last executing test programs:

13.116616014s ago: executing program 0 (id=2375):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
set_mempolicy(0x0, &(0x7f0000000100)=0x5, 0x102000000006)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x41)
socket(0x18, 0x80002, 0x43)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x3, 0x60c0, &(0x7f000000d800)="$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")
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x48)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000200)={0x2, 0x80000000})
socket$inet6(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1004, 0x0, 0x0, 0x0, &(0x7f0000000540))
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getdents(0xffffffffffffffff, 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)

8.860768052s ago: executing program 0 (id=2387):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x1800, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setreuid(0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r7, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

6.022674281s ago: executing program 2 (id=2391):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.002709432s ago: executing program 0 (id=2392):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec"], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r3, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000001940), 0x0}, 0x20)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r4, &(0x7f0000000000), 0x0}, 0x20)

5.868351826s ago: executing program 1 (id=2393):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

5.315758195s ago: executing program 1 (id=2394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/215, 0xd7}], 0x3e8)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

4.882684951s ago: executing program 0 (id=2396):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20004080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x1800, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setreuid(0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r7, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.882322671s ago: executing program 2 (id=2397):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x160, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x13a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x15, "8a70254dad90829ddb18be62e84e877606f1bb15aa"}, {0xdd, 0xb5, "a9b8e8b2e8815dfdd27ddf0d9e1cb4fa1bbb67c1e564d75e01a3568e885b2ad15a99d00b7ffdeb02eebcc7545ca67fcad48c79ee89e03a97f892233201e08cb02c084d6cc9e65633c4f51e62e7d245088db7b2a0857ec4e5f911cb353d191498218794a9bd9095865f05de5722159704b56e4dd354369f3480578abd5a8f408dc04f90e5953feace89747961bbd24dac7393ae66ff9e5c5dd5e0b7cf50058a5b5f27dea29e01315b0b6d58d4a2f6b6f06eb7d71f09"}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

4.519098054s ago: executing program 3 (id=2398):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)})

4.457316776s ago: executing program 2 (id=2399):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20004080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x1800, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setreuid(0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r7, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.242761033s ago: executing program 3 (id=2400):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)

1.978908702s ago: executing program 0 (id=2401):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20004080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x1800, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setreuid(0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r7, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.552325257s ago: executing program 1 (id=2402):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)

1.495430639s ago: executing program 2 (id=2403):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040))

1.44982967s ago: executing program 1 (id=2404):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402300a, 0x0, 0x5, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
close(r0)

1.381020903s ago: executing program 3 (id=2405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400})
close(r1)

1.231477457s ago: executing program 1 (id=2406):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0})

864.32264ms ago: executing program 3 (id=2407):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
set_mempolicy(0x0, &(0x7f0000000100)=0x5, 0x102000000006)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x41)
socket(0x18, 0x80002, 0x43)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x3, 0x60c0, &(0x7f000000d800)="$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")
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x48)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000200)={0x2, 0x80000000})
socket$inet6(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1004, 0x0, 0x0, 0x0, &(0x7f0000000540))
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getdents(0xffffffffffffffff, 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)

791.120113ms ago: executing program 2 (id=2408):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00')
fchdir(r0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x5c, 0x8}, 0x18)

584.68941ms ago: executing program 0 (id=2409):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff)

520.908462ms ago: executing program 2 (id=2410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20004080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x1800, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r5=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setreuid(0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r8 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r8, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

285.38455ms ago: executing program 3 (id=2411):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x1)
getdents(r1, &(0x7f00000005c0)=""/156, 0x9c)

122.171996ms ago: executing program 3 (id=2412):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20004080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x1800, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setreuid(0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r7, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

