last executing test programs:

15m46.256561266s ago: executing program 1 (id=2):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
accept4(r3, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0xb, 0x5}}}}, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0}, 0x94)

15m43.402139755s ago: executing program 1 (id=12):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x274)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a74000000060a010400000000000000000216000048000480440001800c0001007061796c6f616400340002800800044000000003080005400000000a08000340000000570800064000000002080008400000000008000240000000010900010073797a30000000000900020073797a320000"], 0x9c}}, 0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)

15m36.582977894s ago: executing program 1 (id=17):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xd8\xf2\xe6\"K1Y\xb5%2\xcb\xf5!\x8c\xd5I\xa3~w\b\x1ao\xbd\xa43z\xd5\xbe\x14\x05\x9b\x05\xf8\r?\x9f\xc6\x0e\xd8\xd3\xc4*\xbc\xf0\x1a\xd1Ob*\x8a\xbf\x92@\xb1\x9fq\xd5\x84\x12\xe2\xad5\x03\xec\xb0@\x7f\x9f}\x17\x87\v\xf0\x99\xf7\xc5\x82C\x14\xd3\x05\xba\xd6F-\x06\xfa\x81\x1a\x1eW', 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

15m19.434526651s ago: executing program 32 (id=17):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xd8\xf2\xe6\"K1Y\xb5%2\xcb\xf5!\x8c\xd5I\xa3~w\b\x1ao\xbd\xa43z\xd5\xbe\x14\x05\x9b\x05\xf8\r?\x9f\xc6\x0e\xd8\xd3\xc4*\xbc\xf0\x1a\xd1Ob*\x8a\xbf\x92@\xb1\x9fq\xd5\x84\x12\xe2\xad5\x03\xec\xb0@\x7f\x9f}\x17\x87\v\xf0\x99\xf7\xc5\x82C\x14\xd3\x05\xba\xd6F-\x06\xfa\x81\x1a\x1eW', 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

15m19.369124442s ago: executing program 3 (id=35):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

15m13.912802814s ago: executing program 3 (id=39):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x143042, 0x6d)
fallocate(r1, 0x0, 0x9, 0x10001)
copy_file_range(r1, 0x0, r1, &(0x7f00000001c0)=0xae8, 0x8000863, 0x0)
ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0xd2, 0x3, 0x5, 0xffff, 0x3c37, 0xffffffffffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x2b, 0x80801, 0x1)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)
syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, 0x0, &(0x7f0000000000), &(0x7f0000000000))
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)

15m9.94122784s ago: executing program 3 (id=46):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(0x0, 0x1d)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@seclabel}]})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xbc}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$eventfd(r4, &(0x7f0000000240), 0xffffff14)

15m7.422834306s ago: executing program 3 (id=50):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20280, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
r4 = dup2(r3, r3)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4)

15m4.937690299s ago: executing program 3 (id=51):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x274)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a74000000060a010400000000000000000216000048000480440001800c0001007061796c6f616400340002800800044000000003080005400000000a08000340000000570800064000000002080008400000000008000240000000010900010073797a30000000000900020073797a320000"], 0x9c}}, 0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)

15m0.92192589s ago: executing program 3 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x1e74, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x1a08, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1c4, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x104c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3b4, 0x11, 0x0, 0x0, {{0x8}, {0x2d4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x125, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "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"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe8, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff2"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x1f0, 0x1, [@m_ipt={0x1ec, 0x19, 0x0, 0x0, {{0x8}, {0x160, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xa25}, @TCA_IPT_TARG={0x125, 0x6, {0xc02, 'filter\x00', 0x4, 0x0, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x65, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9bc9fee49c623547e8ec19586ef91a396b284ec971c6b9d5ac0d3acb48f401b7530"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x188, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x12c, 0x20, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0xa1, 0x6, "2201230473af9da5d8f0bdeabeea811c07bf2d275b9921a5b7e45a1fa3a314fcb63ffcdf86cbd6572e16c8e70b94a9934d2cb16e66581c605386b2d4fe5d33ebc80555122705f044aea1b9016e491a014d6b8a3987c7f9bdc2ccb24429f0a851f5b51c087574c2709ee1a581911f63bf138bde701cfbe564b1d4c4f66784720c3a2e7626890d0a2af3ff076bb677d20f305d9efb88b1ffbe83adca1604"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0xd4, 0x1, [@m_ipt={0x60, 0xd, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xa, 'raw\x00', 0x7, 0x2}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x70, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x45, 0x6, "b33297425a021e47c2553c0ab72e1dd7549a60e8c921468d7a578a9d9a89fd79459bd9db48d31b4009d8cff9939c5dd644b2104ca474a3af87c77d015920c06dc4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1e74}, 0x1, 0x0, 0x0, 0x8004}, 0x880)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14m45.528587862s ago: executing program 33 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x1e74, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x1a08, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1c4, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x104c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3b4, 0x11, 0x0, 0x0, {{0x8}, {0x2d4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x125, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "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"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe8, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff2"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x1f0, 0x1, [@m_ipt={0x1ec, 0x19, 0x0, 0x0, {{0x8}, {0x160, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xa25}, @TCA_IPT_TARG={0x125, 0x6, {0xc02, 'filter\x00', 0x4, 0x0, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x65, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9bc9fee49c623547e8ec19586ef91a396b284ec971c6b9d5ac0d3acb48f401b7530"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x188, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x12c, 0x20, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0xa1, 0x6, "2201230473af9da5d8f0bdeabeea811c07bf2d275b9921a5b7e45a1fa3a314fcb63ffcdf86cbd6572e16c8e70b94a9934d2cb16e66581c605386b2d4fe5d33ebc80555122705f044aea1b9016e491a014d6b8a3987c7f9bdc2ccb24429f0a851f5b51c087574c2709ee1a581911f63bf138bde701cfbe564b1d4c4f66784720c3a2e7626890d0a2af3ff076bb677d20f305d9efb88b1ffbe83adca1604"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0xd4, 0x1, [@m_ipt={0x60, 0xd, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xa, 'raw\x00', 0x7, 0x2}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x70, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x45, 0x6, "b33297425a021e47c2553c0ab72e1dd7549a60e8c921468d7a578a9d9a89fd79459bd9db48d31b4009d8cff9939c5dd644b2104ca474a3af87c77d015920c06dc4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1e74}, 0x1, 0x0, 0x0, 0x8004}, 0x880)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

29.598052714s ago: executing program 4 (id=2259):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0)

29.43247384s ago: executing program 4 (id=2262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf25000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)

29.240664431s ago: executing program 4 (id=2265):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000008c0), 0xd20, 0x44180)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x404400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getpgrp(r2)
close_range(r5, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x4802, 0x0)

28.109091798s ago: executing program 4 (id=2271):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)

26.984938669s ago: executing program 4 (id=2276):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)

26.838645616s ago: executing program 4 (id=2278):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x3c}}, 0x0)

7.837081701s ago: executing program 0 (id=2396):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x30)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x40000029)
fcntl$notify(r2, 0x402, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

7.636523314s ago: executing program 0 (id=2399):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_create(0xd)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x4)
pipe(&(0x7f00000001c0))
pipe(&(0x7f0000000040))
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_route(r0, 0x0, 0x0)

6.651944117s ago: executing program 0 (id=2400):
syz_emit_vhci(&(0x7f0000001780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x200d}}}, 0x7)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
socket(0x2, 0x80805, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

3.776610864s ago: executing program 5 (id=2410):
setuid(0x0)

3.775113517s ago: executing program 6 (id=2411):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4)
ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

3.626036062s ago: executing program 2 (id=2412):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x80, 0x6)
write(r4, &(0x7f0000003300)="ac", 0x1)
write(r2, 0x0, 0x0)

3.583905213s ago: executing program 5 (id=2413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0000001000030429bd7000acc809e9e4db97c8", @ANYRES32, @ANYBLOB="00000000104000001c0012800b00010062726964676500000c000280060027"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0xba01}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000080)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

3.468911568s ago: executing program 0 (id=2414):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0)

3.345913209s ago: executing program 2 (id=2415):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4)
r2 = dup(r1)
sendmmsg$inet(r2, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="be06", 0x2}], 0x1}}], 0x1, 0x91)
read$FUSE(r2, &(0x7f00000075c0)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
write$binfmt_elf32(r2, &(0x7f00000004c0)=ANY=[], 0x258)
read$FUSE(r2, &(0x7f0000002a00)={0x2020}, 0x2020)

3.259195643s ago: executing program 5 (id=2416):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x40, 0x7, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x40, 0x2f, 0x40a}})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)

3.057330736s ago: executing program 6 (id=2417):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
close(0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x3fe, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x8}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x7f, 0x20}}}, 0x42)

2.400574205s ago: executing program 6 (id=2418):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60)
listen(r0, 0xf5f)
accept(r0, 0x0, 0x0)

2.375775583s ago: executing program 2 (id=2419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x0)

2.25889516s ago: executing program 2 (id=2420):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000115000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000498000/0x1000)=nil, &(0x7f000031a000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005e7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffeb8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x20, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x0, 0x1, 0xfffffffffffffff8}, @map_idx={0x18, 0x9}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x7, 0x6, 0xfffffff7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x4, 0x8, 0xc}, {0x5, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x1, 0xa}, {0x5, 0x5, 0x2, 0x7}, {0x0, 0x3, 0x4, 0xb}, {0x4, 0x5, 0x1, 0x6}], 0x10, 0xc}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x0, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x334)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)

2.148959077s ago: executing program 0 (id=2421):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x8000)

994.758869ms ago: executing program 5 (id=2422):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d2", 0x7b}], 0x1)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1}, 0x20040851)

939.911918ms ago: executing program 0 (id=2423):
syz_emit_vhci(&(0x7f0000001780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x200d}}}, 0x7)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
socket(0x2, 0x80805, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)

938.416043ms ago: executing program 6 (id=2424):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)

810.800567ms ago: executing program 6 (id=2425):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000003cac0)={0x1, &(0x7f0000000000)=[{0x6000004, 0x0, 0x0, 0x808, 0x5d}]})

621.796611ms ago: executing program 5 (id=2426):
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2217, 0xb741, 0x16, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

620.893968ms ago: executing program 6 (id=2427):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})

445.900084ms ago: executing program 5 (id=2428):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x48, 0x0, r0, 0x21eae}}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
close(0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x3fe, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x8}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x7f, 0x20}}}, 0x42)

328.458079ms ago: executing program 2 (id=2429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x0)

0s ago: executing program 2 (id=2430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400500, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2, 0xf, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_x_sec_ctx={0xa, 0x18, 0x1, 0x8, 0x42, "a45680f4ef3370e3787962c8ff60cf1be8c115c4b14872781364958a54b6452c26af6b9803060500c8a2c27051827fb4ebd654884ca4edb964221bcb4b270972e722"}]}, 0xd0}}, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xfffffffffffff2e2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="950000000000000018640000040000000000000002000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000029310000200000018200000", @ANYRES32=r1, @ANYBLOB="0000000007000000183b00000200000000000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018250000ab8e01344148606137c54d86b36ab32741595bc137c425e502d697f34c73a1dced6a8ebe721cc472b563e05c761004f22029515d05c9c897692f2ee664776605567988ffec675e99ff0c509faa3d0cb69d6e171460fe4631cc4df837a6696d7ea7936b59b20fd57401d8e1c8fa451393d31473670f973cecc867fdf75e3512c978c4a0082cd8780819520c506cb20ba839c622d9e2e31468a8249a6ca3d6d1856376b4cecae6667fceac", @ANYRES32, @ANYBLOB], 0x0, 0x9d, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xada1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xa, {"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", 0x5b6}}, 0x1006)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
close(0x3)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getpid()
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r7, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
sync()
close_range(r6, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

