T9005] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  663.163440][ T9005] UDF-fs: unknown compression code (0)
[  664.977940][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  664.985337][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  665.102594][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.423748][ T8762] 8021q: adding VLAN 0 to HW filter on device team0
[  665.671662][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.679411][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.825361][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.832967][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.710437][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.776'.
[  666.897433][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.777'.
[  668.785181][ T9064] syzkaller0: entered promiscuous mode
[  668.790906][ T9064] syzkaller0: entered allmulticast mode
[  669.077585][ T9064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.190475][ T9062] tipc: Resetting bearer <eth:syzkaller0>
[  669.304300][ T9062] tipc: Disabling bearer <eth:syzkaller0>
[  670.268480][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.158842][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.789'.
[  671.949105][ T9087] syz.3.788 (9087): drop_caches: 2
[  673.474326][  T798] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  673.728334][  T798] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  673.830816][  T798] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  673.841553][  T798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.851078][  T798] usb 9-1: Product: syz
[  673.855886][  T798] usb 9-1: Manufacturer: syz
[  673.860664][  T798] usb 9-1: SerialNumber: syz
[  674.087696][  T798] usb 9-1: config 0 descriptor??
[  674.558155][  T798] usb 9-1: USB disconnect, device number 4
[  675.146994][ T9120] netlink: 72 bytes leftover after parsing attributes in process `syz.6.794'.
[  675.230263][ T9121] netlink: 72 bytes leftover after parsing attributes in process `syz.6.794'.
[  675.251303][ T8762] veth0_vlan: entered promiscuous mode
[  675.431480][ T8762] veth1_vlan: entered promiscuous mode
[  676.154342][ T8762] veth0_macvtap: entered promiscuous mode
[  676.301007][ T8762] veth1_macvtap: entered promiscuous mode
[  676.658460][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  676.810745][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.013763][ T1095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.066304][ T1095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.190608][  T746] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.310466][  T746] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.890996][ T9137] loop8: detected capacity change from 0 to 512
[  683.695432][ T9166] loop6: detected capacity change from 0 to 256
[  683.786554][ T9166] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  683.911993][ T9168] netlink: 72 bytes leftover after parsing attributes in process `syz.8.805'.
[  684.035581][ T9166] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  684.047614][ T9168] netlink: 72 bytes leftover after parsing attributes in process `syz.8.805'.
[  684.913309][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  684.925267][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  684.959309][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  684.985485][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  685.004560][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  686.618512][  T798] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  686.861107][  T798] usb 9-1: Using ep0 maxpacket: 32
[  686.936728][  T798] usb 9-1: unable to get BOS descriptor or descriptor too short
[  686.975424][  T798] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  687.083665][  T798] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  687.093223][  T798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.101460][  T798] usb 9-1: Product: syz
[  687.109139][  T798] usb 9-1: Manufacturer: syz
[  687.114099][  T798] usb 9-1: SerialNumber: syz
[  687.131703][ T5790] Bluetooth: hci5: command tx timeout
[  687.453867][  T798] usb 9-1: Limiting number of CPorts to U8_MAX
[  687.462137][  T798] usb 9-1: Not enough endpoints found in device, aborting!
[  687.674151][   T10] usb 9-1: USB disconnect, device number 5
[  688.660047][ T9176] chnl_net:caif_netlink_parms(): no params data found
[  689.206199][ T5790] Bluetooth: hci5: command tx timeout
[  691.192873][ T9223] loop3: detected capacity change from 0 to 16
[  691.293441][ T5790] Bluetooth: hci5: command tx timeout
[  691.535196][ T9223] erofs (device loop3): mounted with root inode @ nid 36.
[  691.624138][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.8.816'.
[  691.698659][ T9226] netlink: 72 bytes leftover after parsing attributes in process `syz.8.816'.
[  691.933777][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.941603][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.044221][ T9176] bridge_slave_0: entered allmulticast mode
[  692.194279][ T9176] bridge_slave_0: entered promiscuous mode
[  692.548256][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.556302][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.821486][ T9176] bridge_slave_1: entered allmulticast mode
[  692.959717][ T9176] bridge_slave_1: entered promiscuous mode
[  693.401137][ T5790] Bluetooth: hci5: command tx timeout
[  694.208236][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.484844][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.235058][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  695.254942][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  695.265245][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  695.314468][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  695.337943][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  695.410398][ T9176] team0: Port device team_slave_0 added
[  695.430319][ T9176] team0: Port device team_slave_1 added
[  695.607656][ T9246] loop3: detected capacity change from 0 to 64
[  695.644795][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.651957][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.678783][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.818924][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.826766][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.857939][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  697.443640][ T5790] Bluetooth: hci2: command tx timeout
[  699.545346][ T5790] Bluetooth: hci2: command tx timeout
[  702.134179][ T5790] Bluetooth: hci2: command tx timeout
[  702.929543][ T9268] netlink: 72 bytes leftover after parsing attributes in process `syz.6.826'.
[  702.945769][ T9176] hsr_slave_0: entered promiscuous mode
[  703.014472][ T9176] hsr_slave_1: entered promiscuous mode
[  703.047372][ T9176] debugfs: 'hsr0' already exists in 'hsr'
[  703.053634][ T9176] Cannot create hsr debugfs directory
[  703.101514][ T9271] netlink: 72 bytes leftover after parsing attributes in process `syz.6.826'.
[  703.516374][ T4232] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.983519][  T798] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  704.012404][ T4232] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.111718][ T5841] IPVS: starting estimator thread 0...
[  704.175641][ T5790] Bluetooth: hci2: command tx timeout
[  704.184341][  T798] usb 4-1: Using ep0 maxpacket: 16
[  704.230875][  T798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  704.247340][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  704.353788][ T9279] IPVS: using max 192 ests per chain, 9600 per kthread
[  704.415709][  T798] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  704.425410][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.433899][  T798] usb 4-1: Product: syz
[  704.438270][  T798] usb 4-1: Manufacturer: syz
[  704.447596][  T798] usb 4-1: SerialNumber: syz
[  704.559883][  T798] usb 4-1: config 0 descriptor??
[  704.630943][  T798] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  704.640907][  T798] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  705.372635][  T798] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  706.036229][  T798] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  707.327034][ T4232] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.332754][  T798] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  707.345153][  T798] em28xx 4-1:0.0: No AC97 audio processor
[  707.471288][  T798] usb 4-1: USB disconnect, device number 4
[  707.559879][  T798] em28xx 4-1:0.0: Disconnecting em28xx
[  707.631301][  T798] em28xx 4-1:0.0: Freeing device
[  707.737762][ T9292] xt_connbytes: Forcing CT accounting to be enabled
[  707.755115][ T9292] Cannot find del_set index 1 as target
[  708.099333][ T4232] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.884526][ T9304] netlink: 72 bytes leftover after parsing attributes in process `syz.8.832'.
[  710.726484][ T4232] bridge_slave_1: left allmulticast mode
[  710.732520][ T4232] bridge_slave_1: left promiscuous mode
[  710.740277][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.841202][ T4232] bridge_slave_0: left allmulticast mode
[  710.847335][ T4232] bridge_slave_0: left promiscuous mode
[  710.854009][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.096341][ T9326] netlink: 72 bytes leftover after parsing attributes in process `syz.8.837'.
[  712.150748][ T9327] netlink: 72 bytes leftover after parsing attributes in process `syz.8.837'.
[  712.829269][ T4232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.910977][ T4232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.989671][ T4232] bond0 (unregistering): Released all slaves
[  713.348717][ T9241] chnl_net:caif_netlink_parms(): no params data found
[  714.096268][ T4232] hsr_slave_0: left promiscuous mode
[  714.140400][ T4232] hsr_slave_1: left promiscuous mode
[  714.200759][ T4232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  714.208653][ T4232] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.313616][ T4232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.321226][ T4232] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.445481][ T4232] veth1_macvtap: left promiscuous mode
[  714.451142][ T4232] veth0_macvtap: left promiscuous mode
[  714.463731][ T4232] veth1_vlan: left promiscuous mode
[  714.486011][ T4232] veth0_vlan: left promiscuous mode
[  716.417143][ T9351] loop8: detected capacity change from 0 to 256
[  716.435411][ T9351] =======================================================
[  716.435411][ T9351] WARNING: The mand mount option has been deprecated and
[  716.435411][ T9351]          and is ignored by this kernel. Remove the mand
[  716.435411][ T9351]          option from the mount to silence this warning.