0s ago: executing program 1 (id=2413):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4)
shutdown(r0, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts.
[   79.393918][ T5754] cgroup: Unknown subsys name 'net'
[   79.531860][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.991858][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.608998][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.618148][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.628151][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.636228][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.644379][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.652555][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.661215][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.662480][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.670168][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.684843][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.692458][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.697627][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.702420][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.710772][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.722491][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.729643][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.735997][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.744615][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.753237][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.762315][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.770673][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.782954][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.791229][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.805350][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.192269][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   83.210875][ T5766] chnl_net:caif_netlink_parms(): no params data found
[   83.306742][ T5765] chnl_net:caif_netlink_parms(): no params data found
[   83.346465][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   83.432879][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.440171][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.448655][ T5767] bridge_slave_0: entered allmulticast mode
[   83.457456][ T5767] bridge_slave_0: entered promiscuous mode
[   83.467317][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.474428][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.481948][ T5767] bridge_slave_1: entered allmulticast mode
[   83.488874][ T5767] bridge_slave_1: entered promiscuous mode
[   83.546054][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.553415][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.561068][ T5766] bridge_slave_0: entered allmulticast mode
[   83.568215][ T5766] bridge_slave_0: entered promiscuous mode
[   83.576710][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.583848][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.591510][ T5766] bridge_slave_1: entered allmulticast mode
[   83.598693][ T5766] bridge_slave_1: entered promiscuous mode
[   83.629735][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.641224][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.709244][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.723947][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.733926][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.743576][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.754348][ T5765] bridge_slave_0: entered allmulticast mode
[   83.764096][ T5765] bridge_slave_0: entered promiscuous mode
[   83.774010][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.781794][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.791356][ T5765] bridge_slave_1: entered allmulticast mode
[   83.801011][ T5765] bridge_slave_1: entered promiscuous mode
[   83.833890][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.841788][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.849623][ T5768] bridge_slave_0: entered allmulticast mode
[   83.856531][ T5768] bridge_slave_0: entered promiscuous mode
[   83.890497][ T5767] team0: Port device team_slave_0 added
[   83.896833][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.904101][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.911807][ T5768] bridge_slave_1: entered allmulticast mode
[   83.919143][ T5768] bridge_slave_1: entered promiscuous mode
[   83.941196][ T5766] team0: Port device team_slave_0 added
[   83.960429][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.971112][ T5767] team0: Port device team_slave_1 added
[   83.989297][ T5766] team0: Port device team_slave_1 added
[   83.999624][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.068918][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.079428][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.087148][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.113604][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.127503][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.134585][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.162452][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.185003][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.191997][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.218209][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.231356][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.267204][ T5765] team0: Port device team_slave_0 added
[   84.283450][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.292690][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.319126][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.351074][ T5765] team0: Port device team_slave_1 added
[   84.373540][ T5768] team0: Port device team_slave_0 added
[   84.385800][ T5766] hsr_slave_0: entered promiscuous mode
[   84.392667][ T5766] hsr_slave_1: entered promiscuous mode
[   84.425828][ T5768] team0: Port device team_slave_1 added
[   84.441728][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.448756][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.475872][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.508292][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.515599][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.542604][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.574039][ T5767] hsr_slave_0: entered promiscuous mode
[   84.581746][ T5767] hsr_slave_1: entered promiscuous mode
[   84.588389][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.596722][ T5767] Cannot create hsr debugfs directory
[   84.603128][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.612269][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.641648][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.655028][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.662203][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.688901][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.755821][ T5769] Bluetooth: hci1: command tx timeout
[   84.823365][ T5768] hsr_slave_0: entered promiscuous mode
[   84.830336][ T5768] hsr_slave_1: entered promiscuous mode
[   84.836546][ T5769] Bluetooth: hci0: command tx timeout
[   84.842936][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.845055][ T5769] Bluetooth: hci3: command tx timeout
[   84.850678][ T5082] Bluetooth: hci2: command tx timeout
[   84.851092][ T5768] Cannot create hsr debugfs directory
[   84.900084][ T5765] hsr_slave_0: entered promiscuous mode
[   84.906538][ T5765] hsr_slave_1: entered promiscuous mode
[   84.912719][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.920811][ T5765] Cannot create hsr debugfs directory
[   85.173831][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.202865][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.213895][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.223395][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.342790][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.352850][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.372595][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.403729][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.476077][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.489035][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.517687][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.541150][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.589178][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.608507][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.619636][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.650120][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.662463][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.684155][ T5766] 8021q: adding VLAN 0 to HW filter on device team0
[   85.721555][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.728924][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.755326][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.763304][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.838777][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.910767][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   85.938858][  T991] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.946123][  T991] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.974422][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.029784][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.037024][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.068021][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.080883][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   86.141310][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.148555][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.191759][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.198981][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.213034][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   86.266527][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.274261][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.294272][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.301534][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.353760][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.401422][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.518627][ T5766] veth0_vlan: entered promiscuous mode
[   86.543162][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.583746][ T5766] veth1_vlan: entered promiscuous mode
[   86.706659][ T5766] veth0_macvtap: entered promiscuous mode
[   86.718149][ T5767] veth0_vlan: entered promiscuous mode
[   86.746496][ T5766] veth1_macvtap: entered promiscuous mode
[   86.790455][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.803095][ T5767] veth1_vlan: entered promiscuous mode
[   86.828170][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.837599][ T5769] Bluetooth: hci1: command tx timeout
[   86.849986][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.869888][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.879565][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.889243][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.901022][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.915383][ T5769] Bluetooth: hci3: command tx timeout
[   86.915666][ T5082] Bluetooth: hci0: command tx timeout
[   86.920816][ T5769] Bluetooth: hci2: command tx timeout
[   86.974003][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.048743][ T5767] veth0_macvtap: entered promiscuous mode
[   87.071485][ T5767] veth1_macvtap: entered promiscuous mode
[   87.099455][ T5765] veth0_vlan: entered promiscuous mode
[   87.140800][ T5765] veth1_vlan: entered promiscuous mode
[   87.161195][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.172536][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.184582][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.200738][ T5768] veth0_vlan: entered promiscuous mode
[   87.219755][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.222962][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.238435][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.253695][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.269677][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.290755][ T5768] veth1_vlan: entered promiscuous mode
[   87.303844][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.312919][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.323617][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.332978][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.384418][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.395020][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.416944][ T5765] veth0_macvtap: entered promiscuous mode
[   87.454650][ T5765] veth1_macvtap: entered promiscuous mode