404558][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  643.397777][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  643.407363][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  643.408705][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  643.409669][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  646.324036][ T5613] Bluetooth: hci5: command tx timeout
[  647.593786][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'.
[  647.691712][T11222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'.
[  647.730705][ T5613] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  648.885511][ T5613] Bluetooth: hci5: command tx timeout
[  650.957422][T11250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1031'.
[  650.965334][ T5613] Bluetooth: hci5: command tx timeout
[  651.237445][T10795] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  651.312204][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  651.314491][T10795] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  651.368586][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  651.589024][T10795] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  651.646858][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  651.668024][T10795] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  651.709551][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  652.122319][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'.
[  653.045894][ T5613] Bluetooth: hci5: command tx timeout
[  656.889594][T11170] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.889798][T11170] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.889998][T11170] bridge_slave_0: entered allmulticast mode
[  656.918215][T11170] bridge_slave_0: entered promiscuous mode
[  656.948055][T11170] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.949262][T11170] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.949437][T11170] bridge_slave_1: entered allmulticast mode
[  656.976066][T11170] bridge_slave_1: entered promiscuous mode
[  657.551929][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.568576][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.674997][T11170] team0: Port device team_slave_0 added
[  657.683832][T11170] team0: Port device team_slave_1 added
[  657.792810][T10795] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.840836][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.840849][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.840873][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.847170][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.847183][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.847206][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.233769][T10795] 8021q: adding VLAN 0 to HW filter on device team0
[  658.261849][T11170] hsr_slave_0: entered promiscuous mode
[  658.264185][T11170] hsr_slave_1: entered promiscuous mode
[  658.276844][T11170] debugfs: 'hsr0' already exists in 'hsr'
[  658.276865][T11170] Cannot create hsr debugfs directory
[  658.384882][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'.
[  658.417860][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.418131][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.585323][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'.
[  658.651884][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.652011][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.710714][T11333] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  659.710752][T11333] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  659.710783][T11333] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  660.065570][  T827] bridge_slave_1: left allmulticast mode
[  660.065602][  T827] bridge_slave_1: left promiscuous mode
[  660.065844][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.148472][  T827] bridge_slave_0: left allmulticast mode
[  660.148500][  T827] bridge_slave_0: left promiscuous mode
[  660.148705][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.586118][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'.
[  663.060401][  T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.116336][  T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.156998][  T827] bond0 (unregistering): Released all slaves
[  666.025347][  T827] hsr_slave_0: left promiscuous mode
[  666.286018][  T827] hsr_slave_1: left promiscuous mode
[  666.287790][  T827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.353692][  T827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.965759][  T827] team0 (unregistering): Port device team_slave_1 removed
[  666.995784][  T827] team0 (unregistering): Port device team_slave_0 removed
[  667.171595][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  668.658443][T11441] =======================================================
[  668.658443][T11441] WARNING: The mand mount option has been deprecated and
[  668.658443][T11441]          and is ignored by this kernel. Remove the mand
[  668.658443][T11441]          option from the mount to silence this warning.
[  668.658443][T11441] =======================================================
[  668.711591][T11441] overlayfs: failed to clone upperpath
[  670.365786][T10446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  670.402002][T10446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  670.430939][T10446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  670.432790][T10446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  670.433486][T10446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  673.703136][ T5613] Bluetooth: hci1: command tx timeout
[  676.165417][ T5613] Bluetooth: hci1: command tx timeout
[  678.245924][ T5613] Bluetooth: hci1: command tx timeout
[  680.968423][ T5613] Bluetooth: hci1: command tx timeout
[  681.746999][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1085'.
[  681.869270][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1085'.
[  683.972917][T11569] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  683.972956][T11569] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  683.972983][T11569] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  684.671084][T11454] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.671278][T11454] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.671446][T11454] bridge_slave_0: entered allmulticast mode
[  684.674259][T11454] bridge_slave_0: entered promiscuous mode
[  684.680742][T11454] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.681572][T11454] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.681723][T11454] bridge_slave_1: entered allmulticast mode
[  684.692159][T11454] bridge_slave_1: entered promiscuous mode
[  685.027628][T11602] overlayfs: failed to clone upperpath
[  685.975994][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  685.976062][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  686.214593][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.355947][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.495364][T11170] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  687.589542][T11170] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  688.616938][T11170] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  688.655244][T11170] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  688.673070][T11454] team0: Port device team_slave_0 added
[  688.679791][T11170] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  688.729528][T11170] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.732405][T11454] team0: Port device team_slave_1 added
[  688.735049][T11170] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  688.773569][T11623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'.
[  688.797859][T11170] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  689.570256][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'.
[  689.959568][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.959585][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.959611][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.984321][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.984335][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.984359][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  691.606403][T11454] hsr_slave_0: entered promiscuous mode
[  691.607577][T11454] hsr_slave_1: entered promiscuous mode
[  691.608551][T11454] debugfs: 'hsr0' already exists in 'hsr'
[  691.608574][T11454] Cannot create hsr debugfs directory
[  691.995587][  T827] bridge_slave_1: left allmulticast mode
[  691.995620][  T827] bridge_slave_1: left promiscuous mode
[  691.995858][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.103540][  T827] bridge_slave_0: left allmulticast mode
[  692.103571][  T827] bridge_slave_0: left promiscuous mode
[  692.103797][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.606526][  T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  697.669735][  T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  697.688446][  T827] bond0 (unregistering): Released all slaves
[  697.903669][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  698.286835][  T827] hsr_slave_0: left promiscuous mode
[  698.325316][  T827] hsr_slave_1: left promiscuous mode
[  698.326382][  T827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  698.377895][  T827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.251719][  T827] team0 (unregistering): Port device team_slave_1 removed
[  700.305854][  T827] team0 (unregistering): Port device team_slave_0 removed
[  703.393803][T10446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  704.385401][T10446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  704.407321][T10446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  704.441534][T10446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  704.442457][T10446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  706.579320][T10446] Bluetooth: hci2: command tx timeout
[  707.956706][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'.
[  709.422363][T10446] Bluetooth: hci2: command tx timeout
[  711.735325][T10446] Bluetooth: hci2: command tx timeout
[  711.897368][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'.
[  713.845377][T10446] Bluetooth: hci2: command tx timeout
[  714.494441][T11454] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  714.543478][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  715.465433][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  716.815851][T11454] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  716.892425][T11913] overlayfs: failed to clone upperpath
[  716.954097][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  716.979897][T11454] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  717.024282][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  717.347352][T11454] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  717.390446][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  717.551679][T11747] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.551779][T11747] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.551876][T11747] bridge_slave_0: entered allmulticast mode
[  717.554620][T11747] bridge_slave_0: entered promiscuous mode
[  717.571845][T11747] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.571971][T11747] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.572119][T11747] bridge_slave_1: entered allmulticast mode
[  717.580616][T11747] bridge_slave_1: entered promiscuous mode
[  717.754307][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  717.792682][T11747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  717.811367][T11747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  717.961042][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'.
[  718.103875][T11747] team0: Port device team_slave_0 added
[  719.532831][T11747] team0: Port device team_slave_1 added
[  719.853093][T11747] batman_adv: batadv0: Adding interface: batadv_slave_0
[  719.853109][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  719.853133][T11747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  719.923670][T11747] batman_adv: batadv0: Adding interface: batadv_slave_1
[  719.923686][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  719.923711][T11747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.216673][  T827] bridge_slave_1: left allmulticast mode
[  720.216706][  T827] bridge_slave_1: left promiscuous mode
[  720.216973][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.285772][  T827] bridge_slave_0: left allmulticast mode
[  720.285804][  T827] bridge_slave_0: left promiscuous mode
[  720.287791][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.175864][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  722.144205][  T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.276447][  T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.362628][  T827] bond0 (unregistering): Released all slaves
[  722.419116][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  722.542432][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'.
[  722.602284][T11747] hsr_slave_0: entered promiscuous mode
[  722.603551][T11747] hsr_slave_1: entered promiscuous mode
[  722.604481][T11747] debugfs: 'hsr0' already exists in 'hsr'
[  722.604502][T11747] Cannot create hsr debugfs directory
[  723.898265][  T827] hsr_slave_0: left promiscuous mode
[  723.936569][  T827] hsr_slave_1: left promiscuous mode
[  723.938925][  T827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  723.959969][  T827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.899589][  T827] team0 (unregistering): Port device team_slave_1 removed
[  725.017112][  T827] team0 (unregistering): Port device team_slave_0 removed
[  726.640820][T11454] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.980117][T11454] 8021q: adding VLAN 0 to HW filter on device team0
[  727.038156][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.038255][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.163891][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.164016][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.727599][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[  730.151744][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  730.249823][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  730.269675][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  730.280115][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  730.284205][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  731.009215][T12130] overlayfs: failed to clone upperpath
[  732.406058][T10446] Bluetooth: hci1: command tx timeout
[  735.492891][T10446] Bluetooth: hci1: command tx timeout
[  737.525661][T10446] Bluetooth: hci1: command tx timeout
[  737.694098][T11747] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  738.829029][T11747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  739.615007][T10446] Bluetooth: hci1: command tx timeout
[  742.447370][T11747] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  742.698772][T11747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  742.721703][T11747] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  743.767941][T11747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  744.226445][T11747] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  745.786120][T11747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  746.134326][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'.
[  746.644722][T12108] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.652812][T12108] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.652971][T12108] bridge_slave_0: entered allmulticast mode
[  746.670111][T12108] bridge_slave_0: entered promiscuous mode
[  746.682386][T12108] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.682548][T12108] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.682702][T12108] bridge_slave_1: entered allmulticast mode
[  746.710618][T12108] bridge_slave_1: entered promiscuous mode
[  746.769050][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.790769][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.965694][T12108] team0: Port device team_slave_0 added
[  746.984089][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'.
[  746.984887][T12108] team0: Port device team_slave_1 added
[  747.029167][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'.
[  747.066453][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.066467][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.066491][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.106749][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.106763][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.106787][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.138299][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  747.138362][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  748.665595][T12108] hsr_slave_0: entered promiscuous mode
[  748.672700][T12108] hsr_slave_1: entered promiscuous mode
[  748.677486][T12108] debugfs: 'hsr0' already exists in 'hsr'
[  748.677508][T12108] Cannot create hsr debugfs directory
[  751.339542][  T827] bridge_slave_1: left allmulticast mode
[  751.339576][  T827] bridge_slave_1: left promiscuous mode