[  716.435411][ T9351] =======================================================
[  718.334656][ T9351] FAT-fs (loop8): Directory bread(block 64) failed
[  718.348563][ T9351] FAT-fs (loop8): Directory bread(block 65) failed
[  718.356046][ T9351] FAT-fs (loop8): Directory bread(block 66) failed
[  718.362918][ T9351] FAT-fs (loop8): Directory bread(block 67) failed
[  718.373955][ T9351] FAT-fs (loop8): Directory bread(block 68) failed
[  718.380890][ T9351] FAT-fs (loop8): Directory bread(block 69) failed
[  718.389575][ T9351] FAT-fs (loop8): Directory bread(block 70) failed
[  718.396648][ T9351] FAT-fs (loop8): Directory bread(block 71) failed
[  718.404212][ T9351] FAT-fs (loop8): Directory bread(block 72) failed
[  718.411093][ T9351] FAT-fs (loop8): Directory bread(block 73) failed
[  720.721987][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.845'.
[  721.889999][ T4232] team0 (unregistering): Port device team_slave_1 removed
[  722.047371][ T4232] team0 (unregistering): Port device team_slave_0 removed
[  722.047880][ T9363] netlink: 72 bytes leftover after parsing attributes in process `syz.8.847'.
[  722.227419][ T9367] netlink: 72 bytes leftover after parsing attributes in process `syz.8.847'.
[  722.481737][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  722.502642][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  722.517180][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  722.534798][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  722.579514][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  724.652362][ T5790] Bluetooth: hci0: command tx timeout
[  725.711075][ T9176] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  726.009875][ T9176] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  726.375657][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  726.382349][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  726.553482][ T9176] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  726.734516][ T5790] Bluetooth: hci0: command tx timeout
[  726.969701][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.985748][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.064101][ T9241] bridge_slave_0: entered allmulticast mode
[  727.110881][ T9241] bridge_slave_0: entered promiscuous mode
[  727.144023][ T9176] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  727.291842][   T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.580959][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.595448][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.629111][ T9241] bridge_slave_1: entered allmulticast mode
[  727.662974][ T9241] bridge_slave_1: entered promiscuous mode
[  727.740588][   T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.809644][ T9402] loop3: detected capacity change from 0 to 1024
[  727.889361][ T9402] EXT4-fs: Ignoring removed i_version option
[  727.911578][ T9402] EXT4-fs (loop3): Test dummy encryption mode enabled
[  728.002940][ T9402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  728.207617][   T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.746354][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  728.804827][ T5790] Bluetooth: hci0: command tx timeout
[  729.511577][   T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.659637][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.923986][ T5790] Bluetooth: hci0: command tx timeout
[  730.956135][ T9417] binder: 9416:9417 ioctl c0306201 0 returned -14
[  731.157673][ T9241] team0: Port device team_slave_0 added
[  731.221225][ T9241] team0: Port device team_slave_1 added
[  731.626069][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.638298][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  731.645589][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  731.672925][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.856134][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.863412][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  731.894772][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  732.043814][ T9370] chnl_net:caif_netlink_parms(): no params data found
[  732.203365][ T9422] netlink: 72 bytes leftover after parsing attributes in process `syz.3.857'.
[  732.334817][ T9425] netlink: 72 bytes leftover after parsing attributes in process `syz.3.857'.
[  733.475010][   T58] bridge_slave_1: left allmulticast mode
[  733.480911][   T58] bridge_slave_1: left promiscuous mode
[  733.487979][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.575468][   T58] bridge_slave_0: left allmulticast mode
[  733.581362][   T58] bridge_slave_0: left promiscuous mode
[  733.588491][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.620295][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  734.680716][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  734.710738][   T58] bond0 (unregistering): Released all slaves
[  734.860476][ T9241] hsr_slave_0: entered promiscuous mode
[  734.887955][ T9241] hsr_slave_1: entered promiscuous mode
[  734.926716][ T9241] debugfs: 'hsr0' already exists in 'hsr'
[  734.932782][ T9241] Cannot create hsr debugfs directory
[  734.957169][   T58] tipc: Left network mode
[  735.818484][ T9451] loop8: detected capacity change from 0 to 1024
[  735.876675][ T9451] EXT4-fs: Ignoring removed i_version option
[  735.971208][ T9451] EXT4-fs (loop8): Test dummy encryption mode enabled
[  736.138643][ T9451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  736.460336][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.468253][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.492056][ T9370] bridge_slave_0: entered allmulticast mode
[  736.526079][ T9370] bridge_slave_0: entered promiscuous mode
[  736.545768][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.553739][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.577636][ T9370] bridge_slave_1: entered allmulticast mode
[  736.589162][ T9370] bridge_slave_1: entered promiscuous mode
[  736.799068][ T9370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.870766][ T9370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.082650][ T9370] team0: Port device team_slave_0 added
[  737.152427][ T9370] team0: Port device team_slave_1 added
[  737.615673][ T9462] loop3: detected capacity change from 0 to 512
[  740.032161][ T6469] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.293850][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.462211][   T58] hsr_slave_0: left promiscuous mode
[  740.492653][   T58] hsr_slave_1: left promiscuous mode
[  740.529342][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  740.538104][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  740.600340][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  740.608175][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.750649][   T58] veth1_macvtap: left promiscuous mode
[  740.770078][   T58] veth0_macvtap: left promiscuous mode
[  740.816583][   T58] veth1_vlan: left promiscuous mode
[  740.822544][   T58] veth0_vlan: left promiscuous mode
[  742.096381][ T9468] netlink: 72 bytes leftover after parsing attributes in process `syz.3.867'.
[  742.264483][ T9471] netlink: 72 bytes leftover after parsing attributes in process `syz.3.867'.
[  742.864089][   T58] team0 (unregistering): Port device team_slave_1 removed
[  742.922394][   T58] team0 (unregistering): Port device team_slave_0 removed
[  743.511751][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.519274][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.546182][ T9370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.865449][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.876210][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.904241][ T9370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  745.509555][ T9370] hsr_slave_0: entered promiscuous mode
[  745.567710][ T9370] hsr_slave_1: entered promiscuous mode
[  745.658349][ T9370] debugfs: 'hsr0' already exists in 'hsr'
[  745.665063][ T9370] Cannot create hsr debugfs directory
[  746.436257][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  746.447179][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  746.459520][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  746.475635][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  746.489787][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  747.446811][ T9241] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  747.798533][ T9241] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  748.143765][ T9241] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  748.363474][ T9241] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  748.394678][ T9504] loop8: detected capacity change from 0 to 512
[  748.565303][   T50] Bluetooth: hci1: command tx timeout
[  750.650727][   T50] Bluetooth: hci1: command tx timeout
[  752.397955][ T9520] netlink: 72 bytes leftover after parsing attributes in process `syz.8.878'.
[  752.529521][ T9520] netlink: 72 bytes leftover after parsing attributes in process `syz.8.878'.
[  752.733622][   T50] Bluetooth: hci1: command tx timeout
[  753.657456][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  753.669329][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  753.681260][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  753.716892][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  753.731569][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  754.806840][   T50] Bluetooth: hci1: command tx timeout
[  755.087309][ T9370] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  755.240307][   T75] bridge_slave_1: left allmulticast mode
[  755.246667][   T75] bridge_slave_1: left promiscuous mode
[  755.253565][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.314758][   T75] bridge_slave_0: left allmulticast mode
[  755.320780][   T75] bridge_slave_0: left promiscuous mode
[  755.328812][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.765871][   T50] Bluetooth: hci5: command tx timeout
[  755.816016][ T9547] loop8: detected capacity change from 0 to 512
[  757.863671][   T50] Bluetooth: hci5: command tx timeout
[  758.673658][ T9558] Invalid ELF header magic: != ELF
[  759.499457][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.714077][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.810608][   T75] bond0 (unregistering): Released all slaves
[  759.898717][ T9490] chnl_net:caif_netlink_parms(): no params data found
[  759.928973][   T50] Bluetooth: hci5: command tx timeout
[  760.147427][ T9370] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  761.169885][ T9370] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  762.193341][   T50] Bluetooth: hci5: command tx timeout
[  762.600475][ T9370] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  763.540102][   T75] hsr_slave_0: left promiscuous mode
[  763.574378][   T75] hsr_slave_1: left promiscuous mode
[  763.582812][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.608222][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.051563][   T75] team0 (unregistering): Port device team_slave_1 removed
[  765.148720][   T75] team0 (unregistering): Port device team_slave_0 removed
[  771.555238][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.565025][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.626930][ T9490] bridge_slave_0: entered allmulticast mode
[  771.688294][ T9490] bridge_slave_0: entered promiscuous mode
[  771.753190][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.760937][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.833807][ T9490] bridge_slave_1: entered allmulticast mode
[  771.849615][ T9490] bridge_slave_1: entered promiscuous mode
[  772.344383][ T9529] chnl_net:caif_netlink_parms(): no params data found
[  772.380089][ T9597] loop8: detected capacity change from 0 to 512
[  772.724644][ T9601] binder: 9599:9601 ioctl 4018620d 0 returned -22
[  773.181751][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.862293][ T9601] ntfs3(nullb0): Primary boot signature is not NTFS.