[   87.519686][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.530748][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.541457][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.552207][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.566051][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.577036][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.588160][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.598520][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.609653][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.621388][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.661609][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.671545][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.688619][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.698308][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.711524][ T5768] veth0_macvtap: entered promiscuous mode
[   87.728214][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.736559][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.762257][ T5768] veth1_macvtap: entered promiscuous mode
[   87.773056][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.870499][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.893055][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.903027][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.916877][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.926859][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.938324][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.950692][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.981028][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.993837][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.021388][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.033254][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.045210][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.056057][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.083442][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.094015][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.116533][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.153899][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.180407][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.195907][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.209692][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.220968][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.234071][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.607055][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.701410][ T5838] Cannot find add_set index 0 as target
[   88.838408][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.975032][ T5769] Bluetooth: hci1: command tx timeout
[   88.996067][ T5082] Bluetooth: hci3: command tx timeout
[   89.002376][ T5776] Bluetooth: hci2: command tx timeout
[   89.010023][ T5769] Bluetooth: hci0: command tx timeout
[   89.383408][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.427437][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.567060][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.577792][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.519446][ T5853] syz.3.4[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.544246][ T5853] loop3: detected capacity change from 0 to 1024
[   90.566206][ T5853] =======================================================
[   90.566206][ T5853] WARNING: The mand mount option has been deprecated and
[   90.566206][ T5853]          and is ignored by this kernel. Remove the mand
[   90.566206][ T5853]          option from the mount to silence this warning.
[   90.566206][ T5853] =======================================================
[   90.681608][ T5853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.023991][ T5769] Bluetooth: hci1: command tx timeout
[   91.392014][ T5769] Bluetooth: hci0: command tx timeout
[   91.402128][ T5769] Bluetooth: hci2: command tx timeout
[   91.410199][ T5769] Bluetooth: hci3: command tx timeout
[   93.789653][ T5868] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.4: Allocating blocks 497-513 which overlap fs metadata
[   93.825172][ T5868] EXT4-fs (loop3): pa ffff8880765519f8: logic 131104, phys. 177, len 21
[   93.834850][ T5868] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 1
[   93.971350][ T5865] sctp: failed to load transform for md5: -4
[   93.972385][ T5877] sctp: failed to load transform for md5: -2
[   94.025366][ T5881] sctp: failed to load transform for md5: -2
[   94.088113][ T5869] sctp: failed to load transform for md5: -2
[   94.098245][ T5874] sctp: failed to load transform for md5: -2
[   94.138523][ T5885] sctp: failed to load transform for md5: -2
[   94.189643][ T5890] sctp: failed to load transform for md5: -2
[   94.521583][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.783003][ T5922] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   95.475491][ T5922] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   95.485365][ T5922] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   95.494775][ T5922] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   95.697160][ T5922] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.706812][ T5922] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.718606][ T5922] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.803469][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   96.341930][ T5922] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   96.494049][ T5922] geneve2: entered promiscuous mode
[   96.801954][ T5939] Bluetooth: MGMT ver 1.22
[   96.809161][ T5939] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[   98.706340][  T786] cfg80211: failed to load regulatory.db
[  100.234576][ T5952] netlink: 'syz.3.22': attribute type 13 has an invalid length.
[  100.601245][ T5963] loop0: detected capacity change from 0 to 64
[  101.580208][ T5970] netlink: 'syz.1.25': attribute type 1 has an invalid length.
[  101.917052][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[  103.221195][ T5992] Zero length message leads to an empty skb
[  103.309670][ T5994] syzkaller0: entered promiscuous mode
[  103.322961][ T5994] syzkaller0: entered allmulticast mode
[  105.154870][ T5989] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  105.414176][ T6012] loop1: detected capacity change from 0 to 4096
[  105.429496][ T6012] EXT4-fs: inline encryption not supported
[  105.779251][ T6012] ext4: Unknown parameter 'nouser_xattr'
[  106.870149][ T6034] IPVS: rr: FWM 3 0x00000003 - no destination available
[  107.662512][  T787] IPVS: starting estimator thread 0...
[  107.835737][ T6035] IPVS: using max 20 ests per chain, 48000 per kthread
[  108.350972][ T6036] syz.1.42 (6036) used greatest stack depth: 20208 bytes left
[  109.050731][ T6044] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  109.395242][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  110.129732][ T6053] loop1: detected capacity change from 0 to 128
[  110.726611][ T5756] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  111.748327][ T6058] syzkaller0: entered promiscuous mode
[  111.764810][ T6058] syzkaller0: entered allmulticast mode
[  111.788675][ T6058] TC_ACT_REPEAT abuse ?
[  114.117267][ T6084] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  114.985950][ T6083] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  114.994433][ T6083] syzkaller0: entered promiscuous mode
[  115.024663][ T6083] syzkaller0: entered allmulticast mode
[  115.258256][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.270708][   T27] audit: type=1326 audit(1775099857.666:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289d79c819 code=0x7ffc0000
[  118.358967][   T27] audit: type=1326 audit(1775099857.666:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289d79c819 code=0x7ffc0000
[  118.437724][   T27] audit: type=1326 audit(1775099857.666:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289d79c819 code=0x7ffc0000
[  118.503887][   T27] audit: type=1326 audit(1775099857.666:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f289d79c819 code=0x7ffc0000
[  118.554793][   T27] audit: type=1326 audit(1775099857.676:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289d79c819 code=0x7ffc0000
[  118.624013][   T27] audit: type=1326 audit(1775099857.746:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f289d75d04e code=0x7ffc0000
[  118.736692][   T27] audit: type=1326 audit(1775099857.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f289d75d04e code=0x7ffc0000
[  119.074547][   T27] audit: type=1326 audit(1775099857.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f289d75d04e code=0x7ffc0000
[  119.415720][   T27] audit: type=1326 audit(1775099857.756:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f289d75d04e code=0x7ffc0000
[  119.544487][   T27] audit: type=1326 audit(1775099857.756:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f289d75d04e code=0x7ffc0000
[  121.585301][ T5774] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  121.837884][ T5774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.865578][ T5774] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  121.900231][ T5774] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  121.991835][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.296507][ T5774] usb 3-1: config 0 descriptor??
[  122.727680][ T6139] tipc: Started in network mode
[  122.733014][ T6139] tipc: Node identity feb756ca550c, cluster identity 4711
[  122.741751][ T6139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.753043][ T6139] syzkaller0: entered promiscuous mode
[  122.759066][ T6139] syzkaller0: entered allmulticast mode
[  122.806015][ T6139] tipc: Resetting bearer <eth:syzkaller0>
[  122.846996][ T6138] tipc: Resetting bearer <eth:syzkaller0>
[  122.848984][ T6133] loop1: detected capacity change from 0 to 40427
[  122.890227][ T6133] F2FS-fs (loop1): Image doesn't support compression
[  122.901139][ T6138] tipc: Disabling bearer <eth:syzkaller0>
[  122.921869][ T6133] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value
[  122.927726][ T6143] fuse: Bad value for 'fd'
[  124.340925][ T6152] loop3: detected capacity change from 0 to 512
[  124.882541][ T5827] usb 3-1: USB disconnect, device number 2
[  124.983158][ T6152] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  124.998713][ T6152] EXT4-fs (loop3): mount failed
[  126.619469][ T6179] loop3: detected capacity change from 0 to 256
[  127.026412][ T6183] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  127.897844][ T6191] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  127.910874][ T6191] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  127.920980][ T6191] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  127.934824][ T6191] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  127.946720][ T6191] geneve2: entered promiscuous mode
[  129.006112][ T6200] kAFS: No cell specified
[  129.026703][ T6201] loop1: detected capacity change from 0 to 128
[  129.078706][ T6201] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  129.155454][ T6201] hpfs: filesystem error: improperly stopped
[  129.269961][ T6201] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  129.987411][ T6201] hpfs: You really don't want any checks? You are crazy...
[  130.071343][ T6201] hpfs: hpfs_map_sector(): read error
[  130.123818][ T6201] hpfs: code page support is disabled
[  130.187430][ T6201] hpfs: hpfs_map_4sectors(): unaligned read
[  130.226438][ T6201] hpfs: hpfs_map_4sectors(): unaligned read
[  130.240613][ T6201] hpfs: filesystem error: unable to find root dir
[  130.365443][ T6211] syzkaller0: entered promiscuous mode
[  130.377371][ T6211] syzkaller0: entered allmulticast mode
[  130.701062][ T6216] process 'syz.1.82' launched './file0' with NULL argv: empty string added
[  130.717412][ T6216] hpfs: hpfs_map_4sectors(): unaligned read
[  130.746374][ T6216] hpfs: hpfs_map_4sectors(): unaligned read
[  130.756238][ T6216] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  131.076554][ T6218] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[  132.435074][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  133.262175][ T6224] loop2: detected capacity change from 0 to 1024
[  133.798974][ T6236] bridge0: port 3(syz_tun) entered blocking state
[  133.806375][ T6236] bridge0: port 3(syz_tun) entered disabled state
[  133.816547][ T6236] syz_tun: entered allmulticast mode
[  133.832557][ T6236] syz_tun: entered promiscuous mode
[  133.840644][ T6236] bridge0: port 3(syz_tun) entered blocking state
[  133.848688][ T6236] bridge0: port 3(syz_tun) entered forwarding state
[  134.797691][ T6224] hfsplus: found bad thread record in catalog
[  137.314841][  T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  137.404016][ T2978] hfsplus: b-tree write err: -5, ino 25