[  751.339822][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.408607][  T827] bridge_slave_0: left allmulticast mode
[  751.408637][  T827] bridge_slave_0: left promiscuous mode
[  751.408858][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.465929][  T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  753.323391][  T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  753.368891][  T827] bond0 (unregistering): Released all slaves
[  754.090896][T11747] 8021q: adding VLAN 0 to HW filter on device bond0
[  754.517902][T11747] 8021q: adding VLAN 0 to HW filter on device team0
[  754.559702][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.618823][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.522084][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  755.533172][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.533380][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.679632][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  755.697936][  T827] hsr_slave_0: left promiscuous mode
[  755.985466][  T827] hsr_slave_1: left promiscuous mode
[  755.986401][  T827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.816285][  T827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.156637][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  759.627790][  T827] team0 (unregistering): Port device team_slave_1 removed
[  759.798399][  T827] team0 (unregistering): Port device team_slave_0 removed
[  759.874842][T12423] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1275'.
[  760.788433][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  761.146378][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  763.536368][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  763.589840][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  763.591181][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  763.610955][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  763.626566][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  766.088939][ T5613] Bluetooth: hci2: command tx timeout
[  767.352934][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  768.110121][T12108] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  768.165365][ T5613] Bluetooth: hci2: command tx timeout
[  768.194406][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  768.316110][T12108] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  768.341231][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  768.359844][T12108] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  768.435988][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  768.864362][T12108] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  768.913240][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  770.255959][ T5613] Bluetooth: hci2: command tx timeout
[  770.335878][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'.
[  770.453979][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'.
[  772.337211][ T5613] Bluetooth: hci2: command tx timeout
[  772.725762][  T827] bridge_slave_1: left allmulticast mode
[  772.725795][  T827] bridge_slave_1: left promiscuous mode
[  772.726044][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.811200][  T827] bridge_slave_0: left allmulticast mode
[  772.811229][  T827] bridge_slave_0: left promiscuous mode
[  772.811450][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.055999][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  774.722054][T12628] overlayfs: failed to clone upperpath
[  776.815614][  T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  776.886394][  T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  777.169792][  T827] bond0 (unregistering): Released all slaves
[  777.497012][T12473] bridge0: port 1(bridge_slave_0) entered blocking state
[  777.497186][T12473] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.497337][T12473] bridge_slave_0: entered allmulticast mode
[  777.499854][T12473] bridge_slave_0: entered promiscuous mode
[  777.556232][T12108] 8021q: adding VLAN 0 to HW filter on device bond0
[  777.559327][T12473] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.559496][T12473] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.559650][T12473] bridge_slave_1: entered allmulticast mode
[  777.594073][T12473] bridge_slave_1: entered promiscuous mode
[  777.872859][  T827] hsr_slave_0: left promiscuous mode
[  777.905426][  T827] hsr_slave_1: left promiscuous mode
[  777.906331][  T827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  777.941003][  T827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  778.707860][  T827] team0 (unregistering): Port device team_slave_1 removed
[  779.129811][  T827] team0 (unregistering): Port device team_slave_0 removed
[  780.204679][T12473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.248681][T12473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.310873][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  780.402376][T12108] 8021q: adding VLAN 0 to HW filter on device team0
[  780.712955][T12473] team0: Port device team_slave_0 added
[  781.621082][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.621215][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  781.676938][T12473] team0: Port device team_slave_1 added
[  781.843232][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  781.985268][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.010745][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  782.024264][T12473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.024278][T12473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.024302][T12473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.032073][T12473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.032086][T12473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.032110][T12473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  782.264315][T12473] hsr_slave_0: entered promiscuous mode
[  782.270470][T12473] hsr_slave_1: entered promiscuous mode
[  782.271262][T12473] debugfs: 'hsr0' already exists in 'hsr'
[  782.271282][T12473] Cannot create hsr debugfs directory
[  784.550585][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  785.399416][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'.
[  785.488992][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'.
[  789.053720][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[  790.505871][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  790.884995][T10446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  790.936081][T10446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  790.939067][T10446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  790.982807][T10446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  790.985369][T10446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  793.481167][ T5613] Bluetooth: hci1: command tx timeout
[  793.998158][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  794.748693][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  795.672621][ T5613] Bluetooth: hci1: command tx timeout
[  797.765230][ T5613] Bluetooth: hci1: command tx timeout
[  798.902170][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  799.845309][ T5613] Bluetooth: hci1: command tx timeout
[  800.686557][T12473] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  800.738923][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  800.760619][T12473] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  800.846831][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  800.934493][T12473] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  800.994897][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  801.015004][T12473] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  801.074171][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  804.371880][T12473] 8021q: adding VLAN 0 to HW filter on device bond0
[  804.398299][T12473] 8021q: adding VLAN 0 to HW filter on device team0
[  804.411880][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.412186][ T7237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  804.432961][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.433163][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.137191][T12794] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.137378][T12794] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.139839][T12794] bridge_slave_0: entered allmulticast mode
[  806.145564][T12794] bridge_slave_0: entered promiscuous mode
[  806.173527][T12794] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.173635][T12794] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.174185][T12794] bridge_slave_1: entered allmulticast mode
[  806.184964][T12794] bridge_slave_1: entered promiscuous mode
[  806.281973][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  806.536456][T12794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.562450][T12794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.574105][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  806.635533][   T37] audit: type=1800 audit(1778289994.377:70): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1399" name="SYSV00000000" dev="tmpfs" ino=23 res=0 errno=0
[  806.712725][  T827] bridge_slave_1: left allmulticast mode
[  806.712758][  T827] bridge_slave_1: left promiscuous mode
[  806.737529][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.946902][  T827] bridge_slave_0: left allmulticast mode
[  806.946933][  T827] bridge_slave_0: left promiscuous mode
[  806.947141][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.168724][   T37] audit: type=1800 audit(1778289995.917:71): pid=13043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1406" name="SYSV00000000" dev="tmpfs" ino=17 res=0 errno=0
[  809.399009][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  809.399072][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  810.778082][   T37] audit: type=1800 audit(1778289998.527:72): pid=13056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1410" name="SYSV00000000" dev="tmpfs" ino=18 res=0 errno=0
[  810.835670][  T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.877671][  T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.896907][  T827] bond0 (unregistering): Released all slaves
[  811.019335][T12794] team0: Port device team_slave_0 added
[  811.031995][T12794] team0: Port device team_slave_1 added
[  811.525624][  T827] hsr_slave_0: left promiscuous mode
[  811.565237][  T827] hsr_slave_1: left promiscuous mode
[  811.624539][  T827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.656126][  T827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.178361][T13096] overlayfs: failed to clone upperpath
[  814.696751][  T827] team0 (unregistering): Port device team_slave_1 removed
[  814.766000][  T827] team0 (unregistering): Port device team_slave_0 removed
[  815.100737][T12794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  815.100753][T12794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.100777][T12794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  815.157472][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  815.163300][T12794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  815.163309][T12794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.163323][T12794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  815.421501][T12794] hsr_slave_0: entered promiscuous mode
[  815.424311][T12794] hsr_slave_1: entered promiscuous mode
[  815.428927][T12794] debugfs: 'hsr0' already exists in 'hsr'
[  815.428971][T12794] Cannot create hsr debugfs directory
[  816.534357][T12473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  816.592386][   T37] audit: type=1800 audit(1778290004.337:73): pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1423" name="SYSV00000000" dev="tmpfs" ino=24 res=0 errno=0
[  818.134802][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[  818.143086][T12473] veth0_vlan: entered promiscuous mode
[  818.159503][T12473] veth1_vlan: entered promiscuous mode
[  819.325050][T12473] veth0_macvtap: entered promiscuous mode
[  819.613994][T12473] veth1_macvtap: entered promiscuous mode
[  821.800822][   T37] audit: type=1800 audit(1778290009.547:74): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1434" name="SYSV00000000" dev="tmpfs" ino=19 res=0 errno=0
[  821.951077][T12473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  822.936593][T12473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  823.243783][  T827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.247879][  T827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.247921][  T827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.247953][  T827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  825.340131][T13219] overlayfs: failed to resolve './file1/file0': -2
[  825.608674][T10446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  825.661751][T10446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  825.664085][T10446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  825.666759][T10446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  825.668252][T10446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  825.904427][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'.
[  827.278358][ T5867] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  827.617931][T12794] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  827.789784][ T5613] Bluetooth: hci2: command tx timeout
[  827.816725][T12794] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  827.820005][T12794] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  828.739275][T12794] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  828.744832][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  829.054809][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  829.181839][ T5867] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.497212][T12794] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  829.846696][ T5613] Bluetooth: hci2: command tx timeout
[  829.882960][T12794] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  829.888307][T12794] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  830.248342][T12794] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  831.417821][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009
[  831.998994][ T5613] Bluetooth: hci2: command tx timeout
[  834.240309][ T5867] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.697570][ T5613] Bluetooth: hci2: command tx timeout
[  835.009177][T13346] overlayfs: failed to clone upperpath
[  837.052173][ T5867] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.479402][T12794] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.542454][T12794] 8021q: adding VLAN 0 to HW filter on device team0
[  837.646098][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.647795][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.739081][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.739208][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state
[  839.157085][   T37] audit: type=1800 audit(1778290026.907:75): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1468" name="SYSV00000000" dev="tmpfs" ino=20 res=0 errno=0
[  839.636809][ T5867] bridge_slave_1: left allmulticast mode
[  839.636843][ T5867] bridge_slave_1: left promiscuous mode
[  839.637091][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.679042][ T5867] bridge_slave_0: left allmulticast mode
[  839.679063][ T5867] bridge_slave_0: left promiscuous mode
[  839.679230][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.776415][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1469'.
[  844.437438][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  844.528687][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  844.709574][ T5867] bond0 (unregistering): Released all slaves
[  845.529058][T13221] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.529178][T13221] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.529362][T13221] bridge_slave_0: entered allmulticast mode
[  845.531905][T13221] bridge_slave_0: entered promiscuous mode
[  845.563354][T13221] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.563469][T13221] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.563633][T13221] bridge_slave_1: entered allmulticast mode
[  845.588420][T13221] bridge_slave_1: entered promiscuous mode
[  845.604656][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  846.474792][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  846.490160][T13221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  846.805049][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  846.906844][T13221] team0: Port device team_slave_0 added
[  848.191268][ T5867] hsr_slave_0: left promiscuous mode
[  848.207821][ T5867] hsr_slave_1: left promiscuous mode
[  848.210450][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.210474][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.421799][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  848.421823][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  850.414575][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'.
[  850.424827][ T5867] veth1_macvtap: left promiscuous mode