[  774.869635][ T9601] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  775.212829][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  776.280657][ T9490] team0: Port device team_slave_0 added
[  776.336914][ T9490] team0: Port device team_slave_1 added
[  776.617119][   T75] bridge_slave_1: left allmulticast mode
[  776.623326][   T75] bridge_slave_1: left promiscuous mode
[  776.630029][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.705879][   T75] bridge_slave_0: left allmulticast mode
[  776.711807][   T75] bridge_slave_0: left promiscuous mode
[  776.718769][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.771345][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  777.828397][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  777.869133][   T75] bond0 (unregistering): Released all slaves
[  778.139531][ T9632] loop3: detected capacity change from 0 to 512
[  778.169207][ T9632] EXT4-fs: Ignoring removed mblk_io_submit option
[  778.235381][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  778.236767][ T9632] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  778.242600][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  778.281881][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  778.309981][ T9632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  778.319803][ T9632] System zones: 1-12
[  778.347401][ T9632] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.903: corrupted in-inode xattr: e_value size too large
[  778.385941][ T9632] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.903: couldn't read orphan inode 15 (err -117)
[  778.468464][ T9632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  778.497599][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  778.504955][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  778.531554][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  778.616716][   T75] hsr_slave_0: left promiscuous mode
[  778.628678][ T9632] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.903: Unrecognised inode hash code 4
[  778.643441][ T9632] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.903: Corrupt directory, running e2fsck is recommended
[  778.656977][   T75] hsr_slave_1: left promiscuous mode
[  778.681274][ T9632] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.903: Unrecognised inode hash code 4
[  778.696577][ T9632] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.903: Corrupt directory, running e2fsck is recommended
[  778.755185][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  778.766172][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  778.987321][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  779.083362][ T9638] loop8: detected capacity change from 0 to 512
[  779.892419][   T75] team0 (unregistering): Port device team_slave_1 removed
[  780.289351][   T75] team0 (unregistering): Port device team_slave_0 removed
[  781.734560][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.742360][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.818229][ T9529] bridge_slave_0: entered allmulticast mode
[  781.898527][ T9529] bridge_slave_0: entered promiscuous mode
[  782.295940][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.303844][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.393800][ T9529] bridge_slave_1: entered allmulticast mode
[  782.442745][ T9529] bridge_slave_1: entered promiscuous mode
[  783.065828][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.327040][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  783.758086][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  783.772076][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  783.790384][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  783.800775][ T9490] hsr_slave_0: entered promiscuous mode
[  783.897904][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  783.923947][ T9490] hsr_slave_1: entered promiscuous mode
[  783.935642][ T9490] debugfs: 'hsr0' already exists in 'hsr'
[  783.941593][ T9490] Cannot create hsr debugfs directory
[  783.949259][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  784.292664][ T9529] team0: Port device team_slave_0 added
[  784.912902][ T9529] team0: Port device team_slave_1 added
[  785.738758][ T9674] loop8: detected capacity change from 0 to 64
[  785.901220][ T9676] loop3: detected capacity change from 0 to 512
[  785.916314][ T9676] EXT4-fs: Ignoring removed orlov option
[  785.922239][ T9676] EXT4-fs: Ignoring removed i_version option
[  786.013742][ T5790] Bluetooth: hci2: command tx timeout
[  786.076070][ T9676] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.912: corrupted in-inode xattr: invalid ea_ino
[  786.113279][ T9676] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.912: couldn't read orphan inode 15 (err -117)
[  786.140466][ T9676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  786.216527][ T9676] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.912: invalid indirect mapped block 234881024 (level 0)
[  786.254575][ T9679] fuse: Bad value for 'fd'
[  786.740655][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  786.747969][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.778352][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  787.799308][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  787.806436][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  788.101094][ T5790] Bluetooth: hci2: command tx timeout
[  788.586674][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.594176][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.624231][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  789.261322][ T9686] loop8: detected capacity change from 0 to 512
[  790.249806][ T5790] Bluetooth: hci2: command tx timeout
[  794.329601][ T5790] Bluetooth: hci2: command tx timeout
[  794.498780][ T9529] hsr_slave_0: entered promiscuous mode
[  794.562405][ T9529] hsr_slave_1: entered promiscuous mode
[  794.601999][ T9529] debugfs: 'hsr0' already exists in 'hsr'
[  794.608138][ T9529] Cannot create hsr debugfs directory
[  795.535818][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.714090][ T9708] loop8: detected capacity change from 0 to 64
[  797.804004][ T9724] loop8: detected capacity change from 0 to 512
[  799.822854][ T6852] bridge_slave_1: left allmulticast mode
[  799.833425][ T6852] bridge_slave_1: left promiscuous mode
[  799.840194][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.927888][ T6852] bridge_slave_0: left allmulticast mode
[  799.934668][ T6852] bridge_slave_0: left promiscuous mode
[  799.941433][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.529060][ T6852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.555358][ T6852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  800.619781][ T6852] bond0 (unregistering): Released all slaves
[  800.645130][ T9490] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  800.714987][ T9490] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  800.921870][ T9490] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  801.086060][ T9659] chnl_net:caif_netlink_parms(): no params data found
[  802.481826][ T9490] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  803.269248][ T6852] hsr_slave_0: left promiscuous mode
[  803.317520][ T6852] hsr_slave_1: left promiscuous mode
[  803.383930][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.482629][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.101582][ T9758] loop3: detected capacity change from 0 to 512
[  806.675632][ T6852] team0 (unregistering): Port device team_slave_1 removed
[  806.887785][ T6852] team0 (unregistering): Port device team_slave_0 removed
[  810.057110][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  810.087916][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  810.098064][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  810.138966][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  810.167482][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  810.671084][ T9529] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  810.869340][ T9529] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  811.256911][ T9529] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  811.682087][ T9529] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  812.260697][ T5790] Bluetooth: hci0: command tx timeout
[  812.923196][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.930927][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.334900][ T9659] bridge_slave_0: entered allmulticast mode
[  813.578902][ T9659] bridge_slave_0: entered promiscuous mode
[  814.324162][ T5790] Bluetooth: hci0: command tx timeout
[  814.569125][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.577351][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.766068][ T9659] bridge_slave_1: entered allmulticast mode
[  814.876441][ T9659] bridge_slave_1: entered promiscuous mode
[  816.080882][ T9806] loop3: detected capacity change from 0 to 512
[  816.406616][ T5790] Bluetooth: hci0: command tx timeout
[  817.028273][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  817.272657][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.140737][   T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  818.184534][   T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  818.197921][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  818.235015][   T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  818.264366][   T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  818.357969][ T9659] team0: Port device team_slave_0 added
[  818.487087][   T50] Bluetooth: hci0: command tx timeout
[  818.659088][ T9659] team0: Port device team_slave_1 added
[  819.610304][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.617931][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.648072][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.189681][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.197504][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.224149][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  820.420455][   T50] Bluetooth: hci6: command tx timeout
[  821.529121][ T9659] hsr_slave_0: entered promiscuous mode
[  821.549237][ T9659] hsr_slave_1: entered promiscuous mode
[  821.579487][ T9659] debugfs: 'hsr0' already exists in 'hsr'
[  821.585648][ T9659] Cannot create hsr debugfs directory
[  821.889214][ T9780] chnl_net:caif_netlink_parms(): no params data found
[  822.484190][   T50] Bluetooth: hci6: command tx timeout
[  824.584468][   T50] Bluetooth: hci6: command tx timeout
[  826.643496][   T50] Bluetooth: hci6: command tx timeout
[  826.967922][ T8307] bridge_slave_1: left allmulticast mode
[  826.974107][ T8307] bridge_slave_1: left promiscuous mode
[  826.980878][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.146089][ T8307] bridge_slave_0: left allmulticast mode
[  827.151986][ T8307] bridge_slave_0: left promiscuous mode
[  827.159393][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.696965][ T8307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  827.812581][ T8307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.877955][ T8307] bond0 (unregistering): Released all slaves
[  828.649175][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.662120][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.686361][ T9780] bridge_slave_0: entered allmulticast mode
[  828.714046][ T9780] bridge_slave_0: entered promiscuous mode
[  828.802621][ T9863] loop3: detected capacity change from 0 to 512
[  828.937835][ T8307] hsr_slave_0: left promiscuous mode
[  828.983683][ T8307] hsr_slave_1: left promiscuous mode
[  829.032236][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.076690][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  830.560843][ T8307] team0 (unregistering): Port device team_slave_1 removed
[  830.676335][ T8307] team0 (unregistering): Port device team_slave_0 removed
[  832.071968][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.079946][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.133763][ T9780] bridge_slave_1: entered allmulticast mode
[  832.177979][ T9780] bridge_slave_1: entered promiscuous mode
[  832.558039][ T9814] chnl_net:caif_netlink_parms(): no params data found
[  832.716400][ T9780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.840817][ T9780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  833.401279][ T9780] team0: Port device team_slave_0 added