[  137.413632][ T2978] hfsplus: b-tree write err: -5, ino 4
[  137.426441][ T2978] hfsplus: b-tree write err: -5, ino 2
[  137.454281][ T2978] hfsplus: b-tree write err: -5, ino 22
[  137.494796][  T787] usb 4-1: Using ep0 maxpacket: 32
[  137.506640][  T787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  137.531646][  T787] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  140.524734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  140.909353][  T787] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  140.916054][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  140.924839][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  140.991569][  T787] usb 4-1: Product: syz
[  141.114753][  T787] usb 4-1: Manufacturer: syz
[  141.119419][  T787] usb 4-1: SerialNumber: syz
[  141.170583][  T787] usb 4-1: config 0 descriptor??
[  141.204951][  T787] usb 4-1: can't set config #0, error -71
[  141.239450][  T787] usb 4-1: USB disconnect, device number 2
[  142.965760][ T6276] Invalid option length (57448) for dns_resolver key
[  142.990057][ T6276] loop3: detected capacity change from 0 to 64
[  143.083181][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  143.083229][   T27] audit: type=1800 audit(1775099882.466:25): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.99" name="file1" dev="loop3" ino=5 res=0 errno=0
[  143.654051][ T6280] loop3: detected capacity change from 0 to 1024
[  143.798867][ T6280] EXT4-fs: Ignoring removed i_version option
[  143.831832][ T6280] EXT4-fs: inline encryption not supported
[  144.579041][ T6280] EXT4-fs (loop3): Test dummy encryption mode enabled
[  144.718295][ T6280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.025591][ T6289] tipc: Started in network mode
[  145.050698][ T6289] tipc: Node identity bbbbbb01, cluster identity 4711
[  145.765606][ T6289] tipc: Enabled bearer <eth:rose0>, priority 10
[  146.227301][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.475002][ T6301] tipc: Started in network mode
[  146.484844][ T6301] tipc: Node identity 9632f8e9fb03, cluster identity 4711
[  146.502490][ T6301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.533601][ T6301] syzkaller0: entered promiscuous mode
[  146.557582][ T6301] syzkaller0: entered allmulticast mode
[  146.632316][ T6301] tipc: Resetting bearer <eth:syzkaller0>
[  146.694997][ T6299] tipc: Resetting bearer <eth:syzkaller0>
[  147.305844][ T6299] tipc: Disabling bearer <eth:syzkaller0>
[  147.339210][ T6308] pimreg: entered allmulticast mode
[  147.443835][ T5807] tipc: Node number set to 3149642497
[  147.794983][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!!
[  151.702643][ T6333] input: syz0 as /devices/virtual/input/input5
[  156.569094][ T6357] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.034980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  159.983162][ T6376] loop3: detected capacity change from 0 to 256
[  160.007393][ T6376] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  161.747052][ T6388] syzkaller0: entered promiscuous mode
[  161.753884][ T6388] syzkaller0: entered allmulticast mode
[  162.537793][ T6395] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.469116][ T6425] loop2: detected capacity change from 0 to 64
[  166.735868][ T6425] hfs: get root inode failed
[  167.552383][ T6435] netlink: 'syz.3.136': attribute type 3 has an invalid length.
[  168.209519][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'.
[  169.183895][ T6450] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.475640][ T6458] cgroup: fork rejected by pids controller in /syz2
[  170.062588][ T6460] loop3: detected capacity change from 0 to 1024
[  170.139151][ T6460] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  170.263095][ T6460] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.143: lblock 2 mapped to illegal pblock 2 (length 1)
[  170.285091][ T6460] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  170.948635][ T6460] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.143: lblock 0 mapped to illegal pblock 48 (length 1)
[  171.426966][ T6460] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  171.480465][ T6460] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.143: Failed to acquire dquot type 0
[  171.531677][ T6460] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  171.693260][ T6460] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.143: mark_inode_dirty error
[  171.710117][ T6460] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  171.721888][ T6460] EXT4-fs (loop3): 1 orphan inode deleted
[  171.750299][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.770009][   T49] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  171.793247][   T49] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  172.076803][   T49] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 0
[  172.433467][ T6579] tipc: Started in network mode
[  172.438975][ T6579] tipc: Node identity 1645fd55fff7, cluster identity 4711
[  172.455032][ T6579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.570820][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.583026][ T6578] tipc: Disabling bearer <eth:syzkaller0>
[  172.592067][ T5768] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  172.610598][ T5768] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  172.639817][ T5768] EXT4-fs error (device loop3): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error
[  172.903205][ T6591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.185745][ T6807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.266728][ T6806] tipc: Disabling bearer <eth:syzkaller0>
[  176.678254][ T6824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.723634][ T6823] tipc: Disabling bearer <eth:syzkaller0>
[  176.760372][ T6829] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.421647][ T6938] netlink: 180 bytes leftover after parsing attributes in process `syz.1.165'.
[  178.168291][ T6942] syzkaller0: entered promiscuous mode
[  178.174521][ T6942] syzkaller0: entered allmulticast mode
[  179.350088][ T6945] sched: RT throttling activated
[  179.989204][ T6954] batman_adv: batadv0: Adding interface: macsec1
[  179.995925][ T6954] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.021976][ T6954] batman_adv: batadv0: Interface activated: macsec1
[  180.749214][ T6961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.772739][ T6960] tipc: Disabling bearer <eth:syzkaller0>
[  181.034120][ T6968] wg1: entered allmulticast mode
[  181.073308][ T6969] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.581871][ T7088] loop2: detected capacity change from 0 to 32768
[  182.637783][ T7088] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  183.605006][ T7088] XFS (loop2): Ending clean mount
[  183.629444][ T7088] XFS (loop2): Quotacheck needed: Please wait.
[  183.748979][ T7088] XFS (loop2): Quotacheck: Done.
[  184.590913][ T5767] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.756119][ T7219] loop3: detected capacity change from 0 to 512
[  184.822183][ T7219] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  184.835782][ T7219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  185.265960][ T7219] EXT4-fs (loop3): 1 truncate cleaned up
[  185.272866][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.482637][ T7223] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.496214][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.539498][ T7248] syzkaller0: entered promiscuous mode
[  187.558189][ T7248] syzkaller0: entered allmulticast mode
[  188.573739][ T7258] overlayfs: failed to clone upperpath
[  189.975733][ T7272] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  191.315011][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  192.753736][ T7287] sctp: failed to load transform for md5: -2
[  194.388031][ T7420] loop2: detected capacity change from 0 to 128
[  194.530312][ T7420] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.565279][ T7420] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.642618][ T7424] syzkaller0: entered promiscuous mode
[  194.864936][ T7424] syzkaller0: entered allmulticast mode
[  195.930593][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.008276][ T7438] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  196.334188][ T7450] netlink: 'syz.2.217': attribute type 4 has an invalid length.
[  196.804823][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  197.004740][ T7442] orangefs_mount: mount request failed with -4
[  198.082514][    T8] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  198.094210][    T8] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  198.110610][    T8] usb 4-1: config 1 interface 0 has no altsetting 0
[  198.120454][    T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  198.130330][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.144116][    T8] usb 4-1: Product: syz
[  198.149007][    T8] usb 4-1: Manufacturer: syz
[  198.153841][    T8] usb 4-1: SerialNumber: syz
[  198.167002][ T7451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  198.183581][ T7451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  200.778565][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  200.785709][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  201.300547][ T7483] overlayfs: failed to clone upperpath
[  201.550289][    T8] rtl8150 4-1:1.0: couldn't reset the device
[  201.896593][    T8] rtl8150: probe of 4-1:1.0 failed with error -5
[  202.068530][    T8] usb 4-1: USB disconnect, device number 3
[  202.217218][ T7489] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.500581][ T7499] warning: `syz.0.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  205.215844][ T7515] loop3: detected capacity change from 0 to 512
[  205.333532][ T7515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  205.573325][ T7515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.830569][ T7524] netlink: 180 bytes leftover after parsing attributes in process `syz.0.233'.
[  207.084783][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  207.138295][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  207.138302][ T5773] Bluetooth: hci3: command 0x0406 tx timeout
[  207.138378][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  207.592908][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.052895][ T7570] overlayfs: failed to clone upperpath
[  211.966216][ T7574] loop3: detected capacity change from 0 to 128
[  212.019458][ T7574] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  225.195337][ T7687] overlayfs: failed to clone upperpath
[  228.936797][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'.
[  232.214451][ T7750] batadv_slave_0: entered promiscuous mode
[  232.223672][ T7750] xt_l2tp: missing protocol rule (udp|l2tpip)
[  233.423324][ T7743] batadv_slave_0: left promiscuous mode
[  233.478777][ T7745] overlayfs: failed to clone upperpath
[  235.591720][ T7770] netlink: 'syz.1.289': attribute type 4 has an invalid length.
[  239.251852][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'.
[  241.721701][ T7847] hugetlbfs: syz.1.318 (7847): Using mlock ulimits for SHM_HUGETLB is obsolete
[  243.223913][ T5826] IPVS: starting estimator thread 0...
[  243.376133][ T7862] geneve2: entered promiscuous mode
[  243.381448][ T7862] geneve2: entered allmulticast mode
[  243.844858][ T7861] IPVS: using max 26 ests per chain, 62400 per kthread
[  244.666913][ T7871] overlayfs: failed to clone lowerpath
[  248.046041][ T7894] team_slave_1: Caught tx_queue_len zero misconfig
[  251.612958][ T7921] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  251.614836][   T27] audit: type=1800 audit(1775099991.016:26): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.329" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  251.623489][ T7921] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  251.654129][ T7921] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  251.711894][ T7921] syz.0.329 (7921) used greatest stack depth: 17648 bytes left
[  253.940130][ T7958] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  253.979449][ T7958] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  253.991156][ T7958] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  254.000791][ T7958] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  254.072822][ T7958] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  254.087906][ T7958] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  254.098382][ T7958] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  254.108801][ T7958] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  254.150547][ T7958] geneve3: entered promiscuous mode
[  254.787777][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'.
[  254.864739][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'.