[  850.424883][ T5867] veth0_macvtap: left promiscuous mode
[  850.425010][ T5867] veth1_vlan: left promiscuous mode
[  850.446786][ T5867] veth0_vlan: left promiscuous mode
[  851.243980][   T37] audit: type=1800 audit(1778290038.987:76): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1503" name="SYSV00000000" dev="tmpfs" ino=16 res=0 errno=0
[  851.836171][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  851.875881][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  852.051897][T13221] team0: Port device team_slave_1 added
[  852.192084][T13221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  852.192100][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.192125][T13221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  852.218752][T13221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  852.218768][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.218791][T13221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  852.484783][T13221] hsr_slave_0: entered promiscuous mode
[  852.488474][T13221] hsr_slave_1: entered promiscuous mode
[  852.490845][T13221] debugfs: 'hsr0' already exists in 'hsr'
[  852.490867][T13221] Cannot create hsr debugfs directory
[  852.935684][T13517] overlayfs: failed to clone upperpath
[  854.077144][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  854.140701][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  854.144228][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  854.159687][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  854.163466][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  855.581283][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  855.839299][T10446] Bluetooth: hci0: unexpected event for opcode 0x0000
[  856.093215][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  856.245266][T10446] Bluetooth: hci5: command tx timeout
[  856.513252][T13567] overlayfs: failed to clone upperpath
[  858.325260][T10446] Bluetooth: hci5: command tx timeout
[  858.606433][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  860.406552][T10446] Bluetooth: hci5: command tx timeout
[  861.291420][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  863.129355][T10446] Bluetooth: hci5: command tx timeout
[  863.262135][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[  863.569523][T13631] overlayfs: failed to clone upperpath
[  867.820766][T13654] overlayfs: failed to clone upperpath
[  868.159590][T13662] overlayfs: failed to clone upperpath
[  870.007692][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  870.007770][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  872.755289][T10446] Bluetooth: hci0: unexpected event for opcode 0x1009
[  874.333025][T13524] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.333092][T13524] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.333220][T13524] bridge_slave_0: entered allmulticast mode
[  874.334594][T13524] bridge_slave_0: entered promiscuous mode
[  874.376324][T13524] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.376523][T13524] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.376718][T13524] bridge_slave_1: entered allmulticast mode
[  874.473512][T13524] bridge_slave_1: entered promiscuous mode
[  876.221142][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.288458][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.385882][T13221] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  876.569006][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  877.402296][T13221] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  877.429486][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  877.447632][T13524] team0: Port device team_slave_0 added
[  877.448100][T13221] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  877.490200][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  877.503050][T13524] team0: Port device team_slave_1 added
[  877.681872][T13749] overlayfs: failed to clone upperpath
[  878.601560][T13221] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  880.075060][T13221] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  880.273421][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  880.273439][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.273463][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.323760][T13762] overlayfs: failed to clone upperpath
[  880.324653][T13758] overlayfs: failed to clone upperpath
[  880.436842][ T5867] bridge_slave_1: left allmulticast mode
[  880.436874][ T5867] bridge_slave_1: left promiscuous mode
[  880.437114][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.744488][ T5867] bridge_slave_0: left allmulticast mode
[  880.744521][ T5867] bridge_slave_0: left promiscuous mode
[  880.746056][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.611456][T13772] overlayfs: failed to clone upperpath
[  885.090602][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  885.177856][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  885.220026][ T5867] bond0 (unregistering): Released all slaves
[  885.256600][T13221] kthread_run failed with err -4
[  885.258089][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  885.258102][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  885.258127][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  885.526993][T13524] hsr_slave_0: entered promiscuous mode
[  885.529821][T13524] hsr_slave_1: entered promiscuous mode
[  885.530699][T13524] debugfs: 'hsr0' already exists in 'hsr'
[  885.530721][T13524] Cannot create hsr debugfs directory
[  885.715348][ T5867] hsr_slave_0: left promiscuous mode
[  885.756975][ T5867] hsr_slave_1: left promiscuous mode
[  885.757927][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  885.806001][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  886.713730][T13837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  886.714744][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  886.971976][T13837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  887.057927][T13837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  887.162289][T13837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  887.221502][T13837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  887.660456][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  890.138984][T10446] Bluetooth: hci1: command tx timeout
[  890.262590][   T37] audit: type=1800 audit(1778290078.007:77): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1579" name="SYSV00000000" dev="tmpfs" ino=18 res=0 errno=0
[  891.714392][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  892.916219][T10446] Bluetooth: hci1: command tx timeout
[  893.434431][T13887] overlayfs: failed to clone upperpath
[  893.556661][T13889] overlayfs: failed to clone upperpath
[  894.937467][T13837] Bluetooth: hci0: unexpected event for opcode 0x1009
[  894.965739][T13837] Bluetooth: hci1: command tx timeout
[  896.444234][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[  897.346611][T13837] Bluetooth: hci1: command tx timeout
[  899.058371][T13937] warning: `syz.2.1595' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  902.263885][T13968] overlayfs: failed to clone upperpath
[  907.055827][T14016] overlayfs: failed to clone upperpath
[  908.049737][T13833] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.049842][T13833] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.050005][T13833] bridge_slave_0: entered allmulticast mode
[  908.067811][T13833] bridge_slave_0: entered promiscuous mode
[  908.072172][T13833] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.072361][T13833] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.072528][T13833] bridge_slave_1: entered allmulticast mode
[  908.078195][T13833] bridge_slave_1: entered promiscuous mode
[  909.023405][T13833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.064996][T13833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  909.222608][T13833] team0: Port device team_slave_0 added
[  912.071928][T13833] team0: Port device team_slave_1 added
[  913.603819][T13524] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  913.692424][T13524] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  913.756525][T13833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.756536][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  913.756549][T13833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.757780][T13833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.757790][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  913.757803][T13833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.900483][T13833] hsr_slave_0: entered promiscuous mode
[  913.901685][T13833] hsr_slave_1: entered promiscuous mode
[  913.902511][T13833] debugfs: 'hsr0' already exists in 'hsr'
[  913.902533][T13833] Cannot create hsr debugfs directory
[  914.585456][ T5867] bridge_slave_1: left allmulticast mode
[  914.585480][ T5867] bridge_slave_1: left promiscuous mode
[  914.589681][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.666894][ T5867] bridge_slave_0: left allmulticast mode
[  914.666917][ T5867] bridge_slave_0: left promiscuous mode
[  914.667066][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.896461][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  914.978491][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  915.126435][T10446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  915.165201][T10446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  915.167323][T10446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  915.169396][T10446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  915.170359][T10446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  915.533201][ T5867] bond0 (unregistering): Released all slaves
[  917.776243][T13837] Bluetooth: hci2: command tx timeout
[  918.328220][ T5867] hsr_slave_0: left promiscuous mode
[  918.375411][ T5867] hsr_slave_1: left promiscuous mode
[  918.376316][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  918.430570][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  919.074478][T13837] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  919.259871][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  919.316974][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  919.595810][T14117] dvmrp0: entered allmulticast mode
[  919.605329][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  919.751110][T14159] netlink: 'syz.2.1652': attribute type 10 has an invalid length.
[  919.803379][T14162] netlink: 'syz.2.1652': attribute type 10 has an invalid length.
[  919.855306][T13837] Bluetooth: hci2: command tx timeout
[  919.888564][T14162] syz_tun: entered promiscuous mode
[  920.253983][T14172] fuse: Bad value for 'fd'
[  920.972414][T14189] netlink: 'syz.0.1661': attribute type 4 has an invalid length.
[  921.659485][T14191] lo speed is unknown, defaulting to 1000
[  921.775513][T14191] lo speed is unknown, defaulting to 1000
[  921.877666][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1663'.
[  921.932316][T13837] Bluetooth: hci2: command tx timeout
[  922.235221][T14191] lo speed is unknown, defaulting to 1000
[  922.317153][T14191] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  922.317188][T14191] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  922.317224][T14191] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  922.436227][T14191] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  922.561553][T14191] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  922.738133][T14191] lo speed is unknown, defaulting to 1000
[  922.891069][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.912891][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.924845][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  923.020379][T14232] netlink: 'syz.4.1669': attribute type 10 has an invalid length.
[  923.115610][T14191] lo speed is unknown, defaulting to 1000
[  923.190150][T14231] bridge0: port 3(syz_tun) entered blocking state
[  923.190906][T14231] bridge0: port 3(syz_tun) entered disabled state
[  923.200927][T14231] syz_tun: entered promiscuous mode
[  923.213085][T14231] bridge0: port 3(syz_tun) entered blocking state
[  923.213291][T14231] bridge0: port 3(syz_tun) entered forwarding state
[  923.223829][T14232] bridge0: port 3(syz_tun) entered disabled state
[  923.302903][T14191] lo speed is unknown, defaulting to 1000
[  923.409703][T14191] lo speed is unknown, defaulting to 1000
[  923.592803][T14191] lo speed is unknown, defaulting to 1000
[  923.632448][T14191] lo speed is unknown, defaulting to 1000
[  923.898854][T13833] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  923.929362][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'.
[  923.956091][T13833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  924.006566][T13837] Bluetooth: hci2: command tx timeout
[  924.383837][T14250] macvlan2: entered allmulticast mode
[  924.383866][T14250] hsr0: entered allmulticast mode
[  924.383878][T14250] hsr_slave_0: entered allmulticast mode
[  924.383901][T14250] hsr_slave_1: entered allmulticast mode
[  924.404715][T14250] hsr0: entered promiscuous mode
[  924.423675][T13833] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  924.454882][T13833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  924.543734][T13833] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  924.594792][T14259] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1679'.
[  924.605917][T13833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  924.606794][T14259] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  924.678291][T14265] netlink: 'syz.4.1681': attribute type 1 has an invalid length.
[  924.730840][T13833] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  924.760232][T13833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  924.996759][T14268] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  924.996991][T14079] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.997285][T14079] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.997437][T14079] bridge_slave_0: entered allmulticast mode
[  925.002658][T14079] bridge_slave_0: entered promiscuous mode
[  925.177237][T14270] veth3: entered promiscuous mode
[  925.179881][T14270] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  925.208191][T14079] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.208303][T14079] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.210029][T14079] bridge_slave_1: entered allmulticast mode
[  925.212223][T14079] bridge_slave_1: entered promiscuous mode
[  925.948501][T14079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  926.013744][T14079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  926.226454][T14079] team0: Port device team_slave_0 added
[  926.238982][T14079] team0: Port device team_slave_1 added
[  926.247840][T14308] tipc: Failed to remove unknown binding: 66,0,0/0:229450009/229450010
[  926.251971][T14308] tipc: Failed to remove unknown binding: 66,0,0/0:229450009/229450010
[  926.443818][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'.
[  926.648604][T14079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.648620][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.648645][T14079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.856053][T14079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.856070][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.856094][T14079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  927.323194][T14079] hsr_slave_0: entered promiscuous mode
[  927.324399][T14079] hsr_slave_1: entered promiscuous mode
[  927.329009][T14079] debugfs: 'hsr0' already exists in 'hsr'
[  927.329032][T14079] Cannot create hsr debugfs directory
[  927.388864][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'.
[  927.555450][ T5867] bridge_slave_1: left allmulticast mode
[  927.555484][ T5867] bridge_slave_1: left promiscuous mode
[  927.555720][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.592114][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'.
[  927.650493][ T5867] bridge_slave_0: left allmulticast mode
[  927.652704][ T5867] bridge_slave_0: left promiscuous mode
[  927.652944][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  927.956142][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  928.037134][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  928.096633][ T5867] bond0 (unregistering): Released all slaves
[  928.292522][T14352] 8021q: adding VLAN 0 to HW filter on device bond1
[  928.365395][T14353] bond1: entered promiscuous mode
[  928.365422][T14353] bond1: entered allmulticast mode
[  928.402779][T14353] 8021q: adding VLAN 0 to HW filter on device bond1
[  928.405629][T14353] team0: Port device bond1 added
[  928.406009][T14356] gre0: entered promiscuous mode
[  928.434010][T14356] bond1: (slave gre0): refused to change device type
[  928.488290][T14362] netlink: 'syz.2.1717': attribute type 12 has an invalid length.
[  928.488309][T14362] netlink: 'syz.2.1717': attribute type 4 has an invalid length.
[  928.488321][T14362] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1717'.
[  928.605074][T14366] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  928.634866][T14366] batman_adv: batadv0: Removing interface: batadv_slave_0