[  833.499087][ T9780] team0: Port device team_slave_1 added
[  833.849058][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.856684][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.887170][ T9780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  834.230694][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  834.238183][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  834.264868][ T9780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  835.327078][ T9780] hsr_slave_0: entered promiscuous mode
[  835.365703][ T9780] hsr_slave_1: entered promiscuous mode
[  835.403339][ T9780] debugfs: 'hsr0' already exists in 'hsr'
[  835.409291][ T9780] Cannot create hsr debugfs directory
[  836.275713][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.283548][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.360286][ T9814] bridge_slave_0: entered allmulticast mode
[  836.379706][ T9814] bridge_slave_0: entered promiscuous mode
[  836.861267][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.869101][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.943469][ T9814] bridge_slave_1: entered allmulticast mode
[  836.994801][ T9814] bridge_slave_1: entered promiscuous mode
[  837.948767][ T9814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  837.963521][ T9659] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  838.034312][ T8307] bridge_slave_1: left allmulticast mode
[  838.040206][ T8307] bridge_slave_1: left promiscuous mode
[  838.047158][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.087541][ T8307] bridge_slave_0: left allmulticast mode
[  838.093659][ T8307] bridge_slave_0: left promiscuous mode
[  838.100397][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.161225][ T8307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  839.197252][ T8307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  839.227446][ T8307] bond0 (unregistering): Released all slaves
[  839.489329][ T9814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  839.500195][ T9659] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  840.181148][ T9659] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  840.740522][ T9659] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  840.951472][ T8307] hsr_slave_0: left promiscuous mode
[  841.033935][ T8307] hsr_slave_1: left promiscuous mode
[  841.157974][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.281595][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  843.258309][ T8307] team0 (unregistering): Port device team_slave_1 removed
[  843.338815][ T8307] team0 (unregistering): Port device team_slave_0 removed
[  843.824258][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  843.835387][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  843.846405][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  843.861020][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  843.874889][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  844.160411][ T9814] team0: Port device team_slave_0 added
[  844.359931][ T9814] team0: Port device team_slave_1 added
[  844.927780][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  844.939438][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  844.967075][ T9814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  845.228685][ T9918] loop3: detected capacity change from 0 to 512
[  845.247366][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  845.254760][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  845.281357][ T9814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  845.971668][ T9920] loop8: detected capacity change from 0 to 64
[  845.979734][ T5790] Bluetooth: hci1: command tx timeout
[  846.361535][ T9920] hfs: request for non-existent node 131072 in B*Tree
[  846.371963][ T9920] hfs: request for non-existent node 131072 in B*Tree
[  847.930576][ T9814] hsr_slave_0: entered promiscuous mode
[  848.013317][ T5790] Bluetooth: hci1: command tx timeout
[  848.034432][ T9814] hsr_slave_1: entered promiscuous mode
[  848.061433][ T9814] debugfs: 'hsr0' already exists in 'hsr'
[  848.067569][ T9814] Cannot create hsr debugfs directory
[  849.256908][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  849.263999][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  850.143499][ T5790] Bluetooth: hci1: command tx timeout
[  850.603887][ T9780] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  852.173434][ T5790] Bluetooth: hci1: command tx timeout
[  856.191965][ T9780] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  857.314033][ T9780] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  858.883368][ T9780] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  860.852203][ T9909] chnl_net:caif_netlink_parms(): no params data found
[  862.561318][   T58] bridge_slave_1: left allmulticast mode
[  862.567228][   T58] bridge_slave_1: left promiscuous mode
[  862.574027][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.642843][   T58] bridge_slave_0: left allmulticast mode
[  862.649343][   T58] bridge_slave_0: left promiscuous mode
[  862.660672][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.312906][ T9961] loop3: detected capacity change from 0 to 512
[  863.479561][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  864.065909][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  864.129056][   T58] bond0 (unregistering): Released all slaves
[  864.923957][   T58] hsr_slave_0: left promiscuous mode
[  864.947344][   T58] hsr_slave_1: left promiscuous mode
[  864.982096][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.026092][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.668511][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  865.678313][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  865.720278][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  865.748742][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  865.766962][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  865.999367][   T58] team0 (unregistering): Port device team_slave_1 removed
[  866.072380][   T58] team0 (unregistering): Port device team_slave_0 removed
[  867.546001][ T9814] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  867.577686][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  867.587660][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  867.605660][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  867.635650][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  867.648160][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  867.794606][ T9814] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  867.844419][ T5790] Bluetooth: hci2: command tx timeout
[  867.899796][ T9814] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  868.016512][ T9976] vivid-006: disconnect
[  868.294913][ T9814] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  868.665939][ T9973] vivid-006: reconnect
[  869.030791][   T58] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.426352][   T58] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.764580][ T5790] Bluetooth: hci5: command tx timeout
[  869.924754][ T5790] Bluetooth: hci2: command tx timeout
[  869.946499][   T58] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.499487][   T58] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.840243][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.852701][ T9909] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.914263][ T9909] bridge_slave_0: entered allmulticast mode
[  870.925471][ T9909] bridge_slave_0: entered promiscuous mode
[  871.046099][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.058585][ T9909] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.077300][ T9909] bridge_slave_1: entered allmulticast mode
[  871.087581][ T9909] bridge_slave_1: entered promiscuous mode
[  871.801253][ T9909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.843319][ T5790] Bluetooth: hci5: command tx timeout
[  872.003828][ T5790] Bluetooth: hci2: command tx timeout
[  872.059407][ T9909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  872.758992][ T9909] team0: Port device team_slave_0 added
[  872.916490][ T9909] team0: Port device team_slave_1 added
[  873.205254][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  873.212512][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.239541][ T9909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  873.385287][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  873.392363][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.420692][ T9909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.751702][ T9968] chnl_net:caif_netlink_parms(): no params data found
[  873.923325][ T5790] Bluetooth: hci5: command tx timeout
[  873.938569][   T58] bridge_slave_1: left allmulticast mode
[  873.945124][   T58] bridge_slave_1: left promiscuous mode
[  873.951917][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.988912][   T58] bridge_slave_0: left allmulticast mode
[  873.995381][   T58] bridge_slave_0: left promiscuous mode
[  874.002156][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.083257][ T5790] Bluetooth: hci2: command tx timeout
[  875.079908][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  875.125055][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  875.156511][   T58] bond0 (unregistering): Released all slaves
[  875.253849][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  875.288128][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  875.301465][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  875.341339][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  875.356381][ T9971] chnl_net:caif_netlink_parms(): no params data found
[  875.385034][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  875.845646][   T58] tipc: Left network mode
[  876.004140][ T5790] Bluetooth: hci5: command tx timeout
[  876.434581][ T9909] hsr_slave_0: entered promiscuous mode
[  876.461346][ T9909] hsr_slave_1: entered promiscuous mode
[  876.499824][ T9909] debugfs: 'hsr0' already exists in 'hsr'
[  876.506014][ T9909] Cannot create hsr debugfs directory
[  877.523801][ T5790] Bluetooth: hci0: command tx timeout
[  877.628452][   T58] hsr_slave_0: left promiscuous mode
[  877.637542][   T58] hsr_slave_1: left promiscuous mode
[  877.647638][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.655601][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.679358][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.694079][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.788456][   T58] veth1_macvtap: left promiscuous mode
[  877.797166][   T58] veth0_macvtap: left promiscuous mode
[  877.808129][   T58] veth1_vlan: left promiscuous mode
[  877.811131][T10014] loop3: detected capacity change from 0 to 512
[  877.814377][   T58] veth0_vlan: left promiscuous mode
[  879.057311][   T58] team0 (unregistering): Port device team_slave_1 removed
[  879.089131][   T58] team0 (unregistering): Port device team_slave_0 removed
[  879.385970][ T9968] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.393787][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.402908][ T9968] bridge_slave_0: entered allmulticast mode
[  879.414822][ T9968] bridge_slave_0: entered promiscuous mode
[  879.613336][ T5790] Bluetooth: hci0: command tx timeout
[  879.691489][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.699539][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.729427][ T9968] bridge_slave_1: entered allmulticast mode
[  879.744297][ T9968] bridge_slave_1: entered promiscuous mode
[  880.622545][ T9971] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.631305][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.709441][ T9971] bridge_slave_0: entered allmulticast mode
[  880.720665][ T9971] bridge_slave_0: entered promiscuous mode
[  880.984154][ T9971] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.992100][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.014955][ T9971] bridge_slave_1: entered allmulticast mode
[  881.052416][ T9971] bridge_slave_1: entered promiscuous mode
[  881.092349][ T9968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  881.571516][ T9968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  881.683348][ T5790] Bluetooth: hci0: command tx timeout
[  881.885781][ T9971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  881.897767][   T58] IPVS: stop unused estimator thread 0...