[  255.753570][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  255.763776][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0
[  255.771522][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  255.781768][ T5082] Workqueue: hci3 hci_rx_work
[  255.786525][ T5082] Call Trace:
[  255.790108][ T5082]  <TASK>
[  255.793067][ T5082]  dump_stack_lvl+0x18c/0x250
[  255.797965][ T5082]  ? show_regs_print_info+0x20/0x20
[  255.803184][ T5082]  ? load_image+0x400/0x400
[  255.807716][ T5082]  sysfs_create_dir_ns+0x26e/0x2a0
[  255.813103][ T5082]  ? sysfs_warn_dup+0xa0/0xa0
[  255.817803][ T5082]  ? do_raw_spin_unlock+0x121/0x230
[  255.823040][ T5082]  kobject_add_internal+0x61c/0xcc0
[  255.828279][ T5082]  kobject_add+0x164/0x240
[  255.832722][ T5082]  ? __rwlock_init+0x150/0x150
[  255.837493][ T5082]  ? kobject_init+0x1e0/0x1e0
[  255.842259][ T5082]  ? _raw_spin_unlock+0x28/0x40
[  255.847135][ T5082]  ? get_device_parent+0x366/0x390
[  255.852288][ T5082]  device_add+0x408/0xc20
[  255.856720][ T5082]  hci_conn_add_sysfs+0xd5/0x1e0
[  255.862899][ T5082]  le_conn_complete_evt+0xf5d/0x1540
[  255.868198][ T5082]  ? hci_event_packet+0x4cb/0x1270
[  255.873338][ T5082]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  255.879908][ T5082]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  255.885544][ T5082]  ? skb_pull_data+0xfb/0x200
[  255.890308][ T5082]  hci_le_conn_complete_evt+0x187/0x440
[  255.896032][ T5082]  ? hci_remote_host_features_evt+0x150/0x150
[  255.902174][ T5082]  hci_event_packet+0x7ba/0x1270
[  255.907412][ T5082]  ? bis_list+0x290/0x290
[  255.912008][ T5082]  ? lockdep_hardirqs_on+0x98/0x150
[  255.917259][ T5082]  ? hci_send_to_monitor+0xd7/0x4f0
[  255.922772][ T5082]  hci_rx_work+0x43a/0xd60
[  255.927545][ T5082]  ? process_scheduled_works+0x96f/0x15d0
[  255.933306][ T5082]  process_scheduled_works+0xa5d/0x15d0
[  255.939053][ T5082]  ? worker_attach_to_pool+0x380/0x380
[  255.944639][ T5082]  ? assign_work+0x3d2/0x5d0
[  255.949452][ T5082]  worker_thread+0xa55/0xfc0
[  255.954066][ T5082]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  255.960057][ T5082]  ? _raw_spin_unlock+0x40/0x40
[  255.964919][ T5082]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  255.970843][ T5082]  kthread+0x2fa/0x390
[  255.975000][ T5082]  ? pr_cont_work+0x560/0x560
[  255.979866][ T5082]  ? kthread_blkcg+0xd0/0xd0
[  255.984568][ T5082]  ret_from_fork+0x48/0x80
[  255.989097][ T5082]  ? kthread_blkcg+0xd0/0xd0
[  255.993693][ T5082]  ret_from_fork_asm+0x11/0x20
[  255.998463][ T5082]  </TASK>
[  256.005915][ T5082] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  256.020954][ T5082] Bluetooth: hci3: failed to register connection device
[  256.958112][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'.
[  257.986662][ T7984] nbd: socks must be embedded in a SOCK_ITEM attr
[  261.685415][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  261.691981][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  262.375364][ T8032] netlink: 180 bytes leftover after parsing attributes in process `syz.1.356'.
[  262.386850][ T8032] overlayfs: failed to resolve './file1': -2
[  263.356243][ T8042] Invalid option length (57448) for dns_resolver key
[  267.370776][ T8083] overlayfs: failed to clone upperpath
[  269.248581][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'.
[  270.403063][ T5082] Bluetooth: hci3: unexpected event for opcode 0x1005
[  271.084787][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  272.300462][ T8126] overlayfs: failed to clone upperpath
[  273.208143][ T8128] netlink: 'syz.3.380': attribute type 10 has an invalid length.
[  273.435695][ T8128] team0: Port device dummy0 added
[  273.444997][ T8131] netlink: 'syz.3.380': attribute type 10 has an invalid length.
[  273.465770][ T8131] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  273.656128][ T8131] team0: Failed to send options change via netlink (err -105)
[  273.781303][ T8131] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  274.149645][ T8131] team0: Port device dummy0 removed
[  274.185841][ T8131] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  277.430959][ T8152] pimreg: entered allmulticast mode
[  277.896555][ T8155] delete_channel: no stack
[  278.764782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  280.388932][ T8182] overlayfs: failed to clone upperpath
[  280.530517][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.394'.
[  280.630912][ T8190] autofs4:pid:8190:autofs_fill_super: called with bogus options
[  280.643202][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'.
[  280.652290][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'.
[  280.665159][ T8190] geneve2: entered promiscuous mode
[  280.670385][ T8190] geneve2: entered allmulticast mode
[  284.015586][ T8227] overlayfs: missing 'lowerdir'
[  284.700040][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.735361][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.046291][ T8241] ceph: No mds server is up or the cluster is laggy
[  288.594947][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  298.742187][ T8323] syz.1.425 (8323) used greatest stack depth: 17352 bytes left
[  309.590554][ T8394] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  309.649832][ T8394] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  309.662814][ T8394] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  309.676535][ T8394] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  309.721472][ T8394] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  309.773508][ T8394] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  310.003315][ T8394] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  311.235765][ T8394] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  311.307701][ T8394] geneve2: entered promiscuous mode
[  311.397804][ T8411] syz.0.448 (8411): attempted to duplicate a private mapping with mremap.  This is not supported.
[  311.667843][ T8418] xt_TCPMSS: Only works on TCP SYN packets
[  312.541056][ T8423] netlink: 'syz.2.450': attribute type 10 has an invalid length.
[  313.287447][ T8423] team0: Port device dummy0 added
[  313.338526][ T8424] netlink: 'syz.2.450': attribute type 10 has an invalid length.
[  313.428219][ T8424] team0: Port device dummy0 removed
[  313.447535][ T8424] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  314.592447][  T786] IPVS: starting estimator thread 0...
[  314.669539][ T8437] netlink: 'syz.2.454': attribute type 1 has an invalid length.
[  314.865048][ T8434] IPVS: using max 36 ests per chain, 86400 per kthread
[  316.533430][ T5082] Bluetooth: hci3: unexpected event for opcode 0x080f
[  316.542593][ T8437] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.598911][ T8443] macvlan2: entered promiscuous mode
[  316.604261][ T8443] macvlan2: entered allmulticast mode
[  316.685254][ T8443] bond1: entered allmulticast mode
[  316.836317][ T8443] bond1: entered promiscuous mode
[  316.859886][ T8443] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  316.900681][ T8443] team0: Port device macvlan2 added
[  317.004336][ T8451] bond1: (slave ip6gretap1): making interface the new active one
[  317.087523][ T8451] ip6gretap1: entered promiscuous mode
[  317.127555][ T8451] ip6gretap1: entered allmulticast mode
[  317.174080][ T8451] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  317.615207][ T8466] xt_NFQUEUE: number of queues (51632) out of range (got 109621)
[  319.234745][ T8479] bridge0: port 3(syz_tun) entered disabled state
[  319.254575][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.279896][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.311625][ T8479] geneve2: left promiscuous mode
[  319.401562][ T5807] IPVS: starting estimator thread 0...
[  320.405162][ T8481] IPVS: using max 36 ests per chain, 86400 per kthread
[  320.531625][ T8484] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  320.599359][ T5082] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  320.608713][ T5082] Bluetooth: hci3: Injecting HCI hardware error event
[  320.618868][ T5082] Bluetooth: hci3: hardware error 0x00
[  323.304429][ T5082] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  323.620724][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  323.635481][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  325.621722][ T8530] xt_NFQUEUE: number of queues (51632) out of range (got 109621)
[  326.202537][ T8535] 9pnet_virtio: no channels available for device syz
[  326.218667][ T8535] netlink: 96 bytes leftover after parsing attributes in process `syz.3.476'.
[  328.580637][ T8542] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  329.078760][ T8555] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  330.058243][ T8566] xt_cgroup: path and classid specified
[  333.713281][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.724301][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.693968][ T8590] geneve2: left promiscuous mode
[  336.418501][ T8607] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  338.592453][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[  338.736423][ T8629] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  339.579198][ T8643] No such timeout policy "syz1"
[  341.050748][ T8655] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  341.355239][ T8660] netlink: 124 bytes leftover after parsing attributes in process `syz.3.507'.
[  341.542131][ T8668] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  343.578566][ T8690] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  345.907168][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'.
[  346.325767][ T8714] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  351.174630][ T8739] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  351.396921][ T8744] Cannot find add_set index 0 as target
[  355.350297][ T8773] netlink: 68 bytes leftover after parsing attributes in process `syz.0.535'.
[  355.972922][   T27] audit: type=1326 audit(1775100095.376:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.095437][   T27] audit: type=1326 audit(1775100095.376:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.122804][   T27] audit: type=1326 audit(1775100095.376:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.156192][   T27] audit: type=1326 audit(1775100095.376:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.179763][   T27] audit: type=1326 audit(1775100095.376:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.202732][   T27] audit: type=1326 audit(1775100095.486:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.226409][   T27] audit: type=1326 audit(1775100095.486:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.271965][   T27] audit: type=1326 audit(1775100095.486:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.295338][   T27] audit: type=1326 audit(1775100095.496:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.337941][   T27] audit: type=1326 audit(1775100095.496:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  356.368249][ T8780] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  360.235240][ T8811] bridge0: port 3(gretap0) entered blocking state
[  360.242280][ T8811] bridge0: port 3(gretap0) entered disabled state
[  360.249673][ T8811] gretap0: entered allmulticast mode
[  360.256244][ T8811] gretap0: entered promiscuous mode
[  360.262776][ T8811] bridge0: port 3(gretap0) entered blocking state
[  360.269423][ T8811] bridge0: port 3(gretap0) entered forwarding state
[  361.001277][ T8813] netlink: 'syz.2.548': attribute type 10 has an invalid length.
[  361.013703][ T8813] team0: Device ipvlan1 failed to register rx_handler
[  364.446064][ T8833] ptrace attach of "./syz-executor exec"[8840] was attempted by "./syz-executor exec"[8833]
[  370.252479][ T8885] mmap: syz.2.558 (8885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  373.917399][ T8908] SET target dimension over the limit!
[  375.071530][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.235891][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.236751][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.272502][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.285434][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.317037][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.377631][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.398548][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.409399][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.424902][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.436026][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.463274][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.558064][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'.
[  382.122575][ T8983] syz.2.592 uses obsolete (PF_INET,SOCK_PACKET)
[  382.651879][ T8992] 9pnet_fd: Insufficient options for proto=fd