[  928.651684][T14366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  928.651707][T14366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  928.963082][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'.
[  928.967171][ T5867] hsr_slave_0: left promiscuous mode
[  929.005285][ T5867] hsr_slave_1: left promiscuous mode
[  929.006369][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  929.056256][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  929.436846][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  929.465772][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  929.633209][T14358] lo speed is unknown, defaulting to 1000
[  929.777634][T14383] netlink: 'syz.0.1727': attribute type 11 has an invalid length.
[  929.848715][T14386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.906261][T14381] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  930.404848][T10775] lo speed is unknown, defaulting to 1000
[  930.405022][T10775] syz2: Port: 1 Link ACTIVE
[  930.873741][T14406] syz.2.1733 uses obsolete (PF_INET,SOCK_PACKET)
[  931.447207][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  931.447263][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  931.672125][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  931.774842][T13833] 8021q: adding VLAN 0 to HW filter on device bond0
[  932.254574][T13833] 8021q: adding VLAN 0 to HW filter on device team0
[  932.274476][  T827] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.274653][  T827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  932.304755][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.304878][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  932.650549][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'.
[  933.060181][T14471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1747'.
[  934.356761][T13833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  934.385495][T14512] netlink: 'syz.4.1756': attribute type 4 has an invalid length.
[  934.766217][T14079] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  934.802979][T14079] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  934.814433][T14079] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  934.858167][T14079] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  934.870759][T14079] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  934.964097][T14079] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  935.005527][T14079] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  935.070158][T14079] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  935.490925][T13833] veth0_vlan: entered promiscuous mode
[  935.582817][T13833] veth1_vlan: entered promiscuous mode
[  935.704459][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'.
[  935.760614][T14079] 8021q: adding VLAN 0 to HW filter on device bond0
[  935.892491][T13833] veth0_macvtap: entered promiscuous mode
[  935.903212][T14079] 8021q: adding VLAN 0 to HW filter on device team0
[  935.934320][T13833] veth1_macvtap: entered promiscuous mode
[  935.984121][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state
[  935.986934][ T7241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  936.068451][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state
[  936.068576][ T7241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  936.174142][T13833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  936.222817][T13833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  936.268932][T14578] netlink: 'syz.2.1767': attribute type 3 has an invalid length.
[  936.268951][T14578] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1767'.
[  936.329224][ T7241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  936.330916][ T7241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  936.331685][ T7241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  936.361331][ T7241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  937.373043][ T7241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.373061][ T7241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.790257][ T7241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.790277][ T7241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.225352][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  939.930529][T14079] 8021q: adding VLAN 0 to HW filter on device batadv0
[  939.953749][T14567] NFSD: Failed to start, no listeners configured.
[  940.624514][T14612] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.637936][T14612] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.946405][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'.
[  941.628123][T14612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  941.779762][T14628] 8021q: adding VLAN 0 to HW filter on device bond2
[  941.820940][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'.
[  942.039643][T14629] bond2: entered promiscuous mode
[  942.039669][T14629] bond2: entered allmulticast mode
[  942.101392][T14642] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1780'.
[  942.323392][T14634] 8021q: adding VLAN 0 to HW filter on device bond2
[  942.564316][T14640] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  942.686226][T14642] bond2: (slave dummy0): Releasing backup interface
[  942.799634][T14644] bridge0: port 3(syz_tun) entered blocking state
[  942.799771][T14644] bridge0: port 3(syz_tun) entered disabled state
[  943.148079][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'.
[  943.227711][T14667] veth5: entered promiscuous mode
[  943.313383][T14670] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.395264][T14672] bond0: entered promiscuous mode
[  943.395289][T14672] bond0: entered allmulticast mode
[  943.491181][T14079] veth0_vlan: entered promiscuous mode
[  943.508467][T14079] veth1_vlan: entered promiscuous mode
[  943.583252][T14079] veth0_macvtap: entered promiscuous mode
[  943.608632][T14079] veth1_macvtap: entered promiscuous mode
[  943.634930][T14079] batman_adv: batadv0: Interface activated: batadv_slave_0
[  943.651820][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'.
[  943.666108][T14079] batman_adv: batadv0: Interface activated: batadv_slave_1
[  943.699855][  T993] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  943.700998][  T993] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  943.702607][  T993] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  943.703549][  T993] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  943.970559][T14690] bridge0: port 3(syz_tun) entered blocking state
[  943.970664][T14690] bridge0: port 3(syz_tun) entered disabled state
[  944.083435][T14690] bridge0: port 3(syz_tun) entered blocking state
[  944.083565][T14690] bridge0: port 3(syz_tun) entered forwarding state
[  944.639749][T14697] veth3: entered promiscuous mode
[  944.999884][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'.
[  945.045015][T14715] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  945.051684][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.051702][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.499711][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.499731][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.526841][    C1] Illegal XDP return value 16128 on prog  (id 157) dev bond0, expect packet loss!
[  946.102844][T14746] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  946.103040][T14746] batadv_slave_0: entered promiscuous mode
[  946.313210][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'.
[  947.377691][T14770] netlink: 'syz.0.1825': attribute type 10 has an invalid length.
[  947.397167][T14771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.652482][T10446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  947.689166][T10446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  947.694366][T10446] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  947.736009][T10446] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  947.736721][T10446] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  948.141085][T14760] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  948.428083][T14770] syz_tun: entered promiscuous mode
[  949.622309][ T5594] syz_tun (unregistering): left allmulticast mode
[  949.622423][ T5594] bridge0: port 3(syz_tun) entered disabled state
[  950.016258][T10446] Bluetooth: hci5: command tx timeout
[  950.450261][T14821] netlink: 'syz.4.1841': attribute type 10 has an invalid length.
[  950.513882][T14827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.623931][ T7242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.674758][T14821] bridge0: port 3(syz_tun) entered disabled state
[  950.778295][T14825] 8021q: adding VLAN 0 to HW filter on device bond3
[  951.170809][ T7242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.244840][T14852] netlink: 'syz.0.1854': attribute type 4 has an invalid length.
[  951.244871][T14852] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1854'.
[  951.337140][T14774] lo speed is unknown, defaulting to 1000
[  951.477615][T14861] netlink: 'syz.4.1856': attribute type 10 has an invalid length.
[  951.512350][T14856] 8021q: adding VLAN 0 to HW filter on device bond1
[  952.090792][T10446] Bluetooth: hci5: command tx timeout
[  953.003295][T14882] siw: device registration error -23
[  953.129283][ T7242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  953.430986][T14902] netlink: 'syz.0.1871': attribute type 10 has an invalid length.
[  954.017562][ T7242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.167767][T10446] Bluetooth: hci5: command tx timeout
[  954.804811][T14939] 9p: Bad value for 'wfdno'
[  955.681044][T14966] netlink: 'syz.4.1899': attribute type 1 has an invalid length.
[  955.810028][T14774] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.810219][T14774] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.810406][T14774] bridge_slave_0: entered allmulticast mode
[  955.837802][T14774] bridge_slave_0: entered promiscuous mode
[  956.100746][T14973] veth7: entered promiscuous mode
[  956.112491][T14774] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.112606][T14774] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.112867][T14774] bridge_slave_1: entered allmulticast mode
[  956.145643][T14774] bridge_slave_1: entered promiscuous mode
[  956.245268][T10446] Bluetooth: hci5: command tx timeout
[  956.500164][T14774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  956.511943][T14774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.063174][ T7242] bridge_slave_1: left allmulticast mode
[  957.063483][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.153886][ T7242] bridge_slave_0: left allmulticast mode
[  957.153933][ T7242] bridge_slave_0: left promiscuous mode
[  957.154182][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.271824][ T7242] dvmrp0: left allmulticast mode
[  957.766969][  T827] wlan1: Trigger new scan to find an IBSS to join
[  958.943579][ T7242] bond0 (unregistering): Released all slaves
[  959.060390][T14774] team0: Port device team_slave_0 added
[  959.076890][T14774] team0: Port device team_slave_1 added
[  959.225542][T15014] netlink: 'syz.5.1913': attribute type 1 has an invalid length.
[  959.335942][T15011] bond1: (slave gtp0): refused to change device type
[  959.530408][T15016] hsr0: entered allmulticast mode
[  959.530439][T15016] hsr_slave_0: entered allmulticast mode
[  959.530463][T15016] hsr_slave_1: entered allmulticast mode
[  959.699375][T14774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  959.699393][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.699417][T14774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.856688][T15018] veth3: entered promiscuous mode
[  960.040574][T14774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.040590][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  960.040614][T14774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  960.048109][T15026] bridge0: port 3(syz_tun) entered blocking state
[  960.048293][T15026] bridge0: port 3(syz_tun) entered disabled state
[  960.084954][T15039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.104328][T15026] bridge0: port 3(syz_tun) entered blocking state
[  960.104434][T15026] bridge0: port 3(syz_tun) entered forwarding state
[  960.228403][T15044] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1925'.
[  960.228534][T15044] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  960.378732][T15037] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  960.811944][ T7241] wlan1: Trigger new scan to find an IBSS to join
[  962.140163][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1938'.
[  962.447432][ T7241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.592077][T15098] netlink: 'syz.6.1943': attribute type 3 has an invalid length.
[  962.592098][T15098] netlink: 766 bytes leftover after parsing attributes in process `syz.6.1943'.
[  962.634103][T14774] hsr_slave_0: entered promiscuous mode
[  962.641944][T14774] hsr_slave_1: entered promiscuous mode
[  962.644410][T14774] debugfs: 'hsr0' already exists in 'hsr'
[  962.644432][T14774] Cannot create hsr debugfs directory
[  962.679774][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[  964.212527][T15105] bridge0: port 3(syz_tun) entered disabled state
[  964.256933][T15105] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.257567][T15105] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.377438][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  965.413595][T15128] netlink: 'syz.6.1953': attribute type 3 has an invalid length.
[  965.413618][T15128] netlink: 766 bytes leftover after parsing attributes in process `syz.6.1953'.
[  965.419408][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  965.657068][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1955'.
[  966.720222][T15111] bond3: (slave gtp0): refused to change device type
[  967.831755][T15146] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1958'.
[  967.831887][T15146] netlink: Unknown conntrack attr (0)
[  968.298338][  T162] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.402708][  T162] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.422387][T15172] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.1968'.
[  969.422523][T15172] netlink: Unknown conntrack attr (0)
[  969.541842][  T162] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.623146][  T162] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.641223][T15180] netlink: 'syz.0.1974': attribute type 4 has an invalid length.
[  969.641243][T15180] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1974'.
[  969.788301][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1977'.
[  969.945324][T10775] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  970.054371][T15188] fuse: fd is not a fuse device
[  970.900859][ T7242] hsr_slave_0: left promiscuous mode
[  970.935309][ T7242] hsr_slave_1: left promiscuous mode
[  970.947022][T15192] netlink: 'syz.0.1979': attribute type 3 has an invalid length.
[  970.947039][T15192] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1979'.
[  970.977955][T10775] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  970.977979][T10775] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  970.983895][T10775] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  970.983921][T10775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.983940][T10775] usb 6-1: Product: syz
[  970.983953][T10775] usb 6-1: Manufacturer: syz
[  970.983966][T10775] usb 6-1: SerialNumber: syz
[  971.044212][T10775] usb 6-1: config 0 descriptor??
[  971.062949][T10775] gspca_main: sunplus-2.14.0 probing 055f:c630
[  971.074585][ T7242] veth1_macvtap: left promiscuous mode
[  971.074841][ T7242] veth0_macvtap: left promiscuous mode
[  971.083838][ T7242] veth1_vlan: left promiscuous mode
[  971.084633][ T7242] veth0_vlan: left promiscuous mode
[  971.653816][T10775] gspca_sunplus: reg_r err -71
[  971.654066][T10775] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  971.675285][T10775] usb 6-1: USB disconnect, device number 2
[  971.923609][ T7242] team0 (unregistering): Port device team_slave_1 removed
[  971.975824][ T7242] team0 (unregistering): Port device team_slave_0 removed
[  972.368221][T15204] netlink: 'syz.4.1984': attribute type 11 has an invalid length.
[  972.372948][T15203] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.1983'.
[  972.373081][T15203] netlink: Unknown conntrack attr (0)
[  973.019313][T15218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1987'.
[  973.379169][T15243] bridge0: port 3(syz_tun) entered blocking state
[  973.379269][T15243] bridge0: port 3(syz_tun) entered disabled state
[  973.402114][T15243] bridge0: port 3(syz_tun) entered blocking state
[  973.402319][T15243] bridge0: port 3(syz_tun) entered forwarding state
[  973.415618][T15241] netlink: 'syz.0.1991': attribute type 10 has an invalid length.
[  973.423577][T15241] bridge0: port 3(syz_tun) entered disabled state
[  973.438830][T15245] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1992'.
[  973.542133][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[  973.918294][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1996'.
[  974.151588][T15264] netlink: 'syz.5.1998': attribute type 11 has an invalid length.
