last executing test programs:

1m54.755905935s ago: executing program 0 (id=666):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x8000, 0x2b438843, 0x6}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x800, {0x5, 0x3, 0xe0, 0x5, 0x5, 0x1, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x5, 0xfffffffd, 0x1000, 0x0, r2, r3, 0x7, 0x42}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90, 0x0, 0x7, {0x5, 0x3, 0xfffffffffffffffd, 0x4000000000008, 0x6, 0x800081, {0x2, 0x800, 0x8, 0x100000000001, 0x7, 0x6, 0x8, 0xafb, 0x2008, 0x1000, 0xe44, r2, r3, 0x5, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa04423, 0x0)

1m53.42354473s ago: executing program 0 (id=676):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_setup(0xea, &(0x7f00000000c0)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200037}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r6, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = dup(r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
read(r9, &(0x7f0000000500)=""/155, 0x9b)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
dup(r7)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c)

1m50.951271011s ago: executing program 0 (id=681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x8000000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)

1m50.662543538s ago: executing program 0 (id=683):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
clock_settime(0x0, &(0x7f0000000000)={0x77359400})

1m50.542645449s ago: executing program 0 (id=684):
r0 = timerfd_create(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read(r0, &(0x7f0000000240)=""/123, 0x7b)

1m49.441449081s ago: executing program 0 (id=694):
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='./file0\x00')
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000080070000001e000000070000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000100))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a04", 0xa1}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)
io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)

1m34.414978199s ago: executing program 32 (id=694):
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='./file0\x00')
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000080070000001e000000070000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000100))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a04", 0xa1}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)
io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)

10.773556097s ago: executing program 3 (id=1184):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c)
write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a", 0x40)

10.707487969s ago: executing program 3 (id=1186):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2b, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
gettid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x4, 0x1, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d})
r5 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x9, 0x80, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0x2], [0x101, 0x0, 0x0, 0xb1e5], [0x0, 0x8000000000]})

8.326511346s ago: executing program 2 (id=1188):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x82)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x100)
io_setup(0x1ff, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, 0x0, 0xfe, 0xa00}])

8.325294518s ago: executing program 3 (id=1189):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x50b, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x7b, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

8.167218141s ago: executing program 3 (id=1192):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, 0x0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYBLOB="00002400000000002400120014000100627269"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

7.653350989s ago: executing program 2 (id=1197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x200})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3})
r1 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r1, 0x4})
write$eventfd(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc2c45513, &(0x7f0000000240)={{0x3, 0x5, 0x50, 0x9, 'syz0\x00', 0x6f}, 0x0, [0xa42, 0x8, 0x1ff, 0x10001, 0x2, 0x4c5cceb, 0x65, 0xffff, 0x8cb, 0xe, 0x1, 0x87, 0xb8, 0x1, 0x9294, 0x1, 0x5, 0x7, 0x9, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffc, 0xffffffff, 0x77b2, 0x5, 0x4bc8, 0x80, 0x444, 0x80000001, 0xf, 0x1ff, 0x8, 0x1, 0x1, 0x8, 0x200, 0x6, 0x101, 0x9, 0x1, 0x8c, 0x80000000, 0xe, 0x6, 0xac8, 0x7, 0x4, 0x1ff, 0x8, 0x80, 0xcae1, 0xa213, 0x8000, 0xefe2, 0xec8, 0x6, 0x8, 0x7, 0x38fea0b3, 0x9, 0x4, 0x7, 0xd, 0x39, 0x26, 0x4, 0x4, 0xc1b, 0x1, 0xffffff66, 0x6, 0x5, 0x40, 0x101, 0x7, 0x5e0a, 0x1, 0x2, 0x401, 0x9, 0x40, 0x5, 0x7, 0x5, 0xffff33ba, 0xfffffffc, 0x7fffffff, 0x6, 0x1, 0x8bd6, 0x3, 0xffffff01, 0x9, 0x5, 0x10001, 0x1, 0xd00000, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x64f76898, 0x5, 0x9, 0x1, 0x3ff, 0x24000, 0xe5, 0x2a85, 0x0, 0x4, 0x795, 0x8, 0x3, 0x8, 0x6, 0x0, 0x80, 0x3, 0x7, 0xfffffffc, 0x401, 0x7]})
unshare(0x28000600)
flock(0xffffffffffffffff, 0x2)

5.027531347s ago: executing program 3 (id=1210):
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x110, 0x30, 0x10, 0x0, 0x25dfdbfc, {}, [{0xfc, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x2, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xb4, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x6e, 0x6, "c31c872ec4e55a9740e1e88a9d4e085846a9d7a9436cb2cdb533b595d0799568723559173a731aeb5cb3219a8bd279ce47c0bd89d1dae0e3567ff9c16bace61e9f7e23efe8dcb13b65dbb5008b5aa340c85caa17f11b3898f1ca9861039e2d2ea338531cd36a88d4c322"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x11003e2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x3, 0x0, 0x0, "ee4f6da8d2cf4011ac7b00", 0x32314742})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
getpid()

5.025395557s ago: executing program 5 (id=1211):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2b, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
gettid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x4, 0x1, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d})
r5 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x9, 0x80, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x0, 0x2], [0x101, 0x0, 0x0, 0xb1e5], [0x0, 0x8000000000]})

4.683566016s ago: executing program 2 (id=1214):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x82)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x100)
io_setup(0x1ff, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r1, 0x0, 0xfe, 0xa00}])
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0)
syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r3, 0xd0b05000)

3.035197862s ago: executing program 4 (id=1216):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

2.95647418s ago: executing program 5 (id=1218):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x82)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x100)
io_setup(0x1ff, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, 0x0, 0xfe, 0xa00}])

2.835477073s ago: executing program 4 (id=1219):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
r0 = syz_io_uring_setup(0x6393, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x0, 0x75}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xa, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10, 0x4})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
close(0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.740431272s ago: executing program 2 (id=1221):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, 0x0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYBLOB="00002400000000002400120014000100627269"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

2.484536252s ago: executing program 5 (id=1224):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x200})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3})
r1 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r1, 0x4})
write$eventfd(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc2c45513, &(0x7f0000000240)={{0x3, 0x5, 0x50, 0x9, 'syz0\x00', 0x6f}, 0x0, [0xa42, 0x8, 0x1ff, 0x10001, 0x2, 0x4c5cceb, 0x65, 0xffff, 0x8cb, 0xe, 0x1, 0x87, 0xb8, 0x1, 0x9294, 0x1, 0x5, 0x7, 0x9, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffc, 0xffffffff, 0x77b2, 0x5, 0x4bc8, 0x80, 0x444, 0x80000001, 0xf, 0x1ff, 0x8, 0x1, 0x1, 0x8, 0x200, 0x6, 0x101, 0x9, 0x1, 0x8c, 0x80000000, 0xe, 0x6, 0xac8, 0x7, 0x4, 0x1ff, 0x8, 0x80, 0xcae1, 0xa213, 0x8000, 0xefe2, 0xec8, 0x6, 0x8, 0x7, 0x38fea0b3, 0x9, 0x4, 0x7, 0xd, 0x39, 0x26, 0x4, 0x4, 0xc1b, 0x1, 0xffffff66, 0x6, 0x5, 0x40, 0x101, 0x7, 0x5e0a, 0x1, 0x2, 0x401, 0x9, 0x40, 0x5, 0x7, 0x5, 0xffff33ba, 0xfffffffc, 0x7fffffff, 0x6, 0x1, 0x8bd6, 0x3, 0xffffff01, 0x9, 0x5, 0x10001, 0x1, 0xd00000, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x64f76898, 0x5, 0x9, 0x1, 0x3ff, 0x24000, 0xe5, 0x2a85, 0x0, 0x4, 0x795, 0x8, 0x3, 0x8, 0x6, 0x0, 0x80, 0x3, 0x7, 0xfffffffc, 0x401, 0x7]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r4, 0x2)

2.459458615s ago: executing program 3 (id=1225):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.191492842s ago: executing program 5 (id=1226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001780)=ANY=[@ANYBLOB="14000000100001000000000000000000c500000a440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001800038014000080040001800c00044020"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.314702091s ago: executing program 5 (id=1229):
syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)

1.152132719s ago: executing program 5 (id=1231):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000180)=0xba)
r2 = dup(r0)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x434c, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r6, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x427c0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80300000000000f0000000000004000", "0000d86df169f800"}, 0x3ff, 0x5})
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
preadv(r7, &(0x7f0000001900)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1, 0x1, 0xb1)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r7, 0x40026f34, 0x0)
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x321601, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101)