[  882.082812][ T9971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  882.133454][ T9742] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  882.155396][ T9968] team0: Port device team_slave_0 added
[  882.278776][ T9971] team0: Port device team_slave_0 added
[  882.299525][ T9968] team0: Port device team_slave_1 added
[  882.317197][ T9742] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  882.327687][ T9742] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  882.351507][ T9742] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  882.361112][ T9742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.369533][ T9742] usb 4-1: Product: syz
[  882.374043][ T9742] usb 4-1: Manufacturer: syz
[  882.378854][ T9742] usb 4-1: SerialNumber: syz
[  882.389755][ T9742] usb 4-1: config 0 descriptor??
[  882.395316][ T9971] team0: Port device team_slave_1 added
[  882.657413][ T9742] usb 4-1: USB disconnect, device number 5
[  882.889803][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.897016][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.923595][ T9968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.989143][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.997349][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  883.024697][ T9971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  883.062084][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  883.069397][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  883.096156][ T9968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  883.145273][ T9993] chnl_net:caif_netlink_parms(): no params data found
[  883.203668][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  883.210828][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  883.240315][ T9971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  883.726376][ T6381] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  883.763810][ T5790] Bluetooth: hci0: command tx timeout
[  883.821594][ T9968] hsr_slave_0: entered promiscuous mode
[  883.831404][ T9968] hsr_slave_1: entered promiscuous mode
[  883.840517][ T9968] debugfs: 'hsr0' already exists in 'hsr'
[  883.846658][ T9968] Cannot create hsr debugfs directory
[  883.966299][ T6381] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.000459][ T6381] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  884.012691][ T6381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  884.024237][ T6381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  884.034497][ T6381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  884.089059][ T6381] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  884.098577][ T6381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  884.107157][ T6381] usb 4-1: Product: syz
[  884.111536][ T6381] usb 4-1: Manufacturer: syz
[  884.116467][ T6381] usb 4-1: SerialNumber: syz
[  884.138062][ T6381] usb 4-1: config 0 descriptor??
[  884.210939][ T9971] hsr_slave_0: entered promiscuous mode
[  884.240900][ T9971] hsr_slave_1: entered promiscuous mode
[  884.250677][ T9971] debugfs: 'hsr0' already exists in 'hsr'
[  884.259301][ T9971] Cannot create hsr debugfs directory
[  884.424603][ T6381] radio-si470x 4-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  884.615864][ T6381] radio-si470x 4-1:0.0: software version 100, hardware version 101
[  884.829265][ T6381] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  885.002308][ T9909] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  885.059827][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.067775][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.081765][ T9993] bridge_slave_0: entered allmulticast mode
[  885.101677][ T9993] bridge_slave_0: entered promiscuous mode
[  885.119990][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.127903][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.138232][ T9993] bridge_slave_1: entered allmulticast mode
[  885.148641][ T9993] bridge_slave_1: entered promiscuous mode
[  885.190785][ T9909] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  885.367943][ T9909] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  885.541606][ T9909] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  885.669361][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  885.855106][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  886.055634][ T6381] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71
[  886.066109][ T6381] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[  886.124045][ T6381] usb 4-1: USB disconnect, device number 6
[  886.345385][ T9993] team0: Port device team_slave_0 added
[  886.452134][ T9993] team0: Port device team_slave_1 added
[  886.849354][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  886.856975][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  886.883624][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.094087][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.101267][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.134510][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.470308][   T58] bridge_slave_1: left allmulticast mode
[  887.476766][   T58] bridge_slave_1: left promiscuous mode
[  887.483743][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.538127][   T58] bridge_slave_0: left allmulticast mode
[  887.544342][   T58] bridge_slave_0: left promiscuous mode
[  887.551108][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.589557][   T58] bridge_slave_1: left allmulticast mode
[  887.597998][   T58] bridge_slave_1: left promiscuous mode
[  887.607155][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.628023][   T58] bridge_slave_0: left allmulticast mode
[  887.636295][   T58] bridge_slave_0: left promiscuous mode
[  887.652236][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.942399][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  887.961069][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  887.976365][   T58] bond0 (unregistering): Released all slaves
[  888.197624][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.212845][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  888.230295][   T58] bond0 (unregistering): Released all slaves
[  888.397778][ T9993] hsr_slave_0: entered promiscuous mode
[  888.410304][ T9993] hsr_slave_1: entered promiscuous mode
[  888.421891][ T9993] debugfs: 'hsr0' already exists in 'hsr'
[  888.428197][ T9993] Cannot create hsr debugfs directory
[  888.823336][   T58] hsr_slave_0: left promiscuous mode
[  888.834107][   T58] hsr_slave_1: left promiscuous mode
[  888.836982][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  888.839387][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  888.889545][   T58] hsr_slave_0: left promiscuous mode
[  888.907567][   T58] hsr_slave_1: left promiscuous mode
[  888.910471][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  888.913979][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  889.449803][   T58] team0 (unregistering): Port device team_slave_1 removed
[  889.497411][   T58] team0 (unregistering): Port device team_slave_0 removed
[  890.431330][   T58] team0 (unregistering): Port device team_slave_1 removed
[  890.469553][   T58] team0 (unregistering): Port device team_slave_0 removed
[  890.829591][T10055] loop3: detected capacity change from 0 to 512
[  893.082099][ T9968] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  893.155966][ T9968] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  893.289056][ T9968] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  893.452831][ T9968] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  893.970258][ T9909] 8021q: adding VLAN 0 to HW filter on device bond0
[  894.360063][ T9909] 8021q: adding VLAN 0 to HW filter on device team0
[  894.585477][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.593228][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  894.721275][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.729044][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  895.403435][   T41] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  895.478391][ T9993] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  895.570310][ T9993] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  895.589723][   T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.600566][   T41] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  895.627798][   T41] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  895.637435][   T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.645908][   T41] usb 4-1: Product: syz
[  895.650276][   T41] usb 4-1: Manufacturer: syz
[  895.653936][ T9993] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  895.655239][   T41] usb 4-1: SerialNumber: syz
[  895.682108][   T41] usb 4-1: config 0 descriptor??