[  974.433993][T15267] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1999'.
[  974.472341][ T7242] IPVS: stop unused estimator thread 0...
[  974.668160][T15278] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2002'.
[  974.878003][T15292] netlink: 'syz.4.2004': attribute type 10 has an invalid length.
[  974.972340][T15292] bridge0: port 3(syz_tun) entered disabled state
[  975.096061][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2007'.
[  975.181908][T15298] 8021q: adding VLAN 0 to HW filter on device bond1
[  975.184471][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2009'.
[  976.312236][T15310] netlink: 'syz.4.2012': attribute type 11 has an invalid length.
[  976.437211][T15300] bond1: entered promiscuous mode
[  976.437247][T15300] bond1: entered allmulticast mode
[  976.440359][T15298] gre0: entered promiscuous mode
[  976.453886][T15298] bond1: (slave gre0): The slave device specified does not support setting the MAC address
[  976.454850][T15298] bond1: (slave gre0): Error -95 calling set_mac_address
[  976.456821][T15306] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2011'.
[  976.608576][T15313] netlink: 'syz.0.2014': attribute type 3 has an invalid length.
[  976.608596][T15313] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2014'.
[  976.680000][T15319] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2016'.
[  976.680146][T15319] netlink: Unknown conntrack attr (0)
[  977.965006][T15333] bridge0: port 3(syz_tun) entered blocking state
[  977.973341][T15333] bridge0: port 3(syz_tun) entered disabled state
[  978.001814][T15331] netlink: 'syz.4.2019': attribute type 10 has an invalid length.
[  978.002148][T15331] bridge0: port 3(syz_tun) entered disabled state
[  978.127185][T15339] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2022'.
[  978.242303][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2024'.
[  978.443741][T15354] netlink: 'syz.4.2025': attribute type 11 has an invalid length.
[  978.457875][T15345] 8021q: adding VLAN 0 to HW filter on device bond2
[  978.615320][T15349] bond2: entered promiscuous mode
[  978.615348][T15349] bond2: entered allmulticast mode
[  978.618205][T15351] bond2: (slave gre0): The slave device specified does not support setting the MAC address
[  978.619830][T15351] bond2: (slave gre0): Error -95 calling set_mac_address
[  979.063185][T15363] input: syz1 as /devices/virtual/input/input7
[  979.849915][T15377] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2030'.
[  980.736037][T15378] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2032'.
[  980.880562][T15388] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2034'.
[  980.880815][T15388] netlink: Unknown conntrack attr (0)
[  980.986347][T15395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'.
[  981.203795][T15395] 8021q: adding VLAN 0 to HW filter on device bond4
[  981.429921][T10446] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  981.429962][T10446] CPU: 1 UID: 0 PID: 10446 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  981.429985][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  981.429998][T10446] Workqueue: hci2 hci_rx_work
[  981.430176][T10446] Call Trace:
[  981.430184][T10446]  <TASK>
[  981.430193][T10446]  dump_stack_lvl+0xe8/0x150
[  981.430254][T10446]  sysfs_create_dir_ns+0x271/0x2a0
[  981.430351][T10446]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  981.430429][T10446]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  981.430461][T10446]  ? rt_spin_unlock+0x160/0x200
[  981.430498][T10446]  kobject_add_internal+0x631/0xd10
[  981.430578][T10446]  kobject_add+0x163/0x240
[  981.430619][T10446]  ? __pfx_kobject_add+0x10/0x10
[  981.430647][T10446]  ? get_device_parent+0x370/0x3a0
[  981.430734][T10446]  device_add+0x408/0xbb0
[  981.430758][T10446]  hci_conn_add_sysfs+0xd5/0x210
[  981.430820][T10446]  le_conn_complete_evt+0x10e6/0x16b0
[  981.430901][T10446]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  981.430928][T10446]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  981.430952][T10446]  ? lockdep_hardirqs_on+0x7a/0x110
[  981.431028][T10446]  ? skb_pull_data+0xfb/0x200
[  981.431134][T10446]  hci_le_conn_complete_evt+0x187/0x470
[  981.431165][T10446]  hci_event_packet+0x659/0xef0
[  981.431193][T10446]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  981.431211][T10446]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  981.431235][T10446]  ? __pfx_hci_event_packet+0x10/0x10
[  981.431257][T10446]  ? rt_spin_unlock+0x14f/0x200
[  981.431283][T10446]  ? hci_send_to_monitor+0xe2/0x590
[  981.431351][T10446]  hci_rx_work+0x3ee/0x1040
[  981.431381][T10446]  ? process_scheduled_works+0xa70/0x1860
[  981.431429][T10446]  process_scheduled_works+0xb5d/0x1860
[  981.431473][T10446]  ? __pfx_process_scheduled_works+0x10/0x10
[  981.431499][T10446]  ? assign_work+0x3d5/0x5e0
[  981.431524][T10446]  worker_thread+0xa53/0xfc0
[  981.431568][T10446]  kthread+0x388/0x470
[  981.431592][T10446]  ? __pfx_worker_thread+0x10/0x10
[  981.431617][T10446]  ? __pfx_kthread+0x10/0x10
[  981.431641][T10446]  ret_from_fork+0x514/0xb70
[  981.431681][T10446]  ? __pfx_ret_from_fork+0x10/0x10
[  981.431702][T10446]  ? __switch_to+0xc79/0x1410
[  981.431729][T10446]  ? __pfx_kthread+0x10/0x10
[  981.431750][T10446]  ret_from_fork_asm+0x1a/0x30
[  981.431784][T10446]  </TASK>
[  981.431881][T10446] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  981.431917][T10446] Bluetooth: hci2: failed to register connection device
[  981.520394][T15398] 8021q: adding VLAN 0 to HW filter on device bond4
[  981.520788][T15398] bond4: (slave gre0): The slave device specified does not support setting the MAC address
[  981.540334][T15398] bond4: (slave gre0): Error -95 calling set_mac_address
[  981.765553][T15419] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2045'.
[  982.134286][T15429] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2047'.
[  982.134366][T15429] netlink: Unknown conntrack attr (0)
[  982.363971][T14774] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  982.433282][T14774] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  982.442916][T14774] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  982.467739][T14774] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  982.480657][T14774] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  983.057476][T14774] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  983.060431][T15453] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2055'.
[  983.063236][T14774] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  983.194898][T14774] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  983.540061][T14774] 8021q: adding VLAN 0 to HW filter on device bond0
[  983.582921][T14774] 8021q: adding VLAN 0 to HW filter on device team0
[  983.611020][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.611146][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  983.666711][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.666839][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  983.902409][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'.
[  984.034398][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'.
[  984.047524][T15490] bridge3: entered promiscuous mode
[  984.047559][T15490] bridge3: entered allmulticast mode
[  984.268621][T15507] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2070'.
[  984.324230][T15498] 8021q: adding VLAN 0 to HW filter on device bond4
[  984.971538][T15538] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2080'.
[  984.971668][T15538] netlink: Unknown conntrack attr (0)
[  985.179374][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2083'.
[  985.179403][T15546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2083'.
[  985.331768][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'.
[  985.432136][T15550] 8021q: adding VLAN 0 to HW filter on device bond3
[  985.464915][T14774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  985.733182][T14774] veth0_vlan: entered promiscuous mode
[  985.752493][T14774] veth1_vlan: entered promiscuous mode
[  985.801959][T14774] veth0_macvtap: entered promiscuous mode
[  985.812442][T14774] veth1_macvtap: entered promiscuous mode
[  985.830830][T14774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  985.849070][T14774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  985.864279][ T7241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  985.864503][ T7241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  985.870951][ T7241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  985.884083][ T7241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  987.002672][ T7242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  987.002692][ T7242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  987.024249][T15584] __nla_validate_parse: 1 callbacks suppressed
[  987.024264][T15584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2095'.
[  987.024299][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2095'.
[  987.620304][T13837] Bluetooth: hci2: command 0x0406 tx timeout
[  988.038414][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2096'.
[  988.174454][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'.
[  988.209493][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  988.209510][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  988.306536][T15594] 8021q: adding VLAN 0 to HW filter on device bond5
[  988.411345][T15604] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2104'.
[  988.597121][T15611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2106'.
[  988.597149][T15611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2106'.
[  988.604499][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'.
[  988.845638][ T6662] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  988.854342][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2110'.
[  988.892968][T13837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  988.972381][T13837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  988.983402][T13837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  988.988342][T13837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  989.002636][T13837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  989.020285][ T6662] usb 7-1: Using ep0 maxpacket: 32
[  989.027310][ T6662] usb 7-1: config 4 has an invalid interface number: 128 but max is 0
[  989.027333][ T6662] usb 7-1: config 4 has no interface number 0
[  989.027372][ T6662] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  989.027394][ T6662] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  989.027429][ T6662] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  989.027449][ T6662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.147257][ T6662] hub 7-1:4.128: USB hub found
[  989.183625][T15626] netlink: 'syz.4.2112': attribute type 11 has an invalid length.
[  989.441249][ T6662] hub 7-1:4.128: 6 ports detected
[  989.441313][ T6662] hub 7-1:4.128: Using single TT (err -22)
[  989.464268][ T6662] hub 7-1:4.128: insufficient power available to use all downstream ports
[  989.655324][ T6662] hub 7-1:4.128: hub_hub_status failed (err = -71)
[  989.655349][ T6662] hub 7-1:4.128: config failed, can't get hub status (err -71)
[  989.763455][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'.
[  989.822512][ T6662] usb 7-1: USB disconnect, device number 2
[  989.899037][T15634] 8021q: adding VLAN 0 to HW filter on device bond6
[  990.096450][ T5596] syz_tun (unregistering): left allmulticast mode
[  991.001325][  T993] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  991.009952][  T993] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  991.009999][  T993] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  991.010032][  T993] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  991.045263][T10446] Bluetooth: hci4: command tx timeout
[  991.102276][T15617] lo speed is unknown, defaulting to 1000
[  992.279228][T15617] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.279517][T15617] bridge0: port 1(bridge_slave_0) entered disabled state
[  992.280003][T15617] bridge_slave_0: entered allmulticast mode
[  992.287467][T15617] bridge_slave_0: entered promiscuous mode
[  992.292251][T15617] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.292522][T15617] bridge0: port 2(bridge_slave_1) entered disabled state
[  992.292675][T15617] bridge_slave_1: entered allmulticast mode
[  992.295862][T15617] bridge_slave_1: entered promiscuous mode
[  992.354131][T15617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  992.378958][T15617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  992.522245][T15617] team0: Port device team_slave_0 added
[  992.532429][T15617] team0: Port device team_slave_1 added
[  992.623700][T15707] netlink: 'syz.4.2141': attribute type 3 has an invalid length.
[  992.623719][T15707] __nla_validate_parse: 12 callbacks suppressed
[  992.623729][T15707] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2141'.
[  992.631286][T15617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  992.631298][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  992.631322][T15617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  992.651639][T15617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  992.651653][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  992.651676][T15617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.972336][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  992.972401][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  993.063659][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2143'.
[  993.063687][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2143'.
[  993.161170][T10446] Bluetooth: hci4: command tx timeout
[  993.387917][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2148'.
[  993.431450][T15617] hsr_slave_0: entered promiscuous mode
[  993.432345][T15617] hsr_slave_1: entered promiscuous mode
[  993.464124][T15723] gre0: entered promiscuous mode
[  993.545030][T15730] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2150'.
[  993.554876][T15730] netlink: Unknown conntrack attr (0)
[  993.624212][T15732] netlink: 'syz.4.2151': attribute type 3 has an invalid length.
[  993.624231][T15732] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2151'.
[  993.771172][T15739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2154'.
[  993.973160][T15727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  993.997517][T15727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.205873][T10446] Bluetooth: hci4: command tx timeout
[  995.499983][T15727] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  995.753066][ T1564] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.814987][ T1564] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.852662][ T1564] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.852708][ T1564] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  995.897446][T15762] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2162'.
[  995.897580][T15762] netlink: Unknown conntrack attr (0)
[  996.000397][T15767] netlink: 'syz.2.2163': attribute type 3 has an invalid length.
[  996.000418][T15767] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2163'.
[  997.285280][T10446] Bluetooth: hci4: command tx timeout
[  997.929340][T15786] veth3: entered promiscuous mode
[  998.059976][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2173'.
[  998.059997][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2173'.
[  998.147995][T15796] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2174'.
[  998.148108][T15796] netlink: Unknown conntrack attr (0)
[  998.205860][T15798] netlink: 'syz.2.2175': attribute type 3 has an invalid length.
[  998.205877][T15798] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2175'.
[  998.534143][T15617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.615526][T15818] netlink: 'syz.4.2184': attribute type 1 has an invalid length.
[  998.687180][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2173'.
[  998.687201][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2173'.
[  998.687375][ T7241] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  998.690029][ T7241] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  998.690070][ T7241] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  998.690102][ T7241] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  998.896857][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2185'.
[  999.021289][T15818] veth9: entered promiscuous mode
[  999.143005][T15827] netlink: 'syz.6.2187': attribute type 3 has an invalid length.
[  999.143025][T15827] netlink: 766 bytes leftover after parsing attributes in process `syz.6.2187'.
[  999.468351][T15617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.639388][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'.
[  999.735323][ T5597] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  999.821234][T15617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.835242][ T5610] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  999.901604][ T5597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  999.901671][ T5597] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  999.901693][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  999.914540][ T5597] usb 3-1: config 0 descriptor??