895.493706ms ago: executing program 1 (id=1233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd86, &(0x7f0000002c00)={@local, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x5, 0x6, "fdb093", 0xd48, 0x6, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x16, 0x1d, '\x00', [@generic={0x7, 0x7f, "bf6d0aea1e722fd099dbd9b2c4ac802da731bb58a2ae215bbe23f50cce6fcd308c9b0eb1aeeca3ea91d38c2b9106231b098dddad5dd4cb96ec528f5697562421b8f6fb011a25ee82dbc3f113fe520beaa8849adc5481769821214ff69c06e4f2d514f5bee14708a6f6880610781153735ca2615477c6fc9a7d80e113f37ec0"}, @enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @empty}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xaf, 0x3, [0x3, 0x19b, 0x8000000000000000, 0xff, 0x1, 0x4]}}, @hao={0xc9, 0x10, @mcast1}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x5, 0x48, 0xa, [@dev={0xfe, 0x80, '\x00', 0x34}, @loopback]}, @fragment={0x0, 0x0, 0x40, 0x1, 0x0, 0x1d, 0x65}, @dstopts={0x88, 0x17f, '\x00', [@generic={0x7, 0xbf7, "b91d867d78b0b4ee488a9f0cb7aa4614bd5e604de765546fc8afedc884c892adb6c7c0b1ca1884b2f85c7a0fdba6820825c74d3811496c92f154a339c7427f57397a16297b2e42298d11df8b4ef61d2ff7a570f61376ecbe8d1ad077bdcbd94056049b6b67ccd546b6980135960f560a9816f0d3daedef9f1d9f9ef3aaca5ab3b36c34199b60a15a61c4dc61ed86156a9db1866807046456efae0ff431fb161609f0b79f361259e8725a9b1dbdb8652ed0f5e8e9c75a5ca61b021edc86dcb696119e0bd5c80d08785ddfc355b08638cc74b3659360a0824bdef17424ae9dd661af04e66585386d1c3663a04af77288205a5a25bcae1489c485116aca4ea747892737830771196d655c7a15af631cca95e4df5a5f85f1b1b1a3840b5e7ac1946487ec2ef928c018191c48dd94f94020355cd8237ed4bf245322c68c06abe95731f4c9b2df0b9d75fe98156fadc6a5f0dc2b0511027c0a84da7fb233978249f83754e5274bb9058aea10990479fc58a72ec2cd9cbc8db7c2724d9b8bd74a8cce3751a1bce65ce1fe67b17113fb950c1ed179b006b1997d7395d922034c0383a89ed3f57e7865612c67a1993c725ab7c27440fa15f0a5d81622a585113def427ed4de5da4b2824ee36a04f7f9a83cc2171dada2c993dfe20d42bcd000affe7514faff0acb35b327d9ad10b28d2ffbee1995d35afe9165d313f4984698fd61fb63697215a2b20e3fd00d86bd5a837f5bc520c9580bbd01d8aded70dbc66318b955537742e8d09aa4dea98879e3b7e62c06a2d63ccc82a01494c0e2eb169ad39c72e8f365a651af879384bf3c812a7e9e2bc2cc7ca62fb1d326b8c46e87cf4c4c86a9fab28289b330f9cd641ebfea42c85eb596b4330fb10e74529afe6189418e055ef5837e67d5116abbcec7aa667dcd94f3fe9fd9cd30c873f0bc55aadb3e1563574c8fda81e0dca601a6b8ae514320b3a04344eb92ef511fb9817211fa3e34f71979dc657dbd7b1eccbba6baa84c454c17eace317fa072ee000aa3eaa4729775cb8ae2bb65f3813d6f069932ee3513dfb2ab8573d339177ec95b1fa6be2b120523858bf935a3bfbc864e336355b6c729335e5afe6a0c6be6eb0fa499e06035f1d7bfd42ed3ca0a510acd333176e95186c907ddd648701defbd9bfc9d9255bc8eb6a6bda251ba0d30cb2383360e0c5cbdcd4318215566384c19962a07cfd1c52853fa508417491e398333da1eebec16e26a885511077b64e29c52707c39acd72de6a2c5ae5bcfca27909b77935bc961c4623618025226f9648c815bce554fd5fe88bcb17fe56ba5c70c052c0271802ef28f5c5d92578c64b626b4d950309b3b5807856a90a597793c305286eb0d52e662bae61599f23580ed6b67467e05341a7d9eb8a6b58d609eda9f711d9e7fb19068ee7c919455e2671716920ae53572deb1b2a72afdd834657f1f6298920175ed87451d9b7b9f0db9e2610b60715297359b0791020c81b9efd5eae2094dd5a377539e7989680db6d74c0ddbcee32febfe4b85d3d212897049ca006f282c99806f526110a54e0725ce01c812bb80980970c52fe2e6cb2f943645d2d6f0ae872a97e6f1ac050d85eff60ca95ff93d36a5416a59ac7025acab5a0e6a1535286366b27a04236e474e70648a0a7cb21166f83c4ab7c7dc6ab1daba7e24c902854cf47b98cb0563e030b9925e8c7b8cfc4ebe06d8ec42dee7458785321b4473c393f8faf1eebcb87941b30cccd72fb40f2c9c5844573e647d6e039f3bbb3312acfbd2c90e7c3e9274e656d38e96f41cf8dd9414e8b57e571274318969bdcf405c2856257ef5f793bced2a541f01917492d1356d0700228219391a2c869d08c609be98e44c85d6c282adf4a7f0df8dcdaec06c1843de8034ee5c8ff34753a60ebc1843cbb0f70a47a64ba1ee12262016e757ab8592d8ec09daf2c7e1544ffc7511365f33a32389e151d79a7b2255766fd10ebd1c6fa6c6dad9d7904001d9dd917027872b0a713783b995c99b17a967b3c87e1ff46821c1c5c0025ba130ad8db2c01ec2b60a8ed0e831d0e926d3154fd0d157121ccf931b8a7a294ef21591669978e865a070614153e663aa6a21858bc1ac6f6a25e194b36b14490bdb9c684ec210d98e60ba7b7040b7a468682cbc170168fcd1d152cb2dbd77e08c1ddf94c2f68e780c87a4441310ae9fd9e8af1d972071f764ae2c045f87385367668471877c81e4b89828ed16bb754eb90798ede486cb3ed91582052c8c50e24cce4762fd2c4c5f50d507bf6f148ad1c4a609d95d8b432ef6f57e5821081fdab1210e75beb3175d4533cbb07368a9e7aca94360b06dc8a86bfa3b352696630ac67065055fc445758610bae82f2fe88fafdc4ddda7c0c05c25d3b0de44490d29df949b86d1934c49ed725679c610cde6d05c6942690d4bca8e87e5ec759b18c6062ff8a906fd57fceff90d7b9928106a205a9c748ba3d01d29cffa1dd2670091bdb8d537bab4241222e4290403fab985ad95e5191b60280816d8188257daf1915ee78df5be9d4e5c78699c582e0ded3173eaa95b21be454c7fe473e622fb5636240b04f3905bb36af2559de9bcd9c9ec5f333db42697a91e3dfdf06752932979eef4c3cb0091829d07e891c098a172a6b6da643b7ef509e174398b86168288bb5a2d64d91ab9b49a5375ea75ecddf64a2ed0239fe950844dcb4c33ed338ca1c31332474b26b92c618db88012f7a84457b2b750f2d20d84b28ec9ef3b1d1d8b7782f730f4eb63d90427d6cabb25eb95af17f1babb9cb9ebf8ce804a4283a00294c825ac66b77b44abfd32ab6fcec673b34129846f19d80c15185f9fd4557200a0aa21347a05fbcb5748344131a18bfcca2cd4613dea833244078b05ebcac3fd1526dd4372ccdb7febbe2067e96b89aadbb832fcdcc690f4617847fdb7e2a9373c23887c0ff499a6abecef46b53a085e01a0469090b53dcb1e90d3ea5054d122d5c8fc9c8c763671377ef87860a7093791e11bb0dacd688e536e59b3be7e1081ffc4966f27320c6e1568197d9f97c42161a3094bfcf98bb1194880794afc25315db0b342ab1c6b353ce5f33a49a8a8db5bcbab202bd1f1f7057610beac9e488b9025f9194d1f1f6dd58895895e4fa7ee501e8cd08e802f92d0faa52febc445c547d02567796eb416312b9a31beab2c88ae3e0b855dd48023b0a63967d20631d13a23a62ee4335f4d9226d347cf033e02b07df8fedb3bc658f02bf812867baeb4db5ec85b33d037cc20b65d04cbfb98aace728f20ad8017a60e73a40ddd85844fb10bb0db03da1e8de45b85c296e0f3135797c0fd08b3c4b7d07ae70d181c3a9a1bb9767e4b44d94fed02bad8ed4b0e56d06bad16b7ec9f3f8710977bd03a999b95786f106f771bc406bd0bb1e2cc6b41f4ea6df190e67859eefadcffa09aeefb456da7fddb57acf5a46fe56a3624c5119191ee676942c589733ad65a8cddd221c94f8e7720bc538efeed08d1574e11ee426b8a3598432801e20e141ca0e0d863497d8365ea4834c9e645e51b1bc9ba8ff417f3c551c9f301e17e5f87644a4def9be18556ab1600e1b169264b5f7b4a8984f1739900f2b812db5c150e65ed8fb685a7adede93f14cb7fc7f5b43871105dcbcd1983f8ecbc309ba000a0876cfd2c72f31ef6d828c5c2a4401e14dba4f83791da9020f5dbe633a643fa5a1809e093be78cb3b03047e1cff04bc19aea31905c7ef1bb369cf761d567908a5a3b148237caeae20e2936c8bfea77781e659e57554c7754bd7ff6c7d3c4dbac2948c03a7657d667de52a8c2346dd409239a9f8ef9b8cfe38b21823ca85785936bf07469ad98e2d7bde9fb3fd086bb2360296146303e5006944884ba7fd58a1c74f67cf10b3d8dab267a5b23e69fb8bb3b365013a0752c87f5f75fa4e1267be2f1741fb1740a85a9ee2bcff30e7d5b8a8300c26a8ba4702b0279d0e0558c128d3eaa706daaf7d0bc1b91f608d9a71e6735e0ddbdfd411773b6d19d2e5c625f7e1787e37572ef13492f2ac03ee5b35d2be4bb3f4ac6b7e797cca584c7668dda8f11a0d75325b3809745455297959798bca5d560b9011b777a776ca5c6f47f81743945c58f4638f4a4f84a09b96d4b47dd4a03b5b17950cce5ca0fa397afea3b455066aa9978004a37825f58c51d8c21051a2879f5a3f257b6e30a9e15d9e2deb59ae744414a8120a4a7c8c6811cd3f514682cd5e170587a4e5687edf3a0da0e682719b32aadc72f66fe1604d516508098393baa8c4fb20c96a98e0fea03946fb2c4da16047a8af50a4d70c6b9ebdf8d1f454dd528da82f10c3"}]}], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x4d1d, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0xe41, 0x2, 0x4e23, 0x4e22}}}}}}}}}, 0x0)

867.074218ms ago: executing program 4 (id=1234):
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0])
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