[  384.038337][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  384.044972][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  385.971980][ T9010] GUP no longer grows the stack in syz.0.597 (9010): 200000006000-200000008000 (200000004000)
[  385.983348][ T9010] CPU: 0 PID: 9010 Comm: syz.0.597 Not tainted syzkaller #0
[  385.990766][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  386.000842][ T9010] Call Trace:
[  386.004152][ T9010]  <TASK>
[  386.007152][ T9010]  dump_stack_lvl+0x18c/0x250
[  386.011863][ T9010]  ? show_regs_print_info+0x20/0x20
[  386.017180][ T9010]  ? load_image+0x400/0x400
[  386.021786][ T9010]  ? find_vma+0x134/0x1b0
[  386.026269][ T9010]  fixup_user_fault+0x642/0x700
[  386.031160][ T9010]  fault_in_user_writeable+0x71/0xd0
[  386.036477][ T9010]  futex_lock_pi+0x274/0x9a0
[  386.041232][ T9010]  ? fixup_pi_state_owner+0x5e0/0x5e0
[  386.046811][ T9010]  ? userfaultfd_unmap_prep+0x3d0/0x3d0
[  386.052375][ T9010]  ? mas_find_setup+0x493/0x590
[  386.057436][ T9010]  do_futex+0x23d/0x3e0
[  386.061643][ T9010]  ? __ia32_sys_get_robust_list+0x110/0x110
[  386.067564][ T9010]  __se_sys_futex+0x3a9/0x440
[  386.072718][ T9010]  ? __x64_sys_futex+0xf0/0xf0
[  386.077569][ T9010]  ? __x64_sys_futex+0x21/0xf0
[  386.082534][ T9010]  do_syscall_64+0x55/0xa0
[  386.086966][ T9010]  ? clear_bhb_loop+0x40/0x90
[  386.091826][ T9010]  ? clear_bhb_loop+0x40/0x90
[  386.096546][ T9010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  386.102996][ T9010] RIP: 0033:0x7fb8c319c819
[  386.107640][ T9010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.128077][ T9010] RSP: 002b:00007fb8c40b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  386.136685][ T9010] RAX: ffffffffffffffda RBX: 00007fb8c3416180 RCX: 00007fb8c319c819
[  386.144859][ T9010] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000
[  386.152867][ T9010] RBP: 00007fb8c3232c91 R08: 0000000000000000 R09: 0000000000000002
[  386.160863][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.169074][ T9010] R13: 00007fb8c3416218 R14: 00007fb8c3416180 R15: 00007ffd6b89f308
[  386.177509][ T9010]  </TASK>
[  388.347746][ T5812] Process accounting resumed
[  390.448123][ T5082] Bluetooth: hci2: command 0x0406 tx timeout
[  391.444386][ T9039] bridge0: port 4(erspan0) entered blocking state
[  391.451238][ T9039] bridge0: port 4(erspan0) entered disabled state
[  391.458090][ T9039] erspan0: entered allmulticast mode
[  391.464644][ T9039] erspan0: entered promiscuous mode
[  396.307949][ T9110] Cannot find set identified by id 0 to match
[  398.102487][ T9125] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  399.170517][ T9130] 9pnet_virtio: no channels available for device syz
[  401.403754][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'.
[  402.326286][ T9148] overlayfs: failed to clone upperpath
[  402.727496][ T9162] netlink: 'syz.0.636': attribute type 9 has an invalid length.
[  402.735256][ T9162] netlink: 84 bytes leftover after parsing attributes in process `syz.0.636'.
[  405.452576][ T9178] xt_CT: No such helper "snmp_trap"
[  405.796843][ T9183] capability: warning: `syz.1.639' uses deprecated v2 capabilities in a way that may be insecure
[  405.906737][ T9183] macvtap1: entered promiscuous mode
[  405.912164][ T9183] macvtap1: entered allmulticast mode
[  405.924757][ T9183] dummy0: entered promiscuous mode
[  405.930996][ T9183] dummy0: entered allmulticast mode
[  405.954318][ T9183] team0: Device macvtap1 failed to register rx_handler
[  406.397994][ T9183] dummy0: left allmulticast mode
[  406.403611][ T9183] dummy0: left promiscuous mode
[  415.115419][ T9227] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722
[  415.121911][ T9227] PKCS7: Only support pkcs7_signedData type
[  416.413462][ T9231] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  417.039639][ T9229] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  418.147902][ T9256] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  418.178460][ T9256] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  419.667152][ T9276] tmpfs: Unknown parameter 'fscontext'
[  424.846330][ T9306] ceph: No mds server is up or the cluster is laggy
[  425.040027][ T9312] netlink: 64 bytes leftover after parsing attributes in process `syz.2.670'.
[  425.490177][ T9318] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  425.502931][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'.
[  425.514497][ T9321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'.
[  425.562209][ T9321] gretap1: entered promiscuous mode
[  425.993748][ T9334] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  426.009617][ T9334] Error parsing options; rc = [-22]
[  430.911142][ T9381] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  432.029425][ T9410] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  433.952967][ T9442] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  434.134476][ T5082] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  434.231291][ T5082] Bluetooth: hci1: Malformed Event: 0x13
[  434.589217][ T9469] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  435.409605][ T5082] Bluetooth: hci2: unexpected subevent 0x06 length: 18 > 10
[  436.183074][ T9509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  436.481870][ T9519] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  436.495470][ T9519] Error parsing options; rc = [-22]
[  438.066970][ T5082] Bluetooth: hci2: command 0x0406 tx timeout
[  438.312872][ T9524] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  438.938132][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'.
[  439.001170][ T9544] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  439.024034][ T9544] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  439.856096][ T9553] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  439.976062][ T9556] pim6reg: entered allmulticast mode
[  440.221188][ T9562] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  440.787486][ T9577] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  440.989995][ T9583] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  442.888209][ T9612] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  445.555268][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  445.561893][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  451.608143][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.822'.
[  453.052789][ T9740] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  456.343382][ T9767] bridge0: port 5(gretap0) entered blocking state
[  456.350491][ T9767] bridge0: port 5(gretap0) entered disabled state
[  456.358487][ T9767] gretap0: entered allmulticast mode
[  456.369863][ T9767] gretap0: entered promiscuous mode
[  461.521626][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.585298][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.635231][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.675253][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.705990][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.761901][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.827732][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.913645][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.924637][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.935686][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.954823][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.000747][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.109239][ T9852] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  463.872256][ T9857] netlink: 'syz.2.865': attribute type 10 has an invalid length.
[  463.880214][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.865'.
[  463.913855][ T9857] batadv0: entered promiscuous mode
[  463.934093][ T9857] batadv0: entered allmulticast mode
[  463.941129][ T9857] bridge0: port 3(batadv0) entered blocking state
[  463.960843][ T9857] bridge0: port 3(batadv0) entered disabled state
[  463.989361][ T9857] bridge0: port 3(batadv0) entered blocking state
[  463.996454][ T9857] bridge0: port 3(batadv0) entered forwarding state
[  465.008917][   T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  465.018912][   T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  465.304801][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'.
[  465.391047][ T9877] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  466.999850][ T9909] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  468.373091][ T5826] Process accounting resumed
[  469.445185][ T9943] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  470.173852][ T9952] netlink: 'syz.3.899': attribute type 9 has an invalid length.
[  470.181665][ T9952] netlink: 84 bytes leftover after parsing attributes in process `syz.3.899'.
[  471.615718][ T9957] 9pnet_fd: Insufficient options for proto=fd
[  472.510406][ T9960] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  474.354564][ T9978] bridge0: port 3(gretap0) entered blocking state
[  474.362081][ T9978] bridge0: port 3(gretap0) entered disabled state
[  474.370201][ T9978] gretap0: entered allmulticast mode
[  474.383631][ T9978] gretap0: entered promiscuous mode
[  476.473086][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  476.542387][ T9996] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  478.623474][T10011] ceph: No mds server is up or the cluster is laggy
[  478.900861][T10030] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  480.998972][T10054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  482.769218][T10081] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  483.484358][T10063] ceph: No mds server is up or the cluster is laggy
[  483.835300][T10098] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  487.105823][T10135] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  490.423419][T10168] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  492.230300][T10212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  494.154992][T10229] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  494.176970][T10229] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  494.200296][T10229] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  494.212731][T10229] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  495.102110][T10229] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  495.113718][T10229] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  495.131383][T10229] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  495.146783][T10229] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  495.158111][T10229] geneve3: entered promiscuous mode
[  495.305968][T10237] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  495.311774][T10238] macvtap1: entered promiscuous mode
[  495.315878][T10237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  495.320864][T10238] macvtap1: entered allmulticast mode
[  495.331365][T10237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  495.337893][T10238] dummy0: entered promiscuous mode
[  495.351048][T10238] dummy0: entered allmulticast mode
[  495.382127][T10238] team0: Device macvtap1 failed to register rx_handler
[  496.022138][T10238] dummy0: left allmulticast mode
[  496.027899][T10238] dummy0: left promiscuous mode
[  496.207770][T10249] netlink: 'syz.1.989': attribute type 1 has an invalid length.
[  496.336830][T10251] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.388118][T10275] overlayfs: failed to clone upperpath
[  498.485825][T10272] pim6reg: entered allmulticast mode
[  498.705941][T10285] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  501.519698][T10299] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  501.533935][T10299] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  501.544197][T10299] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  501.817214][T10299] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  501.888696][T10299] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  501.903311][T10299] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  501.915762][T10299] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  501.928292][T10299] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  501.976274][T10299] geneve2: entered promiscuous mode
[  502.038256][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  502.060947][T10321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  503.899452][T10352] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  504.557590][T10368] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  506.813501][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1032'.