[  999.973866][T15854] netlink: 'syz.5.2199': attribute type 3 has an invalid length.
[  999.973886][T15854] netlink: 766 bytes leftover after parsing attributes in process `syz.5.2199'.
[ 1000.001584][ T5597] pwc: Askey VC010 type 2 USB webcam detected.
[ 1000.005862][ T5610] usb 7-1: Using ep0 maxpacket: 32
[ 1000.008623][ T5610] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[ 1000.011795][ T5610] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1000.011819][ T5610] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1000.011841][ T5610] usb 7-1: Product: syz
[ 1000.011902][ T5610] usb 7-1: Manufacturer: syz
[ 1000.011915][ T5610] usb 7-1: SerialNumber: syz
[ 1000.112016][ T5610] usb 7-1: config 0 descriptor??
[ 1000.344820][ T5597] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1000.423608][ T5597] pwc: recv_control_msg error -32 req 02 val 2700
[ 1000.468614][ T5597] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1001.276670][ T5597] pwc: recv_control_msg error -32 req 04 val 1000
[ 1001.280637][ T5597] pwc: recv_control_msg error -32 req 04 val 1300
[ 1001.283655][ T5597] pwc: recv_control_msg error -32 req 04 val 1400
[ 1001.338554][ T5597] pwc: recv_control_msg error -32 req 02 val 2000
[ 1001.344709][ T5597] pwc: recv_control_msg error -32 req 02 val 2100
[ 1001.350792][ T5597] pwc: recv_control_msg error -32 req 04 val 1500
[ 1001.359822][ T5597] pwc: recv_control_msg error -32 req 02 val 2500
[ 1001.367925][ T5610] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1001.419882][ T5597] pwc: recv_control_msg error -32 req 02 val 2400
[ 1001.420445][ T5597] pwc: recv_control_msg error -32 req 02 val 2600
[ 1001.514110][ T6822] usb 7-1: Failed to submit usb control message: -71
[ 1001.514146][ T6822] usb 7-1: unable to send the bmi data to the device: -71
[ 1001.514162][ T6822] usb 7-1: unable to get target info from device
[ 1001.514189][ T6822] usb 7-1: could not get target info (-71)
[ 1001.514563][ T6822] usb 7-1: could not probe fw (-71)
[ 1001.571497][T15617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.676767][ T5597] pwc: recv_control_msg error -71 req 02 val 2800
[ 1001.678264][ T5597] pwc: recv_control_msg error -71 req 04 val 1100
[ 1001.678794][ T5597] pwc: recv_control_msg error -71 req 04 val 1200
[ 1001.712204][ T5610] usb 7-1: USB disconnect, device number 3
[ 1002.018786][ T5597] pwc: Registered as video103.
[ 1002.034585][ T5597] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[ 1002.203592][T15885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.291905][ T5597] usb 3-1: USB disconnect, device number 12
[ 1003.178118][T15901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.250183][T15905] netlink: 'syz.4.2218': attribute type 3 has an invalid length.
[ 1003.250204][T15905] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2218'.
[ 1003.515175][T15900] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[ 1003.637493][T15617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1003.681322][T15617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1003.682671][T15617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1003.734329][T15617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1003.738630][T15617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1003.958302][T15617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1003.959929][T15617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1004.653196][T15617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1005.074990][T15617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1005.127998][T15617] 8021q: adding VLAN 0 to HW filter on device team0
[ 1005.145911][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.146141][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1005.175814][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.177331][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1005.305320][ T5610] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[ 1005.364481][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'.
[ 1005.456768][ T5610] usb 7-1: not running at top speed; connect to a high speed hub
[ 1005.458263][ T5610] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 1005.461571][ T5610] usb 7-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40
[ 1005.461596][ T5610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.461613][ T5610] usb 7-1: Product: syz
[ 1005.461626][ T5610] usb 7-1: Manufacturer: syz
[ 1005.461639][ T5610] usb 7-1: SerialNumber: syz
[ 1005.484612][T15959] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[ 1005.491843][T15959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.809826][ T5610] usb 7-1: Audio class v2/v3 interfaces need an interface association
[ 1005.967366][T15617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1006.183952][T15617] veth0_vlan: entered promiscuous mode
[ 1006.270332][T15617] veth1_vlan: entered promiscuous mode
[ 1006.345974][ T5610] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1006.380335][ T5610] usb 7-1: USB disconnect, device number 4
[ 1006.426102][T14964] udevd[14964]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=0 failed: No such file or directory
[ 1006.512855][T14964] udevd[14964]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1006.571148][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'.
[ 1006.595490][T15617] veth0_macvtap: entered promiscuous mode
[ 1006.694328][T15617] veth1_macvtap: entered promiscuous mode
[ 1006.740583][T15617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1006.785687][T15617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1006.803588][ T1174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.804075][ T1174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.804112][ T1174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.804144][ T1174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.833183][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2257'.
[ 1007.858911][T16012] netlink: 'syz.5.2258': attribute type 1 has an invalid length.
[ 1007.983031][T16010] gre0: entered promiscuous mode
[ 1008.146203][T16012] veth5: entered promiscuous mode
[ 1008.146953][  T827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1008.146969][  T827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1008.306747][T16031] netlink: 'syz.5.2266': attribute type 3 has an invalid length.
[ 1008.306769][T16031] netlink: 766 bytes leftover after parsing attributes in process `syz.5.2266'.
[ 1008.465324][T16035] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2267'.
[ 1009.391754][ T5853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1009.391773][ T5853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1010.335963][T10446] Bluetooth: hci1: command 0x0406 tx timeout
[ 1010.681842][T16059] netlink: 'syz.5.2277': attribute type 3 has an invalid length.
[ 1010.681863][T16059] netlink: 766 bytes leftover after parsing attributes in process `syz.5.2277'.
[ 1010.916885][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'.
[ 1010.941691][T16069] bridge1: entered promiscuous mode
[ 1010.941770][T16069] bridge1: entered allmulticast mode
[ 1011.126311][T16074] netlink: 'syz.5.2282': attribute type 1 has an invalid length.
[ 1011.246968][T16074] veth7: entered promiscuous mode
[ 1011.524457][T16084] netlink: 'syz.2.2289': attribute type 3 has an invalid length.
[ 1011.524477][T16084] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2289'.
[ 1011.876672][T16093] ip6tnl0: entered promiscuous mode
[ 1011.876696][T16093] ip6tnl0: entered allmulticast mode
[ 1011.916455][T16093] team0: Device ip6tnl0 is of different type
[ 1011.972020][T10446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1011.983168][T10446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1011.991409][T10446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1012.166550][T16098] input: syz1 as /devices/virtual/input/input9
[ 1012.782651][T10446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1012.783382][T10446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1013.493768][T16114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.530137][T16114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.719126][T16121] netlink: 'syz.2.2300': attribute type 3 has an invalid length.
[ 1013.719146][T16121] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2300'.
[ 1013.789378][T16125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1014.151974][ T5595] syz_tun (unregistering): left allmulticast mode
[ 1014.499281][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'.
[ 1014.781965][T16090] lo speed is unknown, defaulting to 1000
[ 1014.911097][T13837] Bluetooth: hci3: command tx timeout
[ 1015.868009][ T5737] IPVS: starting estimator thread 0...
[ 1015.965540][T16167] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1016.257057][T16171] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2318'.
[ 1016.423602][T16187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1016.464499][T16190] netlink: 'syz.5.2326': attribute type 4 has an invalid length.
[ 1016.604511][T16196] netlink: 'syz.0.2328': attribute type 3 has an invalid length.
[ 1016.604529][T16196] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2328'.
[ 1016.712381][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2330'.
[ 1016.816657][T16191] veth3: entered promiscuous mode
[ 1016.914918][T16199] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1016.967636][T10446] Bluetooth: hci3: command tx timeout
[ 1017.324744][T16223] netlink: 'syz.2.2338': attribute type 3 has an invalid length.
[ 1017.324759][T16223] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2338'.
[ 1017.449434][T16228] netlink: 'syz.2.2339': attribute type 4 has an invalid length.
[ 1017.743403][T16237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1018.138712][T16090] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.138826][T16090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1018.139048][T16090] bridge_slave_0: entered allmulticast mode
[ 1018.142944][T16090] bridge_slave_0: entered promiscuous mode
[ 1018.496699][T16234] veth9: entered promiscuous mode
[ 1018.947975][T16090] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.968732][T16090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1018.972390][T16090] bridge_slave_1: entered allmulticast mode
[ 1019.050931][T10446] Bluetooth: hci3: command tx timeout
[ 1019.373449][T16090] bridge_slave_1: entered promiscuous mode
[ 1019.481202][T16090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1019.498154][T16090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1019.571476][T16249] netlink: 'syz.6.2348': attribute type 3 has an invalid length.
[ 1019.571496][T16249] netlink: 766 bytes leftover after parsing attributes in process `syz.6.2348'.
[ 1019.701912][T16090] team0: Port device team_slave_0 added
[ 1019.721972][T16090] team0: Port device team_slave_1 added
[ 1019.837665][T16090] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1019.837680][T16090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.837704][T16090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1019.839846][T16090] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1019.839859][T16090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.839883][T16090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1020.031909][T16260] 9p: Bad value for 'rfdno'
[ 1020.940222][T16264] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2354'.
[ 1020.940348][T16264] netlink: Unknown conntrack attr (0)
[ 1021.173924][T10446] Bluetooth: hci3: command tx timeout
[ 1022.052102][T16276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1022.053291][T16278] netlink: 'syz.2.2359': attribute type 3 has an invalid length.
[ 1022.053308][T16278] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2359'.
[ 1022.418296][T16282] netlink: 'syz.2.2361': attribute type 1 has an invalid length.
[ 1023.119507][T16285] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1023.326278][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'.
[ 1023.424621][T16302] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2368'.
[ 1023.424726][T16302] netlink: Unknown conntrack attr (0)
[ 1023.589292][T16310] netlink: 'syz.0.2369': attribute type 3 has an invalid length.
[ 1023.589311][T16310] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2369'.
[ 1023.704368][T16090] hsr_slave_0: entered promiscuous mode
[ 1023.714564][T16090] hsr_slave_1: entered promiscuous mode
[ 1023.723617][T16090] debugfs: 'hsr0' already exists in 'hsr'
[ 1023.723641][T16090] Cannot create hsr debugfs directory
[ 1023.952369][   T37] audit: type=1326 audit(1778290211.697:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.953070][   T37] audit: type=1326 audit(1778290211.697:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997323][   T37] audit: type=1326 audit(1778290211.747:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997369][   T37] audit: type=1326 audit(1778290211.747:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997405][   T37] audit: type=1326 audit(1778290211.747:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997442][   T37] audit: type=1326 audit(1778290211.747:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997477][   T37] audit: type=1326 audit(1778290211.747:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997514][   T37] audit: type=1326 audit(1778290211.747:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997549][   T37] audit: type=1326 audit(1778290211.747:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1023.997585][   T37] audit: type=1326 audit(1778290211.747:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16313 comm="syz.0.2373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70280bcdd9 code=0x7ffc0000
[ 1025.673956][T16331] netlink: 'syz.5.2376': attribute type 1 has an invalid length.
[ 1025.876152][ T7241] bridge_slave_1: left allmulticast mode
[ 1025.876185][ T7241] bridge_slave_1: left promiscuous mode
[ 1025.876440][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.846950][ T7241] bridge_slave_0: left allmulticast mode
[ 1026.846982][ T7241] bridge_slave_0: left promiscuous mode
[ 1026.848164][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.998198][T16346] netlink: 'syz.0.2382': attribute type 10 has an invalid length.
[ 1027.319857][ T7241] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 1027.319873][ T7241] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 9e:70:bf:2d:50:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1027.816924][ T7241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1027.875696][ T7241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1027.895996][ T7241] bond0 (unregistering): Released all slaves
[ 1027.936315][ T7241] bond1 (unregistering): (slave veth3): Releasing backup interface
[ 1027.956260][ T7241] bond1 (unregistering): Released all slaves
[ 1027.974942][ T7241] bond2 (unregistering): Released all slaves
[ 1027.991810][ T7241] bond3 (unregistering): Released all slaves
[ 1028.011319][ T7241] bond4 (unregistering): Released all slaves
[ 1028.033544][ T7241] bond5 (unregistering): Released all slaves
[ 1028.052116][ T7241] bond6 (unregistering): Released all slaves
[ 1028.102000][T16331] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[ 1028.106694][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2377'.
[ 1028.367246][T16345] bridge0: port 3(syz_tun) entered blocking state
[ 1028.367347][T16345] bridge0: port 3(syz_tun) entered disabled state
[ 1028.367574][T16345] syz_tun: entered allmulticast mode
[ 1028.400855][T16345] syz_tun: entered promiscuous mode
[ 1028.405207][T16346] syz_tun: left allmulticast mode
[ 1028.405434][T16346] bridge0: port 3(syz_tun) entered disabled state
[ 1028.796543][T16364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2390'.
[ 1029.588689][T16368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2392'.
[ 1031.068108][T16386] bridge0: port 3(syz_tun) entered blocking state
[ 1031.068499][T16386] bridge0: port 3(syz_tun) entered disabled state
[ 1031.068705][T16386] syz_tun: entered allmulticast mode
[ 1031.098787][T16386] syz_tun: entered promiscuous mode
[ 1031.155285][ T5787] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1031.173132][T16386] bridge0: port 3(syz_tun) entered blocking state
[ 1031.173254][T16386] bridge0: port 3(syz_tun) entered forwarding state
[ 1031.307792][ T5787] usb 1-1: device descriptor read/64, error -71
[ 1031.431870][T16409] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2404'.
[ 1031.434950][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2405'.
[ 1031.545234][ T5787] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1031.675352][ T5787] usb 1-1: device descriptor read/64, error -71
[ 1031.785632][ T5787] usb usb1-port1: attempt power cycle
[ 1032.125319][ T5787] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1032.145404][ T7241] hsr_slave_0: left promiscuous mode
[ 1032.146039][ T5787] usb 1-1: device descriptor read/8, error -71
[ 1032.185366][ T7241] hsr_slave_1: left promiscuous mode