842.95942ms ago: executing program 1 (id=1235):
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x110, 0x30, 0x10, 0x0, 0x25dfdbfc, {}, [{0xfc, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x2, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xb4, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x6e, 0x6, "c31c872ec4e55a9740e1e88a9d4e085846a9d7a9436cb2cdb533b595d0799568723559173a731aeb5cb3219a8bd279ce47c0bd89d1dae0e3567ff9c16bace61e9f7e23efe8dcb13b65dbb5008b5aa340c85caa17f11b3898f1ca9861039e2d2ea338531cd36a88d4c322"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x11003e2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x3, 0x0, 0x0, "ee4f6da8d2cf4011ac7b00", 0x32314742})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
getpid()

732.059008ms ago: executing program 1 (id=1236):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x82)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x100)
io_setup(0x1ff, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, 0x0, 0xfe, 0xa00}])

706.702501ms ago: executing program 1 (id=1237):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x200})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3})
r1 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r1, 0x4})
write$eventfd(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc2c45513, &(0x7f0000000240)={{0x3, 0x5, 0x50, 0x9, 'syz0\x00', 0x6f}, 0x0, [0xa42, 0x8, 0x1ff, 0x10001, 0x2, 0x4c5cceb, 0x65, 0xffff, 0x8cb, 0xe, 0x1, 0x87, 0xb8, 0x1, 0x9294, 0x1, 0x5, 0x7, 0x9, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffc, 0xffffffff, 0x77b2, 0x5, 0x4bc8, 0x80, 0x444, 0x80000001, 0xf, 0x1ff, 0x8, 0x1, 0x1, 0x8, 0x200, 0x6, 0x101, 0x9, 0x1, 0x8c, 0x80000000, 0xe, 0x6, 0xac8, 0x7, 0x4, 0x1ff, 0x8, 0x80, 0xcae1, 0xa213, 0x8000, 0xefe2, 0xec8, 0x6, 0x8, 0x7, 0x38fea0b3, 0x9, 0x4, 0x7, 0xd, 0x39, 0x26, 0x4, 0x4, 0xc1b, 0x1, 0xffffff66, 0x6, 0x5, 0x40, 0x101, 0x7, 0x5e0a, 0x1, 0x2, 0x401, 0x9, 0x40, 0x5, 0x7, 0x5, 0xffff33ba, 0xfffffffc, 0x7fffffff, 0x6, 0x1, 0x8bd6, 0x3, 0xffffff01, 0x9, 0x5, 0x10001, 0x1, 0xd00000, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x64f76898, 0x5, 0x9, 0x1, 0x3ff, 0x24000, 0xe5, 0x2a85, 0x0, 0x4, 0x795, 0x8, 0x3, 0x8, 0x6, 0x0, 0x80, 0x3, 0x7, 0xfffffffc, 0x401, 0x7]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r4, 0x2)

646.988947ms ago: executing program 1 (id=1238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)

535.965201ms ago: executing program 1 (id=1239):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001780)=ANY=[@ANYBLOB="14000000100001000000000000000000c500000a440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001800038014000080040001800c00044020"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

529.587329ms ago: executing program 2 (id=1240):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x00\x00\x00\x80\x00\x00\x00\x00X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9Z\x82@\xb1=\xc4\xb6=\xed\xec\x8d\xa2lI\xffK\xfd\xbc6\x90{s\xebr=/]d;\xc4VE\xdb\t\xc0\xe1\xcc\x0e\xf6+\x16\xc2\x17\xe0\f%n\xb3u\xa2~\x86,\xdek\x05\xda\xf5\xb6!\xfc\xdbl\x96\xedm\xd9nf\x00\x00\x00M\x1c\a\x81\x1d\xa24\x8e\xe8\xf3\x9e\\\x17*Ip\xbf1\xd4\x0f\xcc\x1e\x85A\x85\tH\xc2\xe6X\xc7\xc5\v\x1cZ56Buj\x81G\xca5\xed\xda\xd9{|\x18gY\x06\x9a\xa1\x04\xbd\x85\xbaq\xb1\xaduR\f\x01\xc65\xe7\x81K\xbf\xab\xc1hUd\xb7\x8b^\x06\xdbZ\xa4>\x1dg5\x1bFFs\x1c\xf5\a\xef\x97\xa5|\x01\x9e\x13\x1e\x8a\xecY!JW\xb3\x1a\xc4\x9d\xc1\xf5\xdcU3\xee\x8ddz\x00a\x95oKc\xd6\xf4/\x9a\x9c6c\x98\bxz\x04\xf7\xecj\x99\xc1=\x01Q\xb2\xdfR\xd5\x17\x9a=\xf3s\xbc\xac\"7\xb8Z\xa4\x04\xf9\xf8\x86\x8f\xb3\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\xa8\x9aJ\xc6\x03\xb4\x9b\x14\xb1+\xa1\x93\xeb/\xd3tq\x98\xd3L\x1a\xfc\xb14i_aFlb\xa3h0\xee.?\x90h\xc9\xc9m\xe1C\xe1\xa9\xf5\xf6\vf', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1)
close_range(r0, 0xffffffffffffffff, 0x10000000000000)

407.928649ms ago: executing program 2 (id=1242):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

279.757602ms ago: executing program 4 (id=1243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x64, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7cbb}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0xfe}}, 0x8f8c, 0x5, @device_a, {}, @val, @val={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x5}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

255.647717ms ago: executing program 4 (id=1244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee0, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300)