[  895.859539][ T9993] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  895.950789][   T41] usb 4-1: USB disconnect, device number 7
[  896.377476][ T9968] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.616360][ T9971] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  896.764349][ T9971] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  896.910606][ T9971] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  897.026479][ T9971] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  897.106538][ T9968] 8021q: adding VLAN 0 to HW filter on device team0
[  897.274445][  T746] bridge0: port 1(bridge_slave_0) entered blocking state
[  897.282260][  T746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  897.409317][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state
[  897.417015][ T6854] bridge0: port 2(bridge_slave_1) entered forwarding state
[  897.802674][ T9909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  899.034841][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.551186][ T9993] 8021q: adding VLAN 0 to HW filter on device team0
[  899.653715][ T9909] veth0_vlan: entered promiscuous mode
[  899.945161][ T9971] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.964030][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.971764][ T8307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  900.072285][ T9909] veth1_vlan: entered promiscuous mode
[  900.174344][  T746] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.182048][  T746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  900.664118][ T9971] 8021q: adding VLAN 0 to HW filter on device team0
[  900.787138][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.794797][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.016903][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.024578][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.348389][ T9909] veth0_macvtap: entered promiscuous mode
[  901.483932][ T9909] veth1_macvtap: entered promiscuous mode
[  901.555847][ T9968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  902.012378][T10120] loop3: detected capacity change from 0 to 512
[  902.112042][ T9909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  902.559170][ T9909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  903.253798][  T746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  903.527950][  T746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  903.717034][  T746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  903.810572][  T746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  904.149859][ T9968] veth0_vlan: entered promiscuous mode
[  904.548176][ T9968] veth1_vlan: entered promiscuous mode
[  905.817202][ T9968] veth0_macvtap: entered promiscuous mode
[  905.952705][ T9968] veth1_macvtap: entered promiscuous mode
[  906.507639][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  906.630388][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  906.763765][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  906.795859][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  906.809035][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  906.845323][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  906.865590][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  906.998061][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  907.074154][ T8307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.304190][ T1095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.449059][ T1095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.457414][ T6381] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  907.524815][ T1095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.703604][ T6381] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.719051][ T6381] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  907.805488][ T6381] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  907.816643][ T6381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.825853][ T6381] usb 4-1: Product: syz
[  907.830236][ T6381] usb 4-1: Manufacturer: syz
[  907.835268][ T6381] usb 4-1: SerialNumber: syz
[  907.937094][ T6381] usb 4-1: config 0 descriptor??
[  908.184585][ T9971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  908.288971][ T6381] usb 4-1: USB disconnect, device number 8
[  908.963912][   T50] Bluetooth: hci3: command tx timeout
[  910.066554][ T9971] veth0_vlan: entered promiscuous mode
[  910.122454][ T6192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  910.299101][T10143] chnl_net:caif_netlink_parms(): no params data found
[  910.559730][ T6192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  910.706476][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  910.713385][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  910.970660][ T9971] veth1_vlan: entered promiscuous mode
[  911.043767][   T50] Bluetooth: hci3: command tx timeout
[  911.097896][ T6192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.456097][ T6192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.766790][ T6192] bridge_slave_1: left allmulticast mode
[  912.772845][ T6192] bridge_slave_1: left promiscuous mode
[  912.779917][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.856178][ T6192] bridge_slave_0: left allmulticast mode
[  912.862078][ T6192] bridge_slave_0: left promiscuous mode
[  912.869083][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.129567][   T50] Bluetooth: hci3: command tx timeout
[  913.623429][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  913.685161][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  913.711961][ T6192] bond0 (unregistering): Released all slaves
[  913.906451][ T9971] veth0_macvtap: entered promiscuous mode
[  913.965095][ T9993] veth0_vlan: entered promiscuous mode
[  914.135957][T10213] loop3: detected capacity change from 0 to 512
[  914.166222][ T6192] hsr_slave_0: left promiscuous mode
[  914.193396][ T6192] hsr_slave_1: left promiscuous mode
[  914.202489][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  914.210760][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  914.248305][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  914.256736][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  914.373902][ T6192] veth1_macvtap: left promiscuous mode
[  914.401557][ T6192] veth0_macvtap: left promiscuous mode
[  914.423759][ T6192] veth1_vlan: left promiscuous mode
[  914.429375][ T6192] veth0_vlan: left promiscuous mode
[  915.261050][   T50] Bluetooth: hci3: command tx timeout
[  916.310650][ T6192] team0 (unregistering): Port device team_slave_1 removed
[  916.371080][ T6192] team0 (unregistering): Port device team_slave_0 removed
[  916.835854][T10143] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.843918][T10143] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.861317][T10143] bridge_slave_0: entered allmulticast mode
[  916.872830][T10143] bridge_slave_0: entered promiscuous mode
[  916.907326][T10143] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.915244][T10143] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.941570][T10143] bridge_slave_1: entered allmulticast mode
[  916.952746][T10143] bridge_slave_1: entered promiscuous mode
[  917.032068][ T9971] veth1_macvtap: entered promiscuous mode
[  917.488174][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  917.512441][ T9993] veth1_vlan: entered promiscuous mode
[  917.605801][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  917.713480][  T891] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  917.935774][  T891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.944857][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.948775][  T891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  917.992083][  T891] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  918.001693][  T891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.011940][  T891] usb 4-1: Product: syz
[  918.016473][  T891] usb 4-1: Manufacturer: syz
[  918.018390][T10143] team0: Port device team_slave_0 added
[  918.021253][  T891] usb 4-1: SerialNumber: syz
[  918.069648][  T891] usb 4-1: config 0 descriptor??
[  918.143276][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  918.223421][T10143] team0: Port device team_slave_1 added
[  918.376116][  T891] usb 4-1: USB disconnect, device number 9
[  918.592448][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  918.599841][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  918.626375][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  918.676153][  T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.741108][  T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  918.777718][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  918.786212][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  918.812842][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  918.860588][  T133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  919.138824][  T133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  919.319499][ T9993] veth0_macvtap: entered promiscuous mode
[  919.376797][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.386549][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.442214][T10143] hsr_slave_0: entered promiscuous mode
[  919.471048][T10143] hsr_slave_1: entered promiscuous mode
[  919.517195][T10143] debugfs: 'hsr0' already exists in 'hsr'
[  919.525983][T10143] Cannot create hsr debugfs directory
[  919.733034][ T9993] veth1_macvtap: entered promiscuous mode
[  920.488114][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.496318][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  921.135302][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  921.506798][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  921.994967][   T75] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  922.102869][   T75] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  922.112400][   T75] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  922.192641][   T75] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  923.041869][T10286] loop2: detected capacity change from 0 to 512
[  923.655568][T10143] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  923.890337][T10143] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  924.094004][T10143] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  924.408141][T10143] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  925.353441][ T7901] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  925.580243][ T7901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  925.591664][ T7901] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  925.686828][ T7901] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  925.696862][ T7901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.705752][ T7901] usb 4-1: Product: syz
[  925.710133][ T7901] usb 4-1: Manufacturer: syz
[  925.715216][ T7901] usb 4-1: SerialNumber: syz
[  925.756794][ T9742] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  925.818828][ T7901] usb 4-1: config 0 descriptor??
[  926.049038][ T9742] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[  926.058000][ T9742] usb 3-1: config 0 has no interface number 0
[  926.145749][ T9742] usb 3-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=4c.51
[  926.155245][ T9742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.173809][ T7901] usb 4-1: USB disconnect, device number 10
[  926.317088][ T9742] usb 3-1: config 0 descriptor??