[ 1032.191571][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1032.226015][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1032.385261][ T5787] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1032.581036][ T5787] usb 1-1: device descriptor read/8, error -71
[ 1032.688157][ T5787] usb usb1-port1: unable to enumerate USB device
[ 1033.189478][ T7241] team0 (unregistering): Port device team_slave_1 removed
[ 1033.265984][ T7241] team0 (unregistering): Port device team_slave_0 removed
[ 1033.635254][T16417] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2406'.
[ 1033.681998][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1034.012924][T16434] netlink: 'syz.5.2413': attribute type 10 has an invalid length.
[ 1034.013632][T16434] syz_tun: left allmulticast mode
[ 1034.013844][T16434] bridge0: port 3(syz_tun) entered disabled state
[ 1034.345253][ T5787] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1034.470943][T16454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1034.497688][ T5787] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[ 1034.497714][ T5787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1034.497757][ T5787] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1034.497796][ T5787] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 1034.497816][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.503027][ T5787] usb 1-1: config 0 descriptor??
[ 1034.539773][ T5787] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 1034.587796][ T5787] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[ 1034.996045][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1035.165940][T16472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2419'.
[ 1036.725401][ T5787] usb 1-1: USB disconnect, device number 12
[ 1036.890761][T16493] io-wq is not configured for unbound workers
[ 1037.157161][ T5787] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1037.169244][T16502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2429'.
[ 1037.188968][T16503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1037.245285][T14581] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1037.285952][ T5787] usb 1-1: device descriptor read/64, error -71
[ 1037.385242][T14581] usb 7-1: device descriptor read/64, error -71
[ 1037.525321][ T5787] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1037.627472][T14581] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1037.655312][ T5787] usb 1-1: device descriptor read/64, error -71
[ 1037.704509][T10446] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1037.704533][T10446] CPU: 0 UID: 0 PID: 10446 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1037.704554][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1037.704565][T10446] Workqueue: hci5 hci_rx_work
[ 1037.704592][T10446] Call Trace:
[ 1037.704599][T10446]  <TASK>
[ 1037.704607][T10446]  dump_stack_lvl+0xe8/0x150
[ 1037.704636][T10446]  sysfs_create_dir_ns+0x271/0x2a0
[ 1037.704636][T10446]  sysfs_create_dir_ns+0x271/0x2a0
[ 1037.704676][T10446]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1037.704700][T10446]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1037.704734][T10446]  ? rt_spin_unlock+0x160/0x200
[ 1037.704759][T10446]  kobject_add_internal+0x631/0xd10
[ 1037.704793][T10446]  kobject_add+0x163/0x240
[ 1037.704819][T10446]  ? __pfx_kobject_add+0x10/0x10
[ 1037.704845][T10446]  ? get_device_parent+0x370/0x3a0
[ 1037.704872][T10446]  device_add+0x408/0xbb0
[ 1037.704895][T10446]  hci_conn_add_sysfs+0xd5/0x210
[ 1037.704921][T10446]  le_conn_complete_evt+0x10e6/0x16b0
[ 1037.704961][T10446]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1037.704990][T10446]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1037.705015][T10446]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1037.705042][T10446]  ? skb_pull_data+0xfb/0x200
[ 1037.705076][T10446]  hci_le_conn_complete_evt+0x187/0x470
[ 1037.705111][T10446]  hci_event_packet+0x659/0xef0
[ 1037.705140][T10446]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1037.705159][T10446]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1037.705184][T10446]  ? __pfx_hci_event_packet+0x10/0x10
[ 1037.705204][T10446]  ? rt_spin_unlock+0x14f/0x200
[ 1037.705229][T10446]  ? hci_send_to_monitor+0xe2/0x590
[ 1037.705262][T10446]  hci_rx_work+0x3ee/0x1040
[ 1037.705290][T10446]  ? process_scheduled_works+0xa70/0x1860
[ 1037.705314][T10446]  process_scheduled_works+0xb5d/0x1860
[ 1037.705360][T10446]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1037.705386][T10446]  ? assign_work+0x3d5/0x5e0
[ 1037.705410][T10446]  worker_thread+0xa53/0xfc0
[ 1037.705457][T10446]  kthread+0x388/0x470
[ 1037.705483][T10446]  ? __pfx_worker_thread+0x10/0x10
[ 1037.705503][T10446]  ? __pfx_kthread+0x10/0x10
[ 1037.705527][T10446]  ret_from_fork+0x514/0xb70
[ 1037.705555][T10446]  ? __pfx_ret_from_fork+0x10/0x10
[ 1037.705577][T10446]  ? __switch_to+0xc79/0x1410
[ 1037.705606][T10446]  ? __pfx_kthread+0x10/0x10
[ 1037.705630][T10446]  ret_from_fork_asm+0x1a/0x30
[ 1037.705666][T10446]  </TASK>
[ 1037.720546][T10446] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1037.720590][T10446] Bluetooth: hci5: failed to register connection device
[ 1037.773394][ T5787] usb usb1-port1: attempt power cycle
[ 1037.805895][T14581] usb 7-1: device descriptor read/64, error -71
[ 1037.842121][T10446] ==================================================================
[ 1037.842131][T10446] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.842201][T10446] Read of size 8 at addr ffff88803424f7b0 by task kworker/u9:0/10446
[ 1037.842210][T10446] 
[ 1037.842217][T10446] CPU: 0 UID: 0 PID: 10446 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1037.842229][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1037.842241][T10446] Workqueue: hci5 hci_rx_work
[ 1037.842264][T10446] Call Trace:
[ 1037.842272][T10446]  <TASK>
[ 1037.842279][T10446]  dump_stack_lvl+0xe8/0x150
[ 1037.842303][T10446]  print_address_description+0x55/0x1e0
[ 1037.842335][T10446]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.842355][T10446]  print_report+0x58/0x70
[ 1037.842366][T10446]  kasan_report+0x117/0x150
[ 1037.842425][T10446]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.842438][T10446]  l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.842451][T10446]  l2cap_connect_cfm+0x368/0x1560
[ 1037.842464][T10446]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1037.842473][T10446]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1037.842487][T10446]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1037.842499][T10446]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1037.842510][T10446]  ? mutex_lock_nested+0x152/0x1d0
[ 1037.842524][T10446]  ? hci_connect_cfm+0x2c/0x140
[ 1037.842536][T10446]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1037.842546][T10446]  hci_connect_cfm+0x95/0x140
[ 1037.842559][T10446]  le_conn_complete_evt+0x1134/0x16b0
[ 1037.842576][T10446]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1037.842589][T10446]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1037.842600][T10446]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1037.842612][T10446]  ? skb_pull_data+0xfb/0x200
[ 1037.842627][T10446]  hci_le_conn_complete_evt+0x187/0x470
[ 1037.842642][T10446]  hci_event_packet+0x659/0xef0
[ 1037.842654][T10446]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1037.842669][T10446]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1037.842680][T10446]  ? __pfx_hci_event_packet+0x10/0x10
[ 1037.842692][T10446]  ? rt_spin_unlock+0x14f/0x200
[ 1037.842704][T10446]  ? hci_send_to_monitor+0xe2/0x590
[ 1037.842720][T10446]  hci_rx_work+0x3ee/0x1040
[ 1037.842734][T10446]  ? process_scheduled_works+0xa70/0x1860
[ 1037.842746][T10446]  process_scheduled_works+0xb5d/0x1860
[ 1037.842766][T10446]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1037.842778][T10446]  ? assign_work+0x3d5/0x5e0
[ 1037.842789][T10446]  worker_thread+0xa53/0xfc0
[ 1037.842807][T10446]  kthread+0x388/0x470
[ 1037.842819][T10446]  ? __pfx_worker_thread+0x10/0x10
[ 1037.842828][T10446]  ? __pfx_kthread+0x10/0x10
[ 1037.842840][T10446]  ret_from_fork+0x514/0xb70
[ 1037.842852][T10446]  ? __pfx_ret_from_fork+0x10/0x10
[ 1037.842862][T10446]  ? __switch_to+0xc79/0x1410
[ 1037.842877][T10446]  ? __pfx_kthread+0x10/0x10
[ 1037.842889][T10446]  ret_from_fork_asm+0x1a/0x30
[ 1037.842905][T10446]  </TASK>
[ 1037.842909][T10446] 
[ 1037.842915][T10446] Allocated by task 10446:
[ 1037.842921][T10446]  kasan_save_track+0x3e/0x80
[ 1037.842930][T10446]  __kasan_kmalloc+0x93/0xb0
[ 1037.842939][T10446]  __kmalloc_noprof+0x3e7/0x7b0
[ 1037.842989][T10446]  sk_prot_alloc+0xe7/0x210
[ 1037.842999][T10446]  sk_alloc+0x3a/0x390
[ 1037.843009][T10446]  bt_sock_alloc+0x3b/0x310
[ 1037.843041][T10446]  l2cap_sock_new_connection_cb+0xf1/0x2f0
[ 1037.843050][T10446]  l2cap_connect_cfm+0x368/0x1560
[ 1037.843058][T10446]  hci_connect_cfm+0x95/0x140
[ 1037.843069][T10446]  le_conn_complete_evt+0x1134/0x16b0
[ 1037.843082][T10446]  hci_le_conn_complete_evt+0x187/0x470
[ 1037.843093][T10446]  hci_event_packet+0x659/0xef0
[ 1037.843103][T10446]  hci_rx_work+0x3ee/0x1040
[ 1037.843113][T10446]  process_scheduled_works+0xb5d/0x1860
[ 1037.843122][T10446]  worker_thread+0xa53/0xfc0
[ 1037.843131][T10446]  kthread+0x388/0x470
[ 1037.843142][T10446]  ret_from_fork+0x514/0xb70
[ 1037.843151][T10446]  ret_from_fork_asm+0x1a/0x30
[ 1037.843161][T10446] 
[ 1037.843163][T10446] Freed by task 16515:
[ 1037.843168][T10446]  kasan_save_track+0x3e/0x80
[ 1037.843175][T10446]  kasan_save_free_info+0x46/0x50
[ 1037.843207][T10446]  __kasan_slab_free+0x5c/0x80
[ 1037.843215][T10446]  kfree+0x1c5/0x6c0
[ 1037.843223][T10446]  __sk_destruct+0x74b/0x9d0
[ 1037.843234][T10446]  l2cap_sock_cleanup_listen+0xe0/0x440
[ 1037.843242][T10446]  l2cap_sock_release+0x6e/0x270
[ 1037.843250][T10446]  sock_close+0xc3/0x240
[ 1037.843287][T10446]  __fput+0x461/0xa70
[ 1037.843341][T10446]  task_work_run+0x1d9/0x270
[ 1037.843353][T10446]  exit_to_user_mode_loop+0xed/0x480
[ 1037.843409][T10446]  do_syscall_64+0x33e/0xf80
[ 1037.843429][T10446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1037.843463][T10446] 
[ 1037.843468][T10446] The buggy address belongs to the object at ffff88803424f000
[ 1037.843468][T10446]  which belongs to the cache kmalloc-2k of size 2048
[ 1037.843483][T10446] The buggy address is located 1968 bytes inside of
[ 1037.843483][T10446]  freed 2048-byte region [ffff88803424f000, ffff88803424f800)
[ 1037.843502][T10446] 
[ 1037.843506][T10446] The buggy address belongs to the physical page:
[ 1037.843522][T10446] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034249000 pfn:0x34248
[ 1037.843533][T10446] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1037.843541][T10446] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 1037.843553][T10446] page_type: f5(slab)
[ 1037.843563][T10446] raw: 0080000000000240 ffff88801a011000 ffffea0000cf3410 ffffea0000aeca10
[ 1037.843571][T10446] raw: ffff888034249000 0000000800080007 00000000f5000000 0000000000000000
[ 1037.843580][T10446] head: 0080000000000240 ffff88801a011000 ffffea0000cf3410 ffffea0000aeca10
[ 1037.843588][T10446] head: ffff888034249000 0000000800080007 00000000f5000000 0000000000000000
[ 1037.843597][T10446] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1037.843605][T10446] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1037.843610][T10446] page dumped because: kasan: bad access detected
[ 1037.843618][T10446] page_owner tracks the page as allocated
[ 1037.843622][T10446] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 88908632826, free_ts 88882179846
[ 1037.843639][T10446]  post_alloc_hook+0x231/0x280
[ 1037.843685][T10446]  get_page_from_freelist+0x27c8/0x2840
[ 1037.843697][T10446]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1037.843708][T10446]  allocate_slab+0x77/0x660
[ 1037.843721][T10446]  refill_objects+0x33c/0x3d0
[ 1037.843732][T10446]  __pcs_replace_empty_main+0x373/0x720
[ 1037.843744][T10446]  __kmalloc_noprof+0x530/0x7b0
[ 1037.843754][T10446]  ___neigh_create+0x722/0x2350
[ 1037.843782][T10446]  ip6_finish_output2+0x729/0x1430
[ 1037.843829][T10446]  ip6_output+0x340/0x550
[ 1037.843839][T10446]  ndisc_send_skb+0xd0b/0x1670
[ 1037.843871][T10446]  addrconf_dad_completed+0x6e3/0xe60
[ 1037.843901][T10446]  addrconf_dad_work+0xdc4/0x1680
[ 1037.843911][T10446]  process_scheduled_works+0xb5d/0x1860
[ 1037.843920][T10446]  worker_thread+0xa53/0xfc0
[ 1037.843929][T10446]  kthread+0x388/0x470
[ 1037.843940][T10446] page last free pid 1200 tgid 1200 stack trace:
[ 1037.843945][T10446]  __free_frozen_pages+0xfa6/0x10f0
[ 1037.843955][T10446]  __folio_put+0x2eb/0x3a0
[ 1037.844011][T10446]  skb_release_data+0x544/0xa60
[ 1037.844021][T10446]  __kfree_skb+0x5d/0x210
[ 1037.844031][T10446]  skb_defer_free_flush+0x191/0x260
[ 1037.844059][T10446]  net_rx_action+0x4a6/0xe00
[ 1037.844067][T10446]  handle_softirqs+0x1de/0x6d0
[ 1037.844077][T10446]  __local_bh_enable_ip+0x170/0x2b0
[ 1037.844086][T10446]  irq_forced_thread_fn+0xe9/0x120
[ 1037.844136][T10446]  irq_thread+0x47e/0x6e0
[ 1037.844147][T10446]  kthread+0x388/0x470
[ 1037.844158][T10446]  ret_from_fork+0x514/0xb70
[ 1037.844167][T10446]  ret_from_fork_asm+0x1a/0x30
[ 1037.844178][T10446] 
[ 1037.844181][T10446] Memory state around the buggy address:
[ 1037.844186][T10446]  ffff88803424f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1037.844192][T10446]  ffff88803424f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1037.844198][T10446] >ffff88803424f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1037.844203][T10446]                                      ^
[ 1037.844208][T10446]  ffff88803424f800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1037.844214][T10446]  ffff88803424f880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1037.844218][T10446] ==================================================================
[ 1037.844232][T10446] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1037.844241][T10446] CPU: 0 UID: 0 PID: 10446 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1037.844252][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1037.844259][T10446] Workqueue: hci5 hci_rx_work
[ 1037.844272][T10446] Call Trace:
[ 1037.844276][T10446]  <TASK>
[ 1037.844280][T10446]  vpanic+0x56c/0xa60
[ 1037.844294][T10446]  ? __pfx_vpanic+0x10/0x10
[ 1037.844306][T10446]  ? __pfx___schedule+0x10/0x10
[ 1037.844318][T10446]  panic+0xc5/0xd0
[ 1037.844329][T10446]  ? __pfx_panic+0x10/0x10
[ 1037.844340][T10446]  ? preempt_schedule_common+0x82/0xd0
[ 1037.844352][T10446]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.844363][T10446]  check_panic_on_warn+0x89/0xb0
[ 1037.844377][T10446]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.844387][T10446]  end_report+0x73/0x170
[ 1037.844398][T10446]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.844408][T10446]  kasan_report+0x128/0x150
[ 1037.844422][T10446]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.844434][T10446]  l2cap_sock_new_connection_cb+0x208/0x2f0
[ 1037.844446][T10446]  l2cap_connect_cfm+0x368/0x1560
[ 1037.844457][T10446]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1037.844465][T10446]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1037.844477][T10446]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1037.844488][T10446]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1037.844499][T10446]  ? mutex_lock_nested+0x152/0x1d0
[ 1037.844512][T10446]  ? hci_connect_cfm+0x2c/0x140
[ 1037.844524][T10446]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1037.844537][T10446]  hci_connect_cfm+0x95/0x140
[ 1037.844558][T10446]  le_conn_complete_evt+0x1134/0x16b0
[ 1037.844586][T10446]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1037.844609][T10446]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1037.844628][T10446]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1037.844648][T10446]  ? skb_pull_data+0xfb/0x200
[ 1037.844673][T10446]  hci_le_conn_complete_evt+0x187/0x470
[ 1037.844689][T10446]  hci_event_packet+0x659/0xef0
[ 1037.844701][T10446]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1037.844710][T10446]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1037.844722][T10446]  ? __pfx_hci_event_packet+0x10/0x10
[ 1037.844733][T10446]  ? rt_spin_unlock+0x14f/0x200
[ 1037.844743][T10446]  ? hci_send_to_monitor+0xe2/0x590
[ 1037.844758][T10446]  hci_rx_work+0x3ee/0x1040
[ 1037.844770][T10446]  ? process_scheduled_works+0xa70/0x1860
[ 1037.844781][T10446]  process_scheduled_works+0xb5d/0x1860
[ 1037.844797][T10446]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1037.844808][T10446]  ? assign_work+0x3d5/0x5e0
[ 1037.844818][T10446]  worker_thread+0xa53/0xfc0
[ 1037.844834][T10446]  kthread+0x388/0x470
[ 1037.844846][T10446]  ? __pfx_worker_thread+0x10/0x10
[ 1037.844855][T10446]  ? __pfx_kthread+0x10/0x10
[ 1037.844867][T10446]  ret_from_fork+0x514/0xb70
[ 1037.844878][T10446]  ? __pfx_ret_from_fork+0x10/0x10
[ 1037.844888][T10446]  ? __switch_to+0xc79/0x1410
[ 1037.844901][T10446]  ? __pfx_kthread+0x10/0x10
[ 1037.844913][T10446]  ret_from_fork_asm+0x1a/0x30
[ 1037.844928][T10446]  </TASK>
[ 1037.845375][T10446] Kernel Offset: disabled