0s ago: executing program 4 (id=1245):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd86, &(0x7f0000002c00)={@local, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x5, 0x6, "fdb093", 0xd48, 0x6, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x16, 0x1d, '\x00', [@generic={0x7, 0x7f, "bf6d0aea1e722fd099dbd9b2c4ac802da731bb58a2ae215bbe23f50cce6fcd308c9b0eb1aeeca3ea91d38c2b9106231b098dddad5dd4cb96ec528f5697562421b8f6fb011a25ee82dbc3f113fe520beaa8849adc5481769821214ff69c06e4f2d514f5bee14708a6f6880610781153735ca2615477c6fc9a7d80e113f37ec0"}, @enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @empty}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xaf, 0x3, [0x3, 0x19b, 0x8000000000000000, 0xff, 0x1, 0x4]}}, @hao={0xc9, 0x10, @mcast1}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x5, 0x48, 0xa, [@dev={0xfe, 0x80, '\x00', 0x34}, @loopback]}, @fragment={0x0, 0x0, 0x40, 0x1, 0x0, 0x1d, 0x65}, @dstopts={0x88, 0x17f, '\x00', [@generic={0x7, 0xbf7, "b91d867d78b0b4ee488a9f0cb7aa4614bd5e604de765546fc8afedc884c892adb6c7c0b1ca1884b2f85c7a0fdba6820825c74d3811496c92f154a339c7427f57397a16297b2e42298d11df8b4ef61d2ff7a570f61376ecbe8d1ad077bdcbd94056049b6b67ccd546b6980135960f560a9816f0d3daedef9f1d9f9ef3aaca5ab3b36c34199b60a15a61c4dc61ed86156a9db1866807046456efae0ff431fb161609f0b79f361259e8725a9b1dbdb8652ed0f5e8e9c75a5ca61b021edc86dcb696119e0bd5c80d08785ddfc355b08638cc74b3659360a0824bdef17424ae9dd661af04e66585386d1c3663a04af77288205a5a25bcae1489c485116aca4ea747892737830771196d655c7a15af631cca95e4df5a5f85f1b1b1a3840b5e7ac1946487ec2ef928c018191c48dd94f94020355cd8237ed4bf245322c68c06abe95731f4c9b2df0b9d75fe98156fadc6a5f0dc2b0511027c0a84da7fb233978249f83754e5274bb9058aea10990479fc58a72ec2cd9cbc8db7c2724d9b8bd74a8cce3751a1bce65ce1fe67b17113fb950c1ed179b006b1997d7395d922034c0383a89ed3f57e7865612c67a1993c725ab7c27440fa15f0a5d81622a585113def427ed4de5da4b2824ee36a04f7f9a83cc2171dada2c993dfe20d42bcd000affe7514faff0acb35b327d9ad10b28d2ffbee1995d35afe9165d313f4984698fd61fb63697215a2b20e3fd00d86bd5a837f5bc520c9580bbd01d8aded70dbc66318b955537742e8d09aa4dea98879e3b7e62c06a2d63ccc82a01494c0e2eb169ad39c72e8f365a651af879384bf3c812a7e9e2bc2cc7ca62fb1d326b8c46e87cf4c4c86a9fab28289b330f9cd641ebfea42c85eb596b4330fb10e74529afe6189418e055ef5837e67d5116abbcec7aa667dcd94f3fe9fd9cd30c873f0bc55aadb3e1563574c8fda81e0dca601a6b8ae514320b3a04344eb92ef511fb9817211fa3e34f71979dc657dbd7b1eccbba6baa84c454c17eace317fa072ee000aa3eaa4729775cb8ae2bb65f3813d6f069932ee3513dfb2ab8573d339177ec95b1fa6be2b120523858bf935a3bfbc864e336355b6c729335e5afe6a0c6be6eb0fa499e06035f1d7bfd42ed3ca0a510acd333176e95186c907ddd648701defbd9bfc9d9255bc8eb6a6bda251ba0d30cb2383360e0c5cbdcd4318215566384c19962a07cfd1c52853fa508417491e398333da1eebec16e26a885511077b64e29c52707c39acd72de6a2c5ae5bcfca27909b77935bc961c4623618025226f9648c815bce554fd5fe88bcb17fe56ba5c70c052c0271802ef28f5c5d92578c64b626b4d950309b3b5807856a90a597793c305286eb0d52e662bae61599f23580ed6b67467e05341a7d9eb8a6b58d609eda9f711d9e7fb19068ee7c919455e2671716920ae53572deb1b2a72afdd834657f1f6298920175ed87451d9b7b9f0db9e2610b60715297359b0791020c81b9efd5eae2094dd5a377539e7989680db6d74c0ddbcee32febfe4b85d3d212897049ca006f282c99806f526110a54e0725ce01c812bb80980970c52fe2e6cb2f943645d2d6f0ae872a97e6f1ac050d85eff60ca95ff93d36a5416a59ac7025acab5a0e6a1535286366b27a04236e474e70648a0a7cb21166f83c4ab7c7dc6ab1daba7e24c902854cf47b98cb0563e030b9925e8c7b8cfc4ebe06d8ec42dee7458785321b4473c393f8faf1eebcb87941b30cccd72fb40f2c9c5844573e647d6e039f3bbb3312acfbd2c90e7c3e9274e656d38e96f41cf8dd9414e8b57e571274318969bdcf405c2856257ef5f793bced2a541f01917492d1356d0700228219391a2c869d08c609be98e44c85d6c282adf4a7f0df8dcdaec06c1843de8034ee5c8ff34753a60ebc1843cbb0f70a47a64ba1ee12262016e757ab8592d8ec09daf2c7e1544ffc7511365f33a32389e151d79a7b2255766fd10ebd1c6fa6c6dad9d7904001d9dd917027872b0a713783b995c99b17a967b3c87e1ff46821c1c5c0025ba130ad8db2c01ec2b60a8ed0e831d0e926d3154fd0d157121ccf931b8a7a294ef21591669978e865a070614153e663aa6a21858bc1ac6f6a25e194b36b14490bdb9c684ec210d98e60ba7b7040b7a468682cbc170168fcd1d152cb2dbd77e08c1ddf94c2f68e780c87a4441310ae9fd9e8af1d972071f764ae2c045f87385367668471877c81e4b89828ed16bb754eb90798ede486cb3ed91582052c8c50e24cce4762fd2c4c5f50d507bf6f148ad1c4a609d95d8b432ef6f57e5821081fdab1210e75beb3175d4533cbb07368a9e7aca94360b06dc8a86bfa3b352696630ac67065055fc445758610bae82f2fe88fafdc4ddda7c0c05c25d3b0de44490d29df949b86d1934c49ed725679c610cde6d05c6942690d4bca8e87e5ec759b18c6062ff8a906fd57fceff90d7b9928106a205a9c748ba3d01d29cffa1dd2670091bdb8d537bab4241222e4290403fab985ad95e5191b60280816d8188257daf1915ee78df5be9d4e5c78699c582e0ded3173eaa95b21be454c7fe473e622fb5636240b04f3905bb36af2559de9bcd9c9ec5f333db42697a91e3dfdf06752932979eef4c3cb0091829d07e891c098a172a6b6da643b7ef509e174398b86168288bb5a2d64d91ab9b49a5375ea75ecddf64a2ed0239fe950844dcb4c33ed338ca1c31332474b26b92c618db88012f7a84457b2b750f2d20d84b28ec9ef3b1d1d8b7782f730f4eb63d90427d6cabb25eb95af17f1babb9cb9ebf8ce804a4283a00294c825ac66b77b44abfd32ab6fcec673b34129846f19d80c15185f9fd4557200a0aa21347a05fbcb5748344131a18bfcca2cd4613dea833244078b05ebcac3fd1526dd4372ccdb7febbe2067e96b89aadbb832fcdcc690f4617847fdb7e2a9373c23887c0ff499a6abecef46b53a085e01a0469090b53dcb1e90d3ea5054d122d5c8fc9c8c763671377ef87860a7093791e11bb0dacd688e536e59b3be7e1081ffc4966f27320c6e1568197d9f97c42161a3094bfcf98bb1194880794afc25315db0b342ab1c6b353ce5f33a49a8a8db5bcbab202bd1f1f7057610beac9e488b9025f9194d1f1f6dd58895895e4fa7ee501e8cd08e802f92d0faa52febc445c547d02567796eb416312b9a31beab2c88ae3e0b855dd48023b0a63967d20631d13a23a62ee4335f4d9226d347cf033e02b07df8fedb3bc658f02bf812867baeb4db5ec85b33d037cc20b65d04cbfb98aace728f20ad8017a60e73a40ddd85844fb10bb0db03da1e8de45b85c296e0f3135797c0fd08b3c4b7d07ae70d181c3a9a1bb9767e4b44d94fed02bad8ed4b0e56d06bad16b7ec9f3f8710977bd03a999b95786f106f771bc406bd0bb1e2cc6b41f4ea6df190e67859eefadcffa09aeefb456da7fddb57acf5a46fe56a3624c5119191ee676942c589733ad65a8cddd221c94f8e7720bc538efeed08d1574e11ee426b8a3598432801e20e141ca0e0d863497d8365ea4834c9e645e51b1bc9ba8ff417f3c551c9f301e17e5f87644a4def9be18556ab1600e1b169264b5f7b4a8984f1739900f2b812db5c150e65ed8fb685a7adede93f14cb7fc7f5b43871105dcbcd1983f8ecbc309ba000a0876cfd2c72f31ef6d828c5c2a4401e14dba4f83791da9020f5dbe633a643fa5a1809e093be78cb3b03047e1cff04bc19aea31905c7ef1bb369cf761d567908a5a3b148237caeae20e2936c8bfea77781e659e57554c7754bd7ff6c7d3c4dbac2948c03a7657d667de52a8c2346dd409239a9f8ef9b8cfe38b21823ca85785936bf07469ad98e2d7bde9fb3fd086bb2360296146303e5006944884ba7fd58a1c74f67cf10b3d8dab267a5b23e69fb8bb3b365013a0752c87f5f75fa4e1267be2f1741fb1740a85a9ee2bcff30e7d5b8a8300c26a8ba4702b0279d0e0558c128d3eaa706daaf7d0bc1b91f608d9a71e6735e0ddbdfd411773b6d19d2e5c625f7e1787e37572ef13492f2ac03ee5b35d2be4bb3f4ac6b7e797cca584c7668dda8f11a0d75325b3809745455297959798bca5d560b9011b777a776ca5c6f47f81743945c58f4638f4a4f84a09b96d4b47dd4a03b5b17950cce5ca0fa397afea3b455066aa9978004a37825f58c51d8c21051a2879f5a3f257b6e30a9e15d9e2deb59ae744414a8120a4a7c8c6811cd3f514682cd5e170587a4e5687edf3a0da0e682719b32aadc72f66fe1604d516508098393baa8c4fb20c96a98e0fea03946fb2c4da16047a8af50a4d70c6b9ebdf8d1f454dd528da82f10c3"}]}], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x4d1d, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0xe41, 0x2, 0x4e23, 0x4e22}}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts.
[   67.865044][ T5782] cgroup: Unknown subsys name 'net'
[   68.106102][ T5782] cgroup: Unknown subsys name 'cpuset'
[   68.181999][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.753861][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.387998][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[   71.388058][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[   73.125700][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.131095][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.137105][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.157753][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.163204][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.163583][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.164310][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.166183][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.167190][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.181245][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.264798][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.266961][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.267584][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.268666][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.269381][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.364566][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.366678][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.367832][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.383522][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.387390][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.388127][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.389234][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.392088][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.424271][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.425040][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.929990][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   74.106691][ T5805] chnl_net:caif_netlink_parms(): no params data found
[   74.162935][ T5795] chnl_net:caif_netlink_parms(): no params data found
[   74.267502][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.268484][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.270128][ T5800] bridge_slave_0: entered allmulticast mode
[   74.272702][ T5800] bridge_slave_0: entered promiscuous mode
[   74.323851][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   74.343385][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.343522][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.343724][ T5800] bridge_slave_1: entered allmulticast mode
[   74.346268][ T5800] bridge_slave_1: entered promiscuous mode
[   74.460464][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   74.486824][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.527584][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.527797][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.527933][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.528234][ T5805] bridge_slave_0: entered allmulticast mode
[   74.529515][ T5805] bridge_slave_0: entered promiscuous mode
[   74.587909][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.587974][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.588071][ T5795] bridge_slave_0: entered allmulticast mode
[   74.589373][ T5795] bridge_slave_0: entered promiscuous mode
[   74.590746][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.592895][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.593058][ T5805] bridge_slave_1: entered allmulticast mode
[   74.595446][ T5805] bridge_slave_1: entered promiscuous mode
[   74.670259][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.670361][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.670461][ T5795] bridge_slave_1: entered allmulticast mode
[   74.672846][ T5795] bridge_slave_1: entered promiscuous mode
[   74.703033][ T5800] team0: Port device team_slave_0 added
[   74.746989][ T5800] team0: Port device team_slave_1 added
[   74.749519][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.774402][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.774552][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.774662][ T5809] bridge_slave_0: entered allmulticast mode
[   74.776082][ T5809] bridge_slave_0: entered promiscuous mode
[   74.797408][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.802510][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.837638][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.837744][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.837885][ T5809] bridge_slave_1: entered allmulticast mode
[   74.839249][ T5809] bridge_slave_1: entered promiscuous mode
[   74.875068][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.177718][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.177729][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.177742][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.222706][ T5797] Bluetooth: hci1: command tx timeout
[   75.249522][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.249632][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.249746][ T5807] bridge_slave_0: entered allmulticast mode
[   75.252245][ T5807] bridge_slave_0: entered promiscuous mode
[   75.275212][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.275227][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.275251][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.279121][ T5805] team0: Port device team_slave_0 added
[   75.299210][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.299323][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.299532][ T5807] bridge_slave_1: entered allmulticast mode
[   75.301013][ T5114] Bluetooth: hci0: command tx timeout
[   75.301250][ T5797] Bluetooth: hci2: command tx timeout
[   75.303785][ T5807] bridge_slave_1: entered promiscuous mode
[   75.325269][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.328680][ T5805] team0: Port device team_slave_1 added
[   75.332247][ T5795] team0: Port device team_slave_0 added
[   75.358088][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.360748][ T5795] team0: Port device team_slave_1 added
[   75.444434][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.461112][ T5797] Bluetooth: hci3: command tx timeout
[   75.461134][ T5114] Bluetooth: hci4: command tx timeout
[   75.470313][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.470327][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.470349][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.495931][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.496860][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.496872][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.496894][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.504719][ T5809] team0: Port device team_slave_0 added
[   75.505403][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.505413][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.505436][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.517686][ T5800] hsr_slave_0: entered promiscuous mode
[   75.519204][ T5800] hsr_slave_1: entered promiscuous mode
[   75.540087][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.540103][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.540126][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.555392][ T5809] team0: Port device team_slave_1 added
[   75.618685][ T5807] team0: Port device team_slave_0 added
[   75.683799][ T5807] team0: Port device team_slave_1 added
[   75.698235][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.698248][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.698271][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.760791][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.760906][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.760930][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.809698][ T5805] hsr_slave_0: entered promiscuous mode