[  926.450554][ T9742] gspca_main: sonixb-2.14.0 probing 0c45:6007
[  926.865828][T10303] loop2: detected capacity change from 0 to 8
[  926.979814][T10143] 8021q: adding VLAN 0 to HW filter on device bond0
[  927.011703][ T9742] sonixb 3-1:0.136: Error reading register 00: -110
[  927.096837][T10303] squashfs image failed sanity check
[  927.475991][T10143] 8021q: adding VLAN 0 to HW filter on device team0
[  927.719509][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.727051][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  927.854022][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.861501][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  930.448452][T10346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  930.471675][T10346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  930.487166][T10346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  930.515615][T10346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  930.549716][T10346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  931.358675][ T6381] usb 3-1: USB disconnect, device number 2
[  932.725177][T10346] Bluetooth: hci1: command tx timeout
[  933.278325][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  934.056940][ T6854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.280199][T10377] loop3: detected capacity change from 0 to 512
[  934.614277][ T6854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.845870][T10346] Bluetooth: hci1: command tx timeout
[  935.009196][ T6854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.876997][ T6854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.182471][T10342] chnl_net:caif_netlink_parms(): no params data found
[  936.895853][T10346] Bluetooth: hci1: command tx timeout
[  937.389414][T10143] veth0_vlan: entered promiscuous mode
[  937.475621][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  937.495914][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  937.515503][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  937.546488][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  937.562652][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  937.926635][ T6854] bridge_slave_1: left allmulticast mode
[  937.932534][ T6854] bridge_slave_1: left promiscuous mode
[  937.939677][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.068707][ T6854] bridge_slave_0: left allmulticast mode
[  938.074964][ T6854] bridge_slave_0: left promiscuous mode
[  938.081725][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.973408][   T50] Bluetooth: hci1: command tx timeout
[  939.603623][   T50] Bluetooth: hci5: command tx timeout
[  940.177820][ T6854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  940.355154][ T6854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  940.516954][ T6854] bond0 (unregistering): Released all slaves
[  940.724707][T10143] veth1_vlan: entered promiscuous mode
[  941.672470][ T6854] hsr_slave_0: left promiscuous mode
[  941.690879][   T50] Bluetooth: hci5: command tx timeout
[  941.736156][ T6854] hsr_slave_1: left promiscuous mode
[  941.756170][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  941.766576][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  941.852628][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  941.860646][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.047611][ T6854] veth1_macvtap: left promiscuous mode
[  942.059097][ T6854] veth0_macvtap: left promiscuous mode
[  942.087062][ T6854] veth1_vlan: left promiscuous mode
[  942.129341][ T6854] veth0_vlan: left promiscuous mode
[  942.609327][T10424] loop3: detected capacity change from 0 to 512
[  943.765086][   T50] Bluetooth: hci5: command tx timeout
[  944.041301][ T6854] team0 (unregistering): Port device team_slave_1 removed
[  944.099478][ T6854] team0 (unregistering): Port device team_slave_0 removed
[  945.148591][T10342] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.158164][T10342] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.168633][T10342] bridge_slave_0: entered allmulticast mode
[  945.197937][T10342] bridge_slave_0: entered promiscuous mode
[  945.292052][T10342] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.300072][T10342] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.333614][T10342] bridge_slave_1: entered allmulticast mode
[  945.354559][T10342] bridge_slave_1: entered promiscuous mode
[  945.855245][   T50] Bluetooth: hci5: command tx timeout
[  947.110056][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  947.387623][ T7203] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  947.698773][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  947.721183][T10143] veth0_macvtap: entered promiscuous mode
[  948.446895][ T7203] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.880445][T10465] loop3: detected capacity change from 0 to 512
[  949.246391][T10342] team0: Port device team_slave_0 added
[  949.307530][ T7203] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.466538][T10143] veth1_macvtap: entered promiscuous mode
[  949.545559][T10342] team0: Port device team_slave_1 added
[  949.668412][ T7203] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.882514][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  950.891041][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  950.918570][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  951.107463][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  951.177889][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.185470][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  951.211858][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  951.242394][T10397] chnl_net:caif_netlink_parms(): no params data found
[  951.472865][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  952.133443][ T6151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  952.593769][ T6151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  953.047680][ T6151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  953.096357][ T6151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  953.354421][T10342] hsr_slave_0: entered promiscuous mode
[  953.406965][T10342] hsr_slave_1: entered promiscuous mode
[  953.475987][T10502] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1040'.
[  953.496214][T10502] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1040'.
[  953.530213][T10342] debugfs: 'hsr0' already exists in 'hsr'
[  953.536370][T10342] Cannot create hsr debugfs directory
[  953.558450][ T7203] bridge_slave_1: left allmulticast mode
[  953.565478][ T7203] bridge_slave_1: left promiscuous mode
[  953.572233][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.697897][ T7203] bridge_slave_0: left allmulticast mode
[  953.704039][ T7203] bridge_slave_0: left promiscuous mode
[  953.710845][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.700895][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  954.769841][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  954.873919][ T7203] bond0 (unregistering): Released all slaves
[  955.423256][ T7203] hsr_slave_0: left promiscuous mode
[  955.450217][ T7203] hsr_slave_1: left promiscuous mode
[  955.465494][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  955.474361][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0
[  955.568355][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  955.576198][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1
[  955.741783][ T7203] veth1_macvtap: left promiscuous mode
[  955.797410][ T7203] veth0_macvtap: left promiscuous mode
[  955.833632][ T7203] veth1_vlan: left promiscuous mode
[  955.986010][ T7203] veth0_vlan: left promiscuous mode
[  958.020299][ T7203] team0 (unregistering): Port device team_slave_1 removed
[  958.049269][ T7203] team0 (unregistering): Port device team_slave_0 removed
[  959.290831][T10397] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.309635][T10397] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.363817][T10397] bridge_slave_0: entered allmulticast mode
[  959.383655][T10397] bridge_slave_0: entered promiscuous mode
[  959.515877][T10397] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.529766][T10397] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.603927][T10397] bridge_slave_1: entered allmulticast mode
[  959.655002][T10397] bridge_slave_1: entered promiscuous mode
[  960.407684][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  960.720885][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  961.577404][T10397] team0: Port device team_slave_0 added
[  961.947727][T10397] team0: Port device team_slave_1 added
[  963.979466][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  963.987252][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  964.014681][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  964.585243][T10560] loop3: detected capacity change from 0 to 512
[  965.030315][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  965.037770][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.071218][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.521713][T10397] hsr_slave_0: entered promiscuous mode
[  966.591951][T10397] hsr_slave_1: entered promiscuous mode
[  966.614811][T10397] debugfs: 'hsr0' already exists in 'hsr'
[  966.620765][T10397] Cannot create hsr debugfs directory
[  967.078623][T10574] binder: 10571:10574 ioctl 4018620d 0 returned -22
[  967.163413][T10576] binder: 10571:10576 ioctl c0306201 0 returned -14
[  967.461053][T10342] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  967.841076][T10342] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  968.073390][T10342] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  968.205737][T10346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  968.233835][T10346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  968.247198][T10346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  968.300096][T10346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  968.335437][T10346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  968.463269][T10588] netlink: 'syz.3.1047': attribute type 12 has an invalid length.
[  968.518111][T10590] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1048'.
[  968.588344][T10342] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  968.832484][T10592] netlink: 'syz.3.1047': attribute type 4 has an invalid length.
[  970.403771][   T50] Bluetooth: hci0: command tx timeout
[  970.995448][T10607] loop3: detected capacity change from 0 to 1024
[  971.074454][T10607] EXT4-fs: Ignoring removed i_version option
[  971.107415][T10607] EXT4-fs (loop3): Test dummy encryption mode enabled
[  971.202083][ T6151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.291653][T10607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  972.483377][   T50] Bluetooth: hci0: command tx timeout
[  973.006679][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  973.013667][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  973.159742][ T6151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.815639][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  974.166429][ T6151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.362696][T10616] loop3: detected capacity change from 0 to 512
[  974.420201][ T6151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.593701][   T50] Bluetooth: hci0: command tx timeout
[  976.383266][T10397] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  976.534988][T10397] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  976.644382][   T50] Bluetooth: hci0: command tx timeout
[  976.782619][T10397] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  977.106881][T10586] chnl_net:caif_netlink_parms(): no params data found
[  977.229586][T10397] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  977.328377][ T6151] bridge_slave_1: left allmulticast mode
[  977.334399][ T6151] bridge_slave_1: left promiscuous mode
[  977.344001][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.414037][ T6151] bridge_slave_0: left allmulticast mode
[  977.420036][ T6151] bridge_slave_0: left promiscuous mode
[  977.427036][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.764056][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  978.860904][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  978.920852][ T6151] bond0 (unregistering): Released all slaves
[  979.560324][T10342] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.709074][ T6151] hsr_slave_0: left promiscuous mode
[  979.733069][ T6151] hsr_slave_1: left promiscuous mode
[  979.746284][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  979.754213][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.811003][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  979.818777][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.910651][ T6151] veth1_macvtap: left promiscuous mode
[  979.924281][ T6151] veth0_macvtap: left promiscuous mode
[  979.962664][ T6151] veth1_vlan: left promiscuous mode
[  979.968909][ T6151] veth0_vlan: left promiscuous mode
[  980.698399][T10638] xt_policy: too many policy elements
[  980.761144][T10638] rdma_op ffff88801d9c9580 conn xmit_rdma 0000000000000000
[  981.122600][  T891] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  981.573462][  T891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  981.584981][  T891] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  981.594538][  T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.710507][  T891] usb 3-1: config 0 descriptor??