[  507.207271][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  507.213641][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  507.279865][T10390] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  507.322173][T10392] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  507.503693][T10404] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  510.945942][T10437] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  511.396284][T10443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  511.821279][T10455] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  513.467976][T10475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  513.500427][T10480] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  513.980626][T10488] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  514.233112][ T5082] Bluetooth: hci2: unknown advertising packet type: 0x20
[  514.326806][T10499] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  514.547334][T10507] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  517.602898][T10552] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  519.196481][T10569] overlayfs: failed to resolve './file0': -2
[  520.533400][T10587] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  524.004178][T10618] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  524.842341][T10637] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1121'.
[  525.007586][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1121'.
[  525.160863][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1121'.
[  525.317188][T10646] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  526.498978][T10662] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1123'.
[  531.560944][T10718] 9pnet_fd: Insufficient options for proto=fd
[  531.794168][T10729] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  534.727585][T10767] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  539.398581][T10853] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  539.408301][T10853] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  539.425245][T10853] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  539.434230][T10853] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  539.471707][T10853] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.483449][T10853] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.492770][T10853] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.502054][T10853] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.539363][T10853] geneve2: entered promiscuous mode
[  543.013295][T10933] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.271372][T10941] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  548.271298][T10995] batadv_slave_0: entered promiscuous mode
[  548.310621][T10995] batman_adv: batadv0: Adding interface: macvtap1
[  548.353973][T10995] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.419990][T10995] batman_adv: batadv0: Interface activated: macvtap1
[  554.363438][T11047] Set syz1 is full, maxelem 0 reached
[  555.091704][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1294'.
[  556.187115][T11112] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  556.205616][T11112] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  556.217974][T11112] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  556.229763][T11112] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  556.270757][T11112] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  556.285343][T11112] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  556.300662][T11112] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  556.310883][T11112] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  556.335725][T11112] geneve3: entered promiscuous mode
[  559.040558][T11152] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1314'.
[  559.090161][T11152] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1314'.
[  559.457336][T11166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1320'.
[  559.482366][T11166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1320'.
[  559.532174][T11166] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.582471][   T27] kauditd_printk_skb: 60 callbacks suppressed
[  562.582487][   T27] audit: type=1326 audit(1775100788.985:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11225 comm="syz.1.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289d79c819 code=0x0
[  568.358442][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  568.365097][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  580.125096][T11428] veth1_to_bond: Caught tx_queue_len zero misconfig
[  585.601125][T11458] overlayfs: failed to clone lowerpath
[  586.869189][T11475] 9pnet_fd: Insufficient options for proto=fd
[  589.169760][T11506] 9pnet_fd: Insufficient options for proto=fd
[  626.245503][T11826] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1554'.
[  631.415933][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  631.423175][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  691.932208][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  691.942202][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  720.286075][T12397] geneve2: entered promiscuous mode
[  731.308209][T12478] geneve3: entered promiscuous mode
[  753.186463][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  753.192980][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  754.238821][T12679] 9pnet_fd: Insufficient options for proto=fd
[  764.408752][T12829] bridge2: entered promiscuous mode
[  772.176768][T12963] tls_set_device_offload_rx: netdev not found
[  776.320712][T13026] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1888'.
[  785.317357][T13161] overlayfs: failed to clone upperpath
[  789.283147][T13194] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1944'.
[  789.468982][T13206] lo: Caught tx_queue_len zero misconfig
[  791.048865][   T27] audit: type=1326 audit(1775101017.455:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.2.1956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04c7f9c819 code=0x0
[  791.784016][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'.
[  792.005620][T13262] overlayfs: failed to clone lowerpath
[  794.975678][T13305] fuse: Bad value for 'fd'
[  794.983193][T13305] overlayfs: failed to clone lowerpath
[  795.977771][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  795.990005][ T5082] Bluetooth: hci1: Injecting HCI hardware error event
[  795.999579][ T5082] Bluetooth: hci1: hardware error 0x00
[  798.429803][T13370] overlayfs: failed to clone upperpath
[  798.695189][ T5082] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  803.272245][T13450] overlayfs: failed to clone upperpath
[  803.291601][T13450] overlayfs: failed to clone upperpath
[  807.956360][T13531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'.
[  811.799054][   T27] audit: type=1326 audit(1775101038.205:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  811.855061][   T27] audit: type=1326 audit(1775101038.205:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  811.910101][   T27] audit: type=1326 audit(1775101038.235:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04c7f5d04e code=0x7ffc0000
[  811.960155][   T27] audit: type=1326 audit(1775101038.235:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  812.007256][   T27] audit: type=1326 audit(1775101038.235:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  812.058496][   T27] audit: type=1326 audit(1775101038.235:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  812.122902][   T27] audit: type=1326 audit(1775101038.235:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  812.155860][   T27] audit: type=1326 audit(1775101038.235:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  812.193850][   T27] audit: type=1326 audit(1775101038.235:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04c7f5d04e code=0x7ffc0000
[  812.567593][   T27] audit: type=1326 audit(1775101038.235:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c7f9c819 code=0x7ffc0000
[  813.029392][T13635] 9pnet_fd: Insufficient options for proto=fd
[  814.155531][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  814.170799][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  816.313457][T13701] overlayfs: failed to clone upperpath
[  817.915040][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  817.915126][   T27] audit: type=1326 audit(1775101044.315:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.3.2144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f9659c819 code=0x0
[  819.171944][T13752] overlayfs: failed to clone upperpath
[  839.320746][T13936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2201'.
[  839.355661][T13936] unsupported nlmsg_type 40
[  875.959172][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  875.966412][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  911.602447][T14459] overlayfs: failed to clone upperpath
[  913.141262][T14474] overlayfs: failed to clone upperpath
[  913.439871][T14486] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  919.095907][T14514] overlayfs: failed to clone upperpath
[  919.118033][T14514] overlayfs: failed to clone lowerpath
[  919.267765][    C1] Unknown status report in ack skb
[  923.735637][T14562] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2385'.
[  923.780408][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'.
[  926.669700][T14580] overlayfs: failed to clone upperpath
Stopping sshd: stopped /usr/sbin/sshd (pid 5527)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5510)
OK
[  930.900037][T14619] overlayfs: failed to clone upperpath
Stopping dhcpcd...
[  931.184850][T14627] overlayfs: failed to clone upperpath
stopped /sbin/dhcpcd (pid 5431)
Stopping network: [  934.740678][    C1] ------------[ cut here ]------------
[  934.746364][    C1] WARNING: CPU: 1 PID: 14656 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  934.756588][    C1] Modules linked in:
[  934.760628][    C1] CPU: 1 PID: 14656 Comm: syz.2.2410 Not tainted syzkaller #0
[  934.766824][ T1138] ------------[ cut here ]------------
[  934.768254][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  934.774020][ T1138] WARNING: CPU: 0 PID: 1138 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  934.784809][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  934.784841][    C1] Code: 24 4c 89 e7 e8 4e d5 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 0e 83 f7 0f 0b e9 f6 f7 ff ff e8 bd 0e 83 f7 <0f> 0b e9 48 fb ff ff e8 b1 0e 83 f7 48 c7 c7 40 73 64 8e 4c 89 e6
[  934.784857][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[  934.784876][    C1] RAX: ffffffff8a041163 RBX: ffffffff8a03ff66 RCX: ffff88807a408000
[  934.784889][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  934.784901][    C1] RBP: 0000000000000000 R08: ffff88807a408000 R09: 0000000000000003
[  934.784913][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c1723c0
[  934.784925][    C1] R13: dffffc0000000000 R14: ffff88805c1728b0 R15: ffff88805d612c24
[  934.784938][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  934.784951][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  934.784963][    C1] CR2: 0000200001000000 CR3: 000000000cf32000 CR4: 00000000003506e0
[  934.784980][    C1] Call Trace:
[  934.784990][    C1]  <IRQ>
[  934.785003][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  934.796089][ T1138] Modules linked in:
[  934.802390][    C1]  ieee80211_beacon_get_tim+0xbf/0x580
[  934.822406][ T1138] 
[  934.828379][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  934.828418][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  934.828448][    C1]  __iterate_interfaces+0x243/0x500
[  934.828477][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  934.828501][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  934.836601][ T1138] CPU: 0 PID: 1138 Comm: kworker/u4:6 Not tainted syzkaller #0
[  934.844481][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  934.844509][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  934.844542][    C1]  mac80211_hwsim_beacon+0xbb/0x1b0
[  934.844566][    C1]  __hrtimer_run_queues+0x520/0xc40
[  934.844591][    C1]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  934.844623][    C1]  ? hw_scan_work+0xf60/0xf60
[  934.844680][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  934.844703][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  934.844736][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  934.844763][    C1]  handle_softirqs+0x280/0x820
[  934.844790][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  934.844816][    C1]  ? do_softirq+0x1a0/0x1a0
[  934.844842][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  934.844868][    C1]  __irq_exit_rcu+0xd3/0x190
[  934.852932][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  934.861173][    C1]  ? irq_exit_rcu+0x20/0x20
[  934.861216][    C1]  irq_exit_rcu+0x9/0x20
[  934.861296][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  934.861320][    C1]  </IRQ>
[  934.861327][    C1]  <TASK>