[   75.811637][ T5805] hsr_slave_1: entered promiscuous mode
[   75.812644][ T5805] debugfs: 'hsr0' already exists in 'hsr'
[   75.812751][ T5805] Cannot create hsr debugfs directory
[   75.837427][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.837441][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.837461][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.887859][ T5795] hsr_slave_0: entered promiscuous mode
[   75.888606][ T5795] hsr_slave_1: entered promiscuous mode
[   75.889105][ T5795] debugfs: 'hsr0' already exists in 'hsr'
[   75.889126][ T5795] Cannot create hsr debugfs directory
[   75.903009][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.903023][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.903045][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.520144][ T5809] hsr_slave_0: entered promiscuous mode
[   76.526766][ T5809] hsr_slave_1: entered promiscuous mode
[   76.527393][ T5809] debugfs: 'hsr0' already exists in 'hsr'
[   76.527415][ T5809] Cannot create hsr debugfs directory
[   76.590260][ T5807] hsr_slave_0: entered promiscuous mode
[   76.591589][ T5807] hsr_slave_1: entered promiscuous mode
[   76.592439][ T5807] debugfs: 'hsr0' already exists in 'hsr'
[   76.592459][ T5807] Cannot create hsr debugfs directory
[   77.135888][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.185690][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.253655][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.297824][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.301054][ T5114] Bluetooth: hci1: command tx timeout
[   77.380060][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.380997][ T5114] Bluetooth: hci2: command tx timeout
[   77.381046][ T5114] Bluetooth: hci0: command tx timeout
[   77.417228][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.453173][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.497684][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.540971][ T5114] Bluetooth: hci4: command tx timeout
[   77.541850][ T5114] Bluetooth: hci3: command tx timeout
[   77.631718][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.673327][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.728125][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.756303][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.850207][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.879965][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.900196][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.953585][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.074521][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.117044][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.160063][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.206853][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.207107][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.332033][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   78.353213][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.373703][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.373815][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.407464][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.408112][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.449942][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   78.479026][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.493474][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.493597][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.529304][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.529444][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.575429][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[   78.580144][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.606528][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.606728][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.645019][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.645138][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.697892][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   78.703751][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.752433][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.752625][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.797910][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.809490][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.849544][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   78.896601][  T168] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.896729][  T168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.952338][  T168] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.952410][  T168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.089408][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.225556][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.381898][ T5114] Bluetooth: hci1: command tx timeout
[   79.431804][ T5800] veth0_vlan: entered promiscuous mode
[   79.461113][ T5114] Bluetooth: hci2: command tx timeout
[   79.461143][ T5114] Bluetooth: hci0: command tx timeout
[   79.526681][ T5800] veth1_vlan: entered promiscuous mode
[   79.581761][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.623097][ T5797] Bluetooth: hci3: command tx timeout
[   79.623128][ T5797] Bluetooth: hci4: command tx timeout
[   79.677638][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.737890][ T5800] veth0_macvtap: entered promiscuous mode
[   79.780662][ T5800] veth1_macvtap: entered promiscuous mode
[   79.835436][ T5805] veth0_vlan: entered promiscuous mode
[   79.868899][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.876424][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.888752][ T5805] veth1_vlan: entered promiscuous mode
[   79.906080][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.926151][ T5809] veth0_vlan: entered promiscuous mode
[   79.943178][   T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.947190][   T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.950702][   T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.978327][   T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.000153][ T5809] veth1_vlan: entered promiscuous mode
[   80.106706][ T5795] veth0_vlan: entered promiscuous mode
[   80.183370][ T5805] veth0_macvtap: entered promiscuous mode
[   80.218581][ T5795] veth1_vlan: entered promiscuous mode
[   80.229295][ T5805] veth1_macvtap: entered promiscuous mode
[   80.274565][ T5807] veth0_vlan: entered promiscuous mode
[   80.296037][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.296062][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.326540][ T5809] veth0_macvtap: entered promiscuous mode
[   80.346645][ T5807] veth1_vlan: entered promiscuous mode
[   80.359811][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.382821][ T5809] veth1_macvtap: entered promiscuous mode
[   80.405010][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.458542][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.458562][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.475921][   T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.486712][   T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.490243][   T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.515354][   T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.517089][ T5795] veth0_macvtap: entered promiscuous mode
[   80.569210][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.585772][ T5795] veth1_macvtap: entered promiscuous mode
[   80.599590][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.688769][ T5807] veth0_macvtap: entered promiscuous mode
[   80.708793][  T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.744275][  T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.757421][  T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.781996][  T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.812569][ T5807] veth1_macvtap: entered promiscuous mode
[   80.824334][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.918124][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.918136][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.920715][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.019503][  T168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.040464][  T168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.128887][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.128987][  T168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.168811][  T168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.182528][  T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.182547][  T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.185186][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.264241][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.298130][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.298147][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.298377][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.329075][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.348825][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.363858][ T5784] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   81.461837][ T5114] Bluetooth: hci1: command tx timeout
[   81.521128][ T5784] usb 2-1: device descriptor read/64, error -71
[   81.545527][ T5114] Bluetooth: hci0: command tx timeout
[   81.545562][ T5114] Bluetooth: hci2: command tx timeout
[   81.573794][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.573831][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.624848][  T810] cfg80211: failed to load regulatory.db
[   81.702010][ T5797] Bluetooth: hci4: command tx timeout
[   81.702040][ T5797] Bluetooth: hci3: command tx timeout
[   81.719074][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[   81.781369][ T5784] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   81.833458][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.833478][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.911001][ T5784] usb 2-1: device descriptor read/64, error -71
[   82.035490][ T5784] usb usb2-port1: attempt power cycle
[   82.069908][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.069925][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.163933][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.163951][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.320962][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.320982][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.401921][ T5784] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   82.442722][ T5784] usb 2-1: device descriptor read/8, error -71
[   82.702092][ T5784] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   82.722079][ T5784] usb 2-1: device descriptor read/8, error -71
[   82.833774][ T5784] usb usb2-port1: unable to enumerate USB device
[   82.902763][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   82.934063][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   83.073186][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.073222][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.073243][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.073262][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.073283][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.073303][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.074935][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.074968][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.074990][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.075012][   T36] hid-generic FFF8:8D88:0008.0001: unknown main item tag 0x0
[   83.101884][   T31] usb 4-1: Using ep0 maxpacket: 8
[   83.110566][   T31] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[   83.110589][   T31] usb 4-1: config 0 has no interface number 0
[   83.110775][   T31] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   83.111084][   T31] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   83.111110][   T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   83.111133][   T31] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   83.111181][   T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   83.111201][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.186977][   T36] hid-generic FFF8:8D88:0008.0001: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[   83.195073][   T31] usb 4-1: config 0 descriptor??
[   83.267205][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.445974][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   83.453554][   T31] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   83.576388][   T31] usb 4-1: USB disconnect, device number 2
[   83.610952][ T5956] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[   83.615283][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'.
[   83.617935][   T31] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[   83.647765][ T5951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   83.770782][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'.
[   84.005746][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'.
[   84.220558][ T5916] hid-generic FFF8:8D88:0008.0002: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[   84.476453][ T5970] fido_id[5970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   84.709359][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   87.106860][ T5991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25'.
[   87.106883][ T5991] netlink: 43 bytes leftover after parsing attributes in process `syz.2.25'.
[   87.106896][ T5991] netlink: 'syz.2.25': attribute type 5 has an invalid length.
[   87.106908][ T5991] netlink: 43 bytes leftover after parsing attributes in process `syz.2.25'.
[   87.200919][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   87.345605][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'.
[   87.467164][ T5939] hid-generic FFF8:8D88:0008.0003: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[   87.626398][ T5998] fido_id[5998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   88.194842][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.202087][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'.
[   89.337907][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   89.410857][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   89.420864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   89.430866][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   89.440859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   89.450867][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   89.460860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   91.008643][ T5939] hid_parser_main: 557 callbacks suppressed
[   91.008660][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008681][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008695][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008709][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008723][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008737][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008750][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008764][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008778][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.008791][ T5939] hid-generic FFF8:8D88:0008.0004: unknown main item tag 0x0