[  982.115853][  T891] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  982.124358][  T891] usbhid 3-1:0.0: can't add hid device: -22
[  982.131187][  T891] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  983.575133][ T9742] usb 3-1: USB disconnect, device number 3
[  984.692800][ T6151] team0 (unregistering): Port device team_slave_1 removed
[  984.782363][ T6151] team0 (unregistering): Port device team_slave_0 removed
[  985.594540][T10647] binder: 10646:10647 ioctl 4018620d 0 returned -22
[  985.655639][T10647] binder: 10646:10647 ioctl c0306201 0 returned -14
[  985.950523][T10342] 8021q: adding VLAN 0 to HW filter on device team0
[  986.233414][T10655] netlink: 'syz.2.1056': attribute type 12 has an invalid length.
[  986.280166][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state
[  986.287876][ T8455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  986.394917][T10657] netlink: 'syz.2.1056': attribute type 4 has an invalid length.
[  986.448738][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.456436][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  986.991387][T10586] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.000059][T10586] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.023923][T10586] bridge_slave_0: entered allmulticast mode
[  987.043776][T10586] bridge_slave_0: entered promiscuous mode
[  987.136839][T10586] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.144742][T10586] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.165530][T10586] bridge_slave_1: entered allmulticast mode
[  987.202319][T10586] bridge_slave_1: entered promiscuous mode
[  987.511057][T10667] =====================================================
[  987.518868][T10667] BUG: KMSAN: uninit-value in iopt_pages_unfill_xarray+0xfe3/0x1660
[  987.527517][T10667]  iopt_pages_unfill_xarray+0xfe3/0x1660
[  987.533574][T10667]  iopt_area_remove_access+0x508/0x650
[  987.539276][T10667]  iommufd_access_unpin_pages+0x637/0xa50
[  987.545477][T10667]  iommufd_test+0xb5fd/0xbc60
[  987.550328][T10667]  iommufd_fops_ioctl+0x82a/0x9e0
[  987.555717][T10667]  __se_sys_ioctl+0x23c/0x400
[  987.560607][T10667]  __x64_sys_ioctl+0x97/0xe0
[  987.565592][T10667]  x64_sys_call+0x18a7/0x3e70
[  987.570489][T10667]  do_syscall_64+0xc9/0xf80
[  987.575452][T10667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.583835][T10667] 
[  987.586258][T10667] Local variable batch created at:
[  987.591481][T10667]  iopt_pages_unfill_xarray+0x86/0x1660
[  987.598311][T10667]  iopt_area_remove_access+0x508/0x650
[  987.604574][T10667] 
[  987.607036][T10667] CPU: 1 UID: 0 PID: 10667 Comm: syz.2.1058 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[  987.618878][T10667] Tainted: [L]=SOFTLOCKUP
[  987.623453][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  987.633933][T10667] =====================================================
[  987.640983][T10667] Disabling lock debugging due to kernel taint
[  987.647454][T10667] Kernel panic - not syncing: kmsan.panic set ...
[  987.654028][T10667] CPU: 1 UID: 0 PID: 10667 Comm: syz.2.1058 Tainted: G    B        L      syzkaller #0 PREEMPT(voluntary) 
[  987.665671][T10667] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  987.671336][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  987.681548][T10667] Call Trace:
[  987.684941][T10667]  <TASK>
[  987.688008][T10667]  __dump_stack+0x26/0x30
[  987.692565][T10667]  dump_stack_lvl+0x50/0x1c0
[  987.697375][T10667]  ? dump_stack+0x12/0x25
[  987.701915][T10667]  dump_stack+0x1e/0x25
[  987.706293][T10667]  vpanic+0x435/0xd40
[  987.710523][T10667]  panic+0x15d/0x160
[  987.714704][T10667]  kmsan_report+0x31a/0x320
[  987.719478][T10667]  ? __msan_warning+0x1b/0x30
[  987.724389][T10667]  ? iopt_pages_unfill_xarray+0xfe3/0x1660
[  987.730459][T10667]  ? iopt_area_remove_access+0x508/0x650
[  987.736345][T10667]  ? iommufd_access_unpin_pages+0x637/0xa50
[  987.742512][T10667]  ? iommufd_test+0xb5fd/0xbc60
[  987.747579][T10667]  ? iommufd_fops_ioctl+0x82a/0x9e0
[  987.753021][T10667]  ? __se_sys_ioctl+0x23c/0x400
[  987.758104][T10667]  ? __x64_sys_ioctl+0x97/0xe0
[  987.763129][T10667]  ? x64_sys_call+0x18a7/0x3e70
[  987.768236][T10667]  ? do_syscall_64+0xc9/0xf80
[  987.773166][T10667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.779466][T10667]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  987.785564][T10667]  ? kmsan_get_metadata+0xf1/0x160
[  987.790949][T10667]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  987.797077][T10667]  ? xas_load+0xcda/0xd70
[  987.801648][T10667]  ? kmsan_get_metadata+0xf1/0x160
[  987.807036][T10667]  ? __xas_next+0x142/0x7a0
[  987.811782][T10667]  ? kmsan_get_metadata+0xf1/0x160
[  987.817174][T10667]  __msan_warning+0x1b/0x30
[  987.821927][T10667]  iopt_pages_unfill_xarray+0xfe3/0x1660
[  987.827883][T10667]  ? stack_depot_save_flags+0x35/0x790
[  987.833634][T10667]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  987.839738][T10667]  ? interval_tree_remove+0x158e/0x1730
[  987.845536][T10667]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  987.851657][T10667]  iopt_area_remove_access+0x508/0x650
[  987.857418][T10667]  iommufd_access_unpin_pages+0x637/0xa50
[  987.863479][T10667]  iommufd_test+0xb5fd/0xbc60
[  987.868405][T10667]  ? stack_depot_save_flags+0x35/0x790
[  987.874117][T10667]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  987.880709][T10667]  ? kmsan_get_metadata+0xf1/0x160
[  987.886072][T10667]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  987.892150][T10667]  ? __pfx_iommufd_test+0x10/0x10
[  987.897362][T10667]  ? __pfx_iommufd_test+0x10/0x10
[  987.902564][T10667]  iommufd_fops_ioctl+0x82a/0x9e0
[  987.907868][T10667]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  987.913630][T10667]  __se_sys_ioctl+0x23c/0x400
[  987.918536][T10667]  __x64_sys_ioctl+0x97/0xe0
[  987.923353][T10667]  x64_sys_call+0x18a7/0x3e70
[  987.928256][T10667]  do_syscall_64+0xc9/0xf80
[  987.932996][T10667]  ? clear_bhb_loop+0x40/0x90
[  987.937898][T10667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.944011][T10667] RIP: 0033:0x7f9cf7d9acb9
[  987.948583][T10667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  987.968400][T10667] RSP: 002b:00007f9cf8c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  987.977016][T10667] RAX: ffffffffffffffda RBX: 00007f9cf8015fa0 RCX: 00007f9cf7d9acb9
[  987.985139][T10667] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003
[  987.993258][T10667] RBP: 00007f9cf7e08bf7 R08: 0000000000000000 R09: 0000000000000000
[  988.001419][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  988.009546][T10667] R13: 00007f9cf8016038 R14: 00007f9cf8015fa0 R15: 00007ffd6e7cb3a8
[  988.017728][T10667]  </TASK>
[  988.021343][T10667] Kernel Offset: disabled
[  988.025739][T10667] Rebooting in 86400 seconds..