[  934.861342][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  934.861392][    C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  934.861419][    C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5a fd d8 f6 48 89 df e8 12 d2 d9 f6 e8 dd e2 fd f6 fb bf 01 00 00 00 <e8> f2 d8 cc f6 65 8b 05 63 06 74 75 85 c0 74 02 5b c3 e8 e0 ed 70
[  934.861436][    C1] RSP: 0018:ffffc90003917360 EFLAGS: 00000286
[  934.861456][    C1] RAX: 790e724b9cb62100 RBX: ffff88807a7dd008 RCX: 790e724b9cb62100
[  934.861472][    C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001
[  934.861485][    C1] RBP: 00000000000000c0 R08: ffffffff911c3507 R09: 1ffffffff22386a0
[  934.861501][    C1] R10: dffffc0000000000 R11: fffffbfff22386a1 R12: dffffc0000000000
[  934.861514][    C1] R13: 1ffffd400028b9e9 R14: 0000000000000194 R15: ffff88807a7dd008
[  934.861545][    C1]  delete_from_swap_cache+0xc7/0x290
[  934.861579][    C1]  folio_free_swap+0x5ad/0xc00
[  934.869906][ T1138] Workqueue: phy3 ieee80211_csa_finalize_work
[  934.878763][    C1]  __try_to_reclaim_swap+0x15e/0x530
[  934.885664][ T1138] 
[  934.893790][    C1]  ? free_swap_and_cache+0x236/0x4a0
[  934.897248][ T1138] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  934.900057][    C1]  free_swap_and_cache+0x246/0x4a0
[  934.905829][ T1138] Code: 48 89 df e8 da 9e d6 f7 e9 dc fc ff ff e8 e0 62 7e f7 eb 24 e8 d9 62 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 c8 62 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ba 62 7e f7 48 8b 7c 24 08 4c 8b 7c
[  934.909658][    C1]  unmap_page_range+0x133f/0x3000
[  934.915184][ T1138] RSP: 0018:ffffc9000472f9c0 EFLAGS: 00010293
[  934.917479][    C1]  ? copy_page_range+0x3670/0x3670
[  934.924362][ T1138] 
[  934.924371][ T1138] RAX: ffffffff8a08b95e RBX: 0000000000000001 RCX: ffff888023d71e00
[  934.929923][    C1]  ? unmap_single_vma+0x1b0/0x2a0
[  934.935193][ T1138] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  934.941461][    C1]  unmap_vmas+0x286/0x3f0
[  934.949198][ T1138] RBP: dffffc0000000000 R08: ffff88805c0655af R09: 1ffff1100b80cab5
[  934.956400][    C1]  ? unmap_page_range+0x3000/0x3000
[  934.956434][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  934.956469][    C1]  exit_mmap+0x238/0xb90
[  934.963104][ T1138] R10: dffffc0000000000 R11: ffffed100b80cab6 R12: 0000000000000001
[  934.969963][    C1]  ? exit_mm_release+0x1a/0x30
[  934.970003][    C1]  ? vm_brk+0x30/0x30
[  934.970025][    C1]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  934.970070][    C1]  ? uprobe_clear_state+0x278/0x290
[  934.975325][ T1138] R13: ffff88805c0665d9 R14: ffff88807d91ac70 R15: ffff88807d91ace8
[  934.980489][    C1]  ? mm_update_next_owner+0x562/0x6c0
[  934.986761][ T1138] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  934.991395][    C1]  __mmput+0x118/0x3c0
[  934.996582][ T1138] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  935.002687][    C1]  exit_mm+0x1f2/0x2c0
[  935.007803][ T1138] CR2: 00007f8f747adbe8 CR3: 00000000611bd000 CR4: 00000000003506f0
[  935.012697][    C1]  ? do_exit+0x2460/0x2460
[  935.017522][ T1138] Call Trace:
[  935.021932][    C1]  ? taskstats_exit+0x35e/0x9e0
[  935.027293][ T1138]  <TASK>
[  935.031929][    C1]  do_exit+0x8dd/0x2460
[  935.042158][ T1138]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  935.046624][    C1]  ? put_task_struct+0xc0/0xc0
[  935.046659][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  935.046680][    C1]  ? get_signal+0x1068/0x13f0
[  935.046698][    C1]  ? lock_chain_count+0x20/0x20
[  935.046717][    C1]  ? _raw_spin_lock_irq+0xbb/0xf0
[  935.046743][    C1]  do_group_exit+0x21b/0x2d0
[  935.046768][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  935.046794][    C1]  get_signal+0x12fc/0x13f0
[  935.046833][    C1]  arch_do_signal_or_restart+0xc2/0x800
[  935.046872][    C1]  ? __ia32_sys_get_robust_list+0x110/0x110
[  935.046895][    C1]  ? get_sigframe_size+0x20/0x20
[  935.046944][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[  935.046978][    C1]  exit_to_user_mode_loop+0x70/0x110
[  935.047015][    C1]  exit_to_user_mode_prepare+0xee/0x180
[  935.051264][ T1138]  ieee80211_csa_finalize+0x5a6/0xf20
[  935.057003][    C1]  syscall_exit_to_user_mode+0x1a/0x50
[  935.057031][    C1]  do_syscall_64+0x61/0xa0
[  935.057056][    C1]  ? clear_bhb_loop+0x40/0x90
[  935.057075][    C1]  ? clear_bhb_loop+0x40/0x90
[  935.057098][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  935.060242][ T1138]  ? mutex_lock_nested+0x20/0x20
[  935.062956][    C1] RIP: 0033:0x7f04c7f9c819
[  935.068995][ T1138]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  935.074747][    C1] Code: Unable to access opcode bytes at 0x7f04c7f9c7ef.
[  935.074770][    C1] RSP: 002b:00007f04c8ea80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  935.074792][    C1] RAX: fffffffffffffe00 RBX: 00007f04c8216188 RCX: 00007f04c7f9c819
[  935.095133][ T1138]  ? ieee80211_csa_finalize_work+0x140/0x140
[  935.101397][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04c8216188
[  935.109396][ T1138]  ? read_lock_is_recursive+0x20/0x20
[  935.117371][    C1] RBP: 00007f04c8216180 R08: 0000000000000000 R09: 0000000000000000
[  935.117386][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  935.117398][    C1] R13: 00007f04c8216218 R14: 00007ffe89895b30 R15: 00007ffe89895c18
[  935.117424][    C1]  </TASK>
[  935.125579][ T1138]  ieee80211_csa_finalize_work+0xf6/0x140
[  935.133558][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  935.133573][    C1] CPU: 1 PID: 14656 Comm: syz.2.2410 Not tainted syzkaller #0
[  935.133589][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  935.133598][    C1] Call Trace:
[  935.133609][    C1]  <IRQ>
[  935.133619][    C1]  dump_stack_lvl+0x18c/0x250
[  935.133657][    C1]  ? show_regs_print_info+0x20/0x20
[  935.133685][    C1]  ? load_image+0x400/0x400
[  935.133789][    C1]  panic+0x2dc/0x730
[  935.133815][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  935.133850][    C1]  __warn+0x2e0/0x470
[  935.133870][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  935.133897][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  935.133919][    C1]  report_bug+0x2be/0x4f0
[  935.133936][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  935.133959][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  935.133981][    C1]  ? __ieee80211_beacon_get+0x1235/0x1600
[  935.134010][    C1]  handle_bug+0xcf/0x120
[  935.134028][    C1]  exc_invalid_op+0x1a/0x50
[  935.134044][    C1]  asm_exc_invalid_op+0x1a/0x20
[  935.134067][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  935.134092][    C1] Code: 24 4c 89 e7 e8 4e d5 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 0e 83 f7 0f 0b e9 f6 f7 ff ff e8 bd 0e 83 f7 <0f> 0b e9 48 fb ff ff e8 b1 0e 83 f7 48 c7 c7 40 73 64 8e 4c 89 e6
[  935.134134][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[  935.134151][    C1] RAX: ffffffff8a041163 RBX: ffffffff8a03ff66 RCX: ffff88807a408000
[  935.134165][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  935.134177][    C1] RBP: 0000000000000000 R08: ffff88807a408000 R09: 0000000000000003
[  935.134188][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c1723c0
[  935.134200][    C1] R13: dffffc0000000000 R14: ffff88805c1728b0 R15: ffff88805d612c24
[  935.134218][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  935.134241][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  935.134269][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  935.134293][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  935.134322][    C1]  ieee80211_beacon_get_tim+0xbf/0x580
[  935.134348][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  935.134382][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  935.134412][    C1]  __iterate_interfaces+0x243/0x500
[  935.134439][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  935.134460][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  935.134489][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  935.134511][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  935.134543][    C1]  mac80211_hwsim_beacon+0xbb/0x1b0
[  935.134565][    C1]  __hrtimer_run_queues+0x520/0xc40
[  935.134586][    C1]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  935.134615][    C1]  ? hw_scan_work+0xf60/0xf60
[  935.134640][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  935.134663][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  935.134694][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  935.134718][    C1]  handle_softirqs+0x280/0x820
[  935.134743][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  935.134764][    C1]  ? do_softirq+0x1a0/0x1a0
[  935.134786][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  935.134813][    C1]  __irq_exit_rcu+0xd3/0x190
[  935.134832][    C1]  ? irq_exit_rcu+0x20/0x20
[  935.134857][    C1]  irq_exit_rcu+0x9/0x20
[  935.134871][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  935.134911][    C1]  </IRQ>
[  935.134917][    C1]  <TASK>
[  935.134925][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  935.134947][    C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  935.134968][    C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5a fd d8 f6 48 89 df e8 12 d2 d9 f6 e8 dd e2 fd f6 fb bf 01 00 00 00 <e8> f2 d8 cc f6 65 8b 05 63 06 74 75 85 c0 74 02 5b c3 e8 e0 ed 70
[  935.134982][    C1] RSP: 0018:ffffc90003917360 EFLAGS: 00000286
[  935.135003][    C1] RAX: 790e724b9cb62100 RBX: ffff88807a7dd008 RCX: 790e724b9cb62100
[  935.135017][    C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001
[  935.135055][    C1] RBP: 00000000000000c0 R08: ffffffff911c3507 R09: 1ffffffff22386a0
[  935.135068][    C1] R10: dffffc0000000000 R11: fffffbfff22386a1 R12: dffffc0000000000
[  935.135081][    C1] R13: 1ffffd400028b9e9 R14: 0000000000000194 R15: ffff88807a7dd008
[  935.135110][    C1]  delete_from_swap_cache+0xc7/0x290
[  935.135140][    C1]  folio_free_swap+0x5ad/0xc00
[  935.135173][    C1]  __try_to_reclaim_swap+0x15e/0x530
[  935.135200][    C1]  ? free_swap_and_cache+0x236/0x4a0
[  935.135230][    C1]  free_swap_and_cache+0x246/0x4a0
[  935.135259][    C1]  unmap_page_range+0x133f/0x3000
[  935.135315][    C1]  ? copy_page_range+0x3670/0x3670
[  935.135344][    C1]  ? unmap_single_vma+0x1b0/0x2a0
[  935.135375][    C1]  unmap_vmas+0x286/0x3f0
[  935.135406][    C1]  ? unmap_page_range+0x3000/0x3000
[  935.135435][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  935.135471][    C1]  exit_mmap+0x238/0xb90
[  935.135495][    C1]  ? exit_mm_release+0x1a/0x30
[  935.135518][    C1]  ? vm_brk+0x30/0x30
[  935.135539][    C1]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  935.135577][    C1]  ? uprobe_clear_state+0x278/0x290
[  935.135597][    C1]  ? mm_update_next_owner+0x562/0x6c0
[  935.135627][    C1]  __mmput+0x118/0x3c0
[  935.135648][    C1]  exit_mm+0x1f2/0x2c0
[  935.135675][    C1]  ? do_exit+0x2460/0x2460
[  935.135701][    C1]  ? taskstats_exit+0x35e/0x9e0
[  935.135725][    C1]  do_exit+0x8dd/0x2460
[  935.135760][    C1]  ? put_task_struct+0xc0/0xc0
[  935.135790][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  935.135810][    C1]  ? get_signal+0x1068/0x13f0
[  935.135829][    C1]  ? lock_chain_count+0x20/0x20
[  935.135849][    C1]  ? _raw_spin_lock_irq+0xbb/0xf0
[  935.135872][    C1]  do_group_exit+0x21b/0x2d0
[  935.135898][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  935.135921][    C1]  get_signal+0x12fc/0x13f0
[  935.135957][    C1]  arch_do_signal_or_restart+0xc2/0x800
[  935.135992][    C1]  ? __ia32_sys_get_robust_list+0x110/0x110
[  935.136012][    C1]  ? get_sigframe_size+0x20/0x20
[  935.136053][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[  935.136082][    C1]  exit_to_user_mode_loop+0x70/0x110
[  935.136108][    C1]  exit_to_user_mode_prepare+0xee/0x180
[  935.136151][    C1]  syscall_exit_to_user_mode+0x1a/0x50
[  935.136173][    C1]  do_syscall_64+0x61/0xa0
[  935.136198][    C1]  ? clear_bhb_loop+0x40/0x90
[  935.136218][    C1]  ? clear_bhb_loop+0x40/0x90
[  935.136241][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  935.136262][    C1] RIP: 0033:0x7f04c7f9c819
[  935.136277][    C1] Code: Unable to access opcode bytes at 0x7f04c7f9c7ef.
[  935.136285][    C1] RSP: 002b:00007f04c8ea80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  935.136303][    C1] RAX: fffffffffffffe00 RBX: 00007f04c8216188 RCX: 00007f04c7f9c819
[  935.136316][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04c8216188
[  935.136327][    C1] RBP: 00007f04c8216180 R08: 0000000000000000 R09: 0000000000000000
[  935.136339][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  935.136349][    C1] R13: 00007f04c8216218 R14: 00007ffe89895b30 R15: 00007ffe89895c18
[  935.136375][    C1]  </TASK>
[  935.141973][    C1] Kernel Offset: disabled