[   91.133180][ T5939] hid-generic FFF8:8D88:0008.0004: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[   91.378512][ T6025] fido_id[6025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   92.022369][ T6034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.838959][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.924167][ T6088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.54'.
[  103.027426][ T6104] syz.2.57 (6104) used greatest stack depth: 17872 bytes left
[  108.524883][ T6145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.402264][ T6152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  109.521028][ T6152] syz.3.71 (6152) used greatest stack depth: 16488 bytes left
[  109.924407][ T6157] Device name cannot be null; rc = [-22]
[  111.209141][ T6156] input: syz0 as /devices/virtual/input/input6
[  115.251637][ T6209] input: syz0 as /devices/virtual/input/input7
[  115.377435][ T6210] Device name cannot be null; rc = [-22]
[  116.916713][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'.
[  116.978587][ T5916] hid_parser_main: 179 callbacks suppressed
[  116.978610][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978637][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978658][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978680][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978701][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978722][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978744][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978766][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978789][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  116.978812][ T5916] hid-generic FFF8:8D88:0008.0005: unknown main item tag 0x0
[  117.249717][ T5916] hid-generic FFF8:8D88:0008.0005: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  117.694009][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  119.338403][ T5114] Bluetooth: hci1: Unable to find connection for big 0x00
[  120.168053][ T6254] input: syz0 as /devices/virtual/input/input8
[  120.305530][ T6255] Device name cannot be null; rc = [-22]
[  121.867698][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'.
[  121.960456][ T6261] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) !
[  122.000193][ T5873] hid_parser_main: 179 callbacks suppressed
[  122.000213][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000241][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000263][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000286][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000308][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000331][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000354][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000377][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000399][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.000421][ T5873] hid-generic FFF8:8D88:0008.0006: unknown main item tag 0x0
[  122.002116][ T6261] syzkaller0: entered promiscuous mode
[  122.002137][ T6261] syzkaller0: entered allmulticast mode
[  122.081314][ T5873] hid-generic FFF8:8D88:0008.0006: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  122.404083][ T6270] fido_id[6270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  122.801637][ T6283] Device name cannot be null; rc = [-22]
[  124.651790][ T6277] netlink: 'syz.4.106': attribute type 3 has an invalid length.
[  124.651822][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'.
[  125.487342][ T6302] input: syz0 as /devices/virtual/input/input9
[  125.611128][ T6303] Device name cannot be null; rc = [-22]
[  129.437961][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.119'.
[  129.462703][ T6320] syz.3.116 uses obsolete (PF_INET,SOCK_PACKET)
[  129.748179][ T6325] input: syz0 as /devices/virtual/input/input10
[  129.875066][ T6326] Device name cannot be null; rc = [-22]
[  131.426761][ T5859] hid_parser_main: 179 callbacks suppressed
[  131.426776][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426794][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426808][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426821][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426835][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426849][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426863][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426876][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426890][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.426903][ T5859] hid-generic FFF8:8D88:0008.0007: unknown main item tag 0x0
[  131.453970][ T5859] hid-generic FFF8:8D88:0008.0007: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  131.832289][ T6330] fido_id[6330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  131.964592][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  132.147667][ T5859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.147712][ T5859] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  132.153475][ T5859] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.153501][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.153518][ T5859] usb 5-1: Product: syz
[  132.153530][ T5859] usb 5-1: Manufacturer: syz
[  132.153542][ T5859] usb 5-1: SerialNumber: syz
[  132.237619][ T5859] cdc_mbim 5-1:1.0: skipping garbage
[  132.469336][ T6332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  132.842198][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  132.843468][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  133.048339][ T6345] netlink: 'syz.3.125': attribute type 3 has an invalid length.
[  133.048367][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'.
[  133.073242][ T6332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  133.073754][ T5859] cdc_mbim 5-1:1.0: setting tx_max = 184
[  133.088480][ T5859] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  133.142789][ T5859] wwan wwan0: port wwan0mbim0 attached
[  133.217080][ T5859] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, b6:91:a3:ce:60:2b
[  133.322429][   T31] usb 5-1: USB disconnect, device number 2
[  133.324962][   T31] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  133.579928][   T31] wwan wwan0: port wwan0mbim0 disconnected
[  134.235056][ T6372] input: syz0 as /devices/virtual/input/input11
[  134.357267][ T6373] Device name cannot be null; rc = [-22]
[  136.328765][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'.
[  136.770591][ T6395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12
[  138.276565][ T6430] input: syz0 as /devices/virtual/input/input13
[  138.409174][ T6431] Device name cannot be null; rc = [-22]
[  139.487695][ T6435] fuse: Bad value for 'fd'
[  141.984048][ T6475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.158'.
[  141.984083][ T6475] netlink: 43 bytes leftover after parsing attributes in process `syz.3.158'.
[  141.984097][ T6475] netlink: 'syz.3.158': attribute type 5 has an invalid length.
[  141.984108][ T6475] netlink: 43 bytes leftover after parsing attributes in process `syz.3.158'.
[  142.215487][ T5939] hid_parser_main: 179 callbacks suppressed
[  142.215504][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215521][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215536][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215550][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215563][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215577][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215590][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215668][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215683][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.215697][ T5939] hid-generic FFF8:8D88:0008.0008: unknown main item tag 0x0
[  142.258700][ T5939] hid-generic FFF8:8D88:0008.0008: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  142.792698][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  142.923915][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'.
[  143.252796][ T6491] input: syz0 as /devices/virtual/input/input14
[  143.376884][ T6492] Device name cannot be null; rc = [-22]
[  147.132349][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[  147.650587][ T5939] hid_parser_main: 179 callbacks suppressed
[  147.650602][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650619][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650636][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650650][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650664][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650678][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650691][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.650755][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.679764][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.679791][ T5939] hid-generic FFF8:8D88:0008.0009: unknown main item tag 0x0
[  147.767206][ T5939] hid-generic FFF8:8D88:0008.0009: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  148.240120][ T6524] fido_id[6524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  149.154666][ T6526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.301050][ T5916] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  149.454420][ T5916] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  149.454471][ T5916] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  149.454490][ T5916] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.454528][ T5916] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  149.454548][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.523445][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  149.761953][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'.
[  149.900620][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'.
[  149.959145][ T5916] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  149.980344][ T5916] usb 5-1: USB disconnect, device number 3
[  150.006901][ T6535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.175'.
[  150.019934][ T6535] netlink: 'syz.1.175': attribute type 3 has an invalid length.
[  150.019968][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'.
[  150.079291][ T5866] hid-generic FFF8:8D88:0008.000A: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  150.457309][ T6557] fido_id[6557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  150.770909][ T5939] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  150.923436][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.923482][ T5939] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  150.925934][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.925956][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.925965][ T5939] usb 5-1: Product: syz
[  150.925972][ T5939] usb 5-1: Manufacturer: syz
[  150.925979][ T5939] usb 5-1: SerialNumber: syz
[  151.064116][ T5939] cdc_mbim 5-1:1.0: skipping garbage
[  151.245253][ T6563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  151.857160][ T6563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  151.857807][ T5939] cdc_mbim 5-1:1.0: setting tx_max = 184
[  151.860354][ T5939] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  151.876162][ T5939] wwan wwan0: port wwan0mbim0 attached
[  151.897071][ T5939] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 96:20:6c:a6:ef:b6
[  151.955259][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.183614][ T5916] usb 5-1: USB disconnect, device number 4
[  152.185829][ T5916] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  154.139836][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.196'.
[  154.146758][ T5916] wwan wwan0: port wwan0mbim0 disconnected
[  154.522279][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'.
[  154.773050][ T5939] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  155.490882][ T5939] usb 2-1: Using ep0 maxpacket: 8
[  155.494694][ T5939] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  155.494718][ T5939] usb 2-1: config 0 has no interface number 0
[  155.494758][ T5939] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  155.494779][ T5939] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  155.494802][ T5939] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  155.494824][ T5939] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  155.494862][ T5939] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  155.494882][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.769050][ T5939] usb 2-1: config 0 descriptor??
[  155.855233][ T5939] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  155.977358][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.197'.
[  155.978911][ T6599] netlink: 'syz.0.197': attribute type 3 has an invalid length.
[  155.978942][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[  157.070996][ T5796] usb 2-1: USB disconnect, device number 6
[  157.126280][ T5796] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  157.293971][ T6630] Bluetooth: MGMT ver 1.23
[  157.432687][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'.
[  157.551162][ T5796] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  157.622829][ T6644] syzkaller0: entered promiscuous mode
[  157.622852][ T6644] syzkaller0: entered allmulticast mode
[  157.718004][ T5796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.718035][ T5796] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  157.751662][ T5796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.751679][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.751689][ T5796] usb 3-1: Product: syz
[  157.751696][ T5796] usb 3-1: Manufacturer: syz
[  157.751703][ T5796] usb 3-1: SerialNumber: syz
[  157.788872][ T5796] cdc_mbim 3-1:1.0: skipping garbage
[  158.139178][ T6634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.890490][ T6634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.891269][ T5796] cdc_mbim 3-1:1.0: setting tx_max = 184
[  159.919843][ T5796] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  159.927544][ T5796] wwan wwan0: port wwan0mbim0 attached
[  159.985275][ T5796] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 32:af:d4:99:1e:d0
[  160.133155][ T5796] usb 3-1: USB disconnect, device number 2
[  160.135471][ T5796] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  160.406233][ T5796] wwan wwan0: port wwan0mbim0 disconnected
[  160.958012][ T6675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.219'.
[  160.973994][ T6675] netlink: 'syz.0.219': attribute type 3 has an invalid length.
[  160.974030][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'.
[  165.672099][ T6735] input: syz0 as /devices/virtual/input/input15
[  165.785275][ T6736] Device name cannot be null; rc = [-22]
[  172.690868][ T5796] IPVS: starting estimator thread 0...
[  172.783568][ T6783] IPVS: using max 10 ests per chain, 24000 per kthread
[  175.762887][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'.
[  175.814290][ T6817] netlink: 'syz.4.260': attribute type 3 has an invalid length.
[  175.814326][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'.
[  176.552124][ T6824] input: syz0 as /devices/virtual/input/input16
[  176.757743][ T6824] Device name cannot be null; rc = [-22]
[  179.356236][ T5880] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  179.585279][ T5880] usb 3-1: device descriptor read/64, error -71
[  179.830908][ T5880] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  180.110947][ T5880] usb 3-1: device descriptor read/64, error -71
[  180.227461][ T5880] usb usb3-port1: attempt power cycle
[  180.840955][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  180.863617][ T5880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.866159][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  180.866186][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  180.866202][ T5880] usb 3-1: Product: syz
[  180.866213][ T5880] usb 3-1: Manufacturer: syz
[  180.866226][ T5880] usb 3-1: SerialNumber: syz
[  181.121335][ T5880] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  181.410685][    C1] usblp0: nonzero write bulk status received: -71
[  181.433362][ T5880] usb 3-1: USB disconnect, device number 5
[  181.444203][ T5880] usblp0: removed
[  185.364954][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.491308][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.324'.
[  187.563233][ T5859] hid_parser_main: 368 callbacks suppressed
[  187.563255][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563283][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563307][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563330][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563353][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563376][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563399][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563423][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563446][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.563469][ T5859] hid-generic FFF8:8D88:0008.000B: unknown main item tag 0x0
[  187.597186][ T5859] hid-generic FFF8:8D88:0008.000B: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  192.450035][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[  192.551738][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  193.356856][ T6998] input: syz0 as /devices/virtual/input/input17
[  193.359702][ T6998] Device name cannot be null; rc = [-22]
[  193.658448][ T7004] syzkaller0: entered promiscuous mode
[  193.658472][ T7004] syzkaller0: entered allmulticast mode
[  194.127718][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.170510][ T7016] overlayfs: overlapping lowerdir path
[  194.285133][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  194.285200][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  194.487938][   T37] audit: type=1326 audit(1773250560.146:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.487983][   T37] audit: type=1326 audit(1773250560.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.488021][   T37] audit: type=1326 audit(1773250560.146:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.492473][   T37] audit: type=1326 audit(1773250560.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.492517][   T37] audit: type=1326 audit(1773250560.156:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.495571][   T37] audit: type=1326 audit(1773250560.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.502331][   T37] audit: type=1326 audit(1773250560.166:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.502374][   T37] audit: type=1326 audit(1773250560.166:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.502411][   T37] audit: type=1326 audit(1773250560.166:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  194.502444][   T37] audit: type=1326 audit(1773250560.166:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7024 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94f8ecc799 code=0x7ffc0000
[  195.261534][ T7036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.349'.
[  195.771059][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'.
[  195.891915][ T7060] syzkaller0: entered promiscuous mode
[  195.891940][ T7060] syzkaller0: entered allmulticast mode
[  196.238904][ T7079] netlink: 'syz.0.363': attribute type 16 has an invalid length.
[  196.238925][ T7079] netlink: 'syz.0.363': attribute type 17 has an invalid length.
[  196.350494][ T7021] Bluetooth: hci1: command 0x0406 tx timeout
[  196.350589][ T7021] Bluetooth: hci2: command 0x0406 tx timeout
[  196.350614][ T7021] Bluetooth: hci3: command 0x0406 tx timeout
[  196.350633][ T7021] Bluetooth: hci0: command 0x0406 tx timeout
[  196.376597][ T7066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.394442][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.421403][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.571155][ T7079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.806215][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[  199.889378][ T7139] syzkaller0: entered promiscuous mode
[  199.889401][ T7139] syzkaller0: entered allmulticast mode
[  200.876709][ T7167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  201.317303][  T996] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  201.491386][  T996] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.491431][  T996] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  201.493704][  T996] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.493729][  T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.493746][  T996] usb 5-1: Product: syz
[  201.493759][  T996] usb 5-1: Manufacturer: syz
[  201.493771][  T996] usb 5-1: SerialNumber: syz
[  201.543635][  T996] cdc_mbim 5-1:1.0: skipping garbage
[  201.725325][ T7175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  201.757331][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'.
[  201.836487][ T5880] hid_parser_main: 179 callbacks suppressed
[  201.836508][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836535][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836559][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836594][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836617][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836641][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836665][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836689][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836714][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  201.836738][ T5880] hid-generic FFF8:8D88:0008.000C: unknown main item tag 0x0
[  202.954168][ T5880] hid-generic FFF8:8D88:0008.000C: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  203.501645][  T996] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[  203.501729][  T996] cdc_mbim 5-1:1.0: bind() failure
[  203.546956][  T996] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  203.547004][  T996] cdc_ncm 5-1:1.1: bind() failure
[  203.925164][  T996] usb 5-1: USB disconnect, device number 5
[  204.023688][ T7210] fido_id[7210]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  208.868874][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'.
[  208.875699][ T7250] netlink: 'syz.3.427': attribute type 3 has an invalid length.
[  208.875721][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'.
[  210.444108][ T7297] input: syz0 as /devices/virtual/input/input18
[  210.577233][ T7298] Device name cannot be null; rc = [-22]
[  215.062436][ T7321] netlink: 'syz.4.449': attribute type 3 has an invalid length.
[  215.062472][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'.
[  215.170907][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'.
[  215.778250][ T7342] Zero length message leads to an empty skb
[  220.371905][ T7369] netlink: 304 bytes leftover after parsing attributes in process `syz.4.471'.
[  221.255269][ T7392] netlink: 'syz.3.473': attribute type 3 has an invalid length.
[  221.255304][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'.
[  221.754145][ T7410] netlink: 'syz.2.492': attribute type 21 has an invalid length.
[  221.754168][ T7410] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.750879][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  222.914273][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.916878][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  222.916902][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  222.916919][    T9] usb 1-1: Product: syz
[  222.916930][    T9] usb 1-1: Manufacturer: syz
[  222.916941][    T9] usb 1-1: SerialNumber: syz
[  223.163193][ T7441] =======================================================
[  223.163193][ T7441] WARNING: The mand mount option has been deprecated and
[  223.163193][ T7441]          and is ignored by this kernel. Remove the mand
[  223.163193][ T7441]          option from the mount to silence this warning.
[  223.163193][ T7441] =======================================================
[  223.180713][    T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  223.844628][ T5880] usb 1-1: USB disconnect, device number 2
[  224.583974][ T5880] usblp0: removed
[  227.853609][ T7460] netlink: 'syz.0.512': attribute type 10 has an invalid length.
[  227.853629][ T7460] netlink: 256 bytes leftover after parsing attributes in process `syz.0.512'.
[  230.000944][   T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  230.323021][   T36] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.325574][   T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  230.325599][   T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  230.325617][   T36] usb 4-1: Product: syz
[  230.325629][   T36] usb 4-1: Manufacturer: syz
[  230.325642][   T36] usb 4-1: SerialNumber: syz
[  230.604712][   T36] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  230.781314][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'.
[  230.817761][   T36] usb 4-1: USB disconnect, device number 3
[  230.829733][   T36] usblp0: removed
[  230.943524][ T5880] hid_parser_main: 179 callbacks suppressed
[  230.943548][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943575][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943600][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943624][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943646][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943670][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943693][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943716][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943739][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.943760][ T5880] hid-generic FFF8:8D88:0008.000D: unknown main item tag 0x0
[  230.983057][ T5880] hid-generic FFF8:8D88:0008.000D: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  231.265359][ T7513] fido_id[7513]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  231.374732][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[  231.987514][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'.
[  234.336687][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'.
[  234.584488][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'.
[  234.775828][  T996] hid-generic FFF8:8D88:0008.000E: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  234.997445][ T7576] bond1 (unregistering): Released all slaves
[  235.242464][ T7585] mkiss: ax0: crc mode is auto.
[  235.726756][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'.
[  235.822322][ T5880] hid-generic FFF8:8D88:0008.000F: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  235.884425][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'.
[  235.939011][ T7639] fido_id[7639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  236.206023][ T7636] bond1 (unregistering): Released all slaves
[  236.377372][ T7650] input: syz0 as /devices/virtual/input/input19
[  236.482433][ T7651] Device name cannot be null; rc = [-22]
[  239.388207][ T7660] overlayfs: statfs failed on './file0'
[  239.675795][ T5797] Bluetooth: hci0: Malformed MSFT vendor event: 0x02
[  239.807603][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'.
[  239.897908][ T7680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20
[  239.939632][ T5796] hid_parser_main: 557 callbacks suppressed
[  239.939652][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939678][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939701][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939732][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939755][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939778][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939800][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939823][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939846][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  239.939869][ T5796] hid-generic FFF8:8D88:0008.0010: unknown main item tag 0x0
[  240.084274][ T5796] hid-generic FFF8:8D88:0008.0010: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  240.280460][ T7687] fido_id[7687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  240.354565][ T5797] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  240.508424][ T7707] input: syz0 as /devices/virtual/input/input21
[  240.512403][ T7707] Device name cannot be null; rc = [-22]
[  240.825342][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'.
[  240.827913][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'.
[  240.953677][ T5796] hid-generic FFF8:8D88:0008.0011: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  241.939594][ T7731] fido_id[7731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  242.451780][ T7747] random: crng reseeded on system resumption
[  244.525230][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'.
[  246.359461][ T7828] random: crng reseeded on system resumption
[  246.699261][ T7837] netlink: 'syz.0.658': attribute type 10 has an invalid length.
[  246.702003][ T7837] netlink: 256 bytes leftover after parsing attributes in process `syz.0.658'.
[  247.110133][ T5797] Bluetooth: hci4: unexpected cc 0x2010 length: 73 > 1
[  247.302130][ T7867] netlink: 'syz.2.671': attribute type 10 has an invalid length.
[  247.302151][ T7867] netlink: 256 bytes leftover after parsing attributes in process `syz.2.671'.
[  247.887529][ T7859] overlayfs: statfs failed on './file0'
[  251.678752][ T7916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.689'.
[  251.678767][ T7916] netlink: 43 bytes leftover after parsing attributes in process `syz.2.689'.
[  251.678776][ T7916] netlink: 'syz.2.689': attribute type 5 has an invalid length.
[  251.678782][ T7916] netlink: 43 bytes leftover after parsing attributes in process `syz.2.689'.
[  251.929181][ T7919] input: syz0 as /devices/virtual/input/input22
[  251.931844][ T7919] Device name cannot be null; rc = [-22]
[  252.720946][ T5939] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  252.870896][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  252.881658][ T5939] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  252.881683][ T5939] usb 1-1: config 0 has no interface number 0
[  252.884047][ T5939] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  252.884069][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.884086][ T5939] usb 1-1: Product: syz
[  252.884098][ T5939] usb 1-1: Manufacturer: syz
[  252.884110][ T5939] usb 1-1: SerialNumber: syz
[  252.894158][ T5939] usb 1-1: config 0 descriptor??
[  252.909347][ T5939] hub 1-1:0.132: bad descriptor, ignoring hub
[  252.909381][ T5939] hub 1-1:0.132: probe with driver hub failed with error -5
[  252.945957][ T5939] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input23
[  253.200221][ T7930] netlink: 56 bytes leftover after parsing attributes in process `syz.0.694'.
[  256.746686][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  256.746752][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  257.107234][ T7984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.714'.
[  257.107258][ T7984] netlink: 43 bytes leftover after parsing attributes in process `syz.4.714'.
[  257.107272][ T7984] netlink: 'syz.4.714': attribute type 5 has an invalid length.
[  257.107284][ T7984] netlink: 43 bytes leftover after parsing attributes in process `syz.4.714'.
[  257.303420][ T7989] overlayfs: overlapping lowerdir path
[  260.290918][   T36] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  260.453828][   T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.453874][   T36] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  260.456474][   T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  260.456498][   T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.456516][   T36] usb 5-1: Product: syz
[  260.456528][   T36] usb 5-1: Manufacturer: syz
[  260.456541][   T36] usb 5-1: SerialNumber: syz
[  260.485628][   T36] cdc_mbim 5-1:1.0: skipping garbage
[  260.567587][ T8031] mkiss: ax0: crc mode is auto.
[  260.801816][ T8013] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  262.722281][   T36] cdc_mbim 5-1:1.0: bind() failure
[  262.974801][   T36] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  262.975664][   T36] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  262.980413][   T36] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  263.004206][   T36] usb 5-1: USB disconnect, device number 6
[  264.427817][ T8060] input: syz0 as /devices/virtual/input/input24
[  264.530305][ T8064] Device name cannot be null; rc = [-22]
[  267.472786][ T8075] mkiss: ax0: crc mode is auto.
[  267.890949][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  267.908083][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  267.934082][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  267.946089][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  267.950478][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  268.839400][ T8085] chnl_net:caif_netlink_parms(): no params data found
[  269.682387][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.682590][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.682778][ T8085] bridge_slave_0: entered allmulticast mode
[  269.685343][ T8085] bridge_slave_0: entered promiscuous mode
[  269.691298][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.691447][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.691602][ T8085] bridge_slave_1: entered allmulticast mode
[  269.693674][ T8085] bridge_slave_1: entered promiscuous mode
[  269.751224][   T36] usb 1-1: USB disconnect, device number 3
[  270.021043][ T5114] Bluetooth: hci5: command tx timeout
[  270.334353][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.639500][ T6830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.984062][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.605407][ T8085] team0: Port device team_slave_0 added
[  271.607397][ T8085] team0: Port device team_slave_1 added
[  271.936868][ T6830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.992483][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.992499][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.992523][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.012176][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.012192][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.012215][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.100848][ T5114] Bluetooth: hci5: command tx timeout
[  272.406108][ T6830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.576803][ T8085] hsr_slave_0: entered promiscuous mode
[  272.578052][ T8085] hsr_slave_1: entered promiscuous mode
[  272.578904][ T8085] debugfs: 'hsr0' already exists in 'hsr'
[  272.578925][ T8085] Cannot create hsr debugfs directory
[  272.741301][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'.
[  272.803191][ T6830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.934463][ T8200] random: crng reseeded on system resumption
[  273.484285][ T8211] hsr0: entered promiscuous mode
[  274.180905][ T5114] Bluetooth: hci5: command tx timeout
[  274.956574][ T6830] bridge_slave_1: left allmulticast mode
[  274.956671][ T6830] bridge_slave_1: left promiscuous mode
[  274.959506][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.048387][ T6830] bridge_slave_0: left allmulticast mode
[  275.048418][ T6830] bridge_slave_0: left promiscuous mode
[  275.048673][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.146194][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.816'.
[  276.260836][ T5114] Bluetooth: hci5: command tx timeout
[  276.914419][ T6830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.991705][ T6830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.036425][ T6830] bond0 (unregistering): Released all slaves
[  277.306092][ T8317] netlink: 27 bytes leftover after parsing attributes in process `syz.2.853'.
[  278.368350][ T8344] input: syz0 as /devices/virtual/input/input25
[  278.481457][ T8344] Device name cannot be null; rc = [-22]
[  281.418912][ T8085] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  281.477639][ T8085] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  281.778939][ T8085] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  281.859445][ T8085] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  282.695045][ T8386] netlink: 'syz.4.865': attribute type 3 has an invalid length.
[  282.695067][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'.
[  282.745597][ T6830] hsr_slave_0: left promiscuous mode
[  282.785214][ T6830] hsr_slave_1: left promiscuous mode
[  282.786748][ T6830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.786843][ T6830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.978031][ T6830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.978055][ T6830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.097759][ T8400] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  284.907793][ T6830] veth1_macvtap: left promiscuous mode
[  284.908047][ T6830] veth0_macvtap: left promiscuous mode
[  284.908298][ T6830] veth1_vlan: left promiscuous mode
[  284.908616][ T6830] veth0_vlan: left promiscuous mode
[  286.026725][ T6830] team0 (unregistering): Port device team_slave_1 removed
[  286.083936][ T6830] team0 (unregistering): Port device team_slave_0 removed
[  286.759595][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.835577][ T8085] 8021q: adding VLAN 0 to HW filter on device team0
[  286.862259][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.862371][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.864432][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.864543][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.049978][ T8517] input: syz0 as /devices/virtual/input/input26
[  288.109175][ T8518] Device name cannot be null; rc = [-22]
[  289.506097][ T6830] IPVS: stop unused estimator thread 0...
[  289.683057][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.348213][ T8531] netlink: 'syz.2.923': attribute type 3 has an invalid length.
[  291.348247][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'.
[  291.481086][ T8085] veth0_vlan: entered promiscuous mode
[  291.603179][ T8085] veth1_vlan: entered promiscuous mode
[  291.766104][ T8085] veth0_macvtap: entered promiscuous mode
[  291.812682][ T8085] veth1_macvtap: entered promiscuous mode
[  291.925272][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.955910][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.017525][   T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.017939][   T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.018182][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.018218][   T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.882864][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.882878][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.271774][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.271795][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.753500][ T8656] netlink: 'syz.3.958': attribute type 3 has an invalid length.
[  299.753522][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'.
[  300.481647][ T8690] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  305.587741][ T8742] random: crng reseeded on system resumption
[  313.223691][ T8782] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  313.347345][ T8787] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  315.194843][ T8782] input: syz0 as /devices/virtual/input/input27
[  317.547217][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  317.547284][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  320.605843][ T8852] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1017'.
[  320.751374][ T8859] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1019'.
[  320.751395][ T8859] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1019'.
[  320.751409][ T8859] netlink: 'syz.4.1019': attribute type 5 has an invalid length.
[  320.751421][ T8859] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1019'.
[  323.160856][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  323.407500][    T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  323.407529][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  323.407546][    T9] usb 3-1: Product: syz
[  323.407559][    T9] usb 3-1: Manufacturer: syz
[  323.407571][    T9] usb 3-1: SerialNumber: syz
[  323.430359][    T9] usb 3-1: config 0 descriptor??
[  323.460975][    T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  323.461588][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  323.488679][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  323.489522][    T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  323.489593][    T9] usb 3-1: media controller created
[  323.539308][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  323.672490][ T8897] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1031'.
[  323.675375][    T9] cxusb: set interface failed
[  323.675399][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  323.884876][    T9] DVB: Unable to find symbol mt352_attach()
[  323.889625][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  323.889650][    T9] zl10353_read_register: readreg error (reg=127, ret==-121)
[  323.889721][    T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  324.030815][    T9] rc_core: IR keymap rc-dvico-mce not found
[  324.030835][    T9] Registered IR keymap rc-empty
[  324.035660][    T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  324.038926][    T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28
[  324.081610][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  324.081632][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  324.088159][    T9] usb 3-1: USB disconnect, device number 6
[  324.374290][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  324.523214][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1032'.
[  325.028348][ T8943] netlink: 'syz.3.1046': attribute type 10 has an invalid length.
[  325.028369][ T8943] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1046'.
[  325.030912][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  325.183173][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  325.185873][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  325.185899][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  325.185915][    T9] usb 3-1: Product: syz
[  325.185926][    T9] usb 3-1: Manufacturer: syz
[  325.185933][    T9] usb 3-1: SerialNumber: syz
[  325.457886][    T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  328.021313][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1055'.
[  328.022973][ T8971] netlink: 'syz.5.1055': attribute type 3 has an invalid length.
[  328.023005][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1055'.
[  329.150493][ T9008] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1066'.
[  329.276813][ T9011] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1067'.
[  331.615991][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1071'.
[  331.730706][ T9037] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  333.541861][ T5939] usb 3-1: USB disconnect, device number 7
[  333.563407][ T5939] usblp0: removed
[  336.120841][ T5939] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  336.272333][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.274063][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  336.274078][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  336.274087][ T5939] usb 5-1: Product: syz
[  336.274094][ T5939] usb 5-1: Manufacturer: syz
[  336.274101][ T5939] usb 5-1: SerialNumber: syz
[  336.503773][ T5939] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  336.599423][ T9097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1100'.
[  336.599439][ T9097] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1100'.
[  336.599448][ T9097] netlink: 'syz.2.1100': attribute type 5 has an invalid length.
[  336.599454][ T9097] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1100'.
[  337.819481][ T9099] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1099'.
[  337.840778][ T9099] netlink: 'syz.5.1099': attribute type 3 has an invalid length.
[  337.840812][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'.
[  341.412175][ T9153] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1119'.
[  341.603218][ T9157] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1121'.
[  341.603234][ T9157] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1121'.
[  341.603242][ T9157] netlink: 'syz.3.1121': attribute type 5 has an invalid length.
[  341.603252][ T9157] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1121'.
[  343.372669][ T5939] usb 5-1: USB disconnect, device number 7
[  343.379263][ T5939] usblp0: removed
[  343.565292][ T9183] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1131'.
[  344.382898][ T9199] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1138'.
[  344.382925][ T9199] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1138'.
[  344.382939][ T9199] netlink: 'syz.5.1138': attribute type 5 has an invalid length.
[  344.382951][ T9199] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1138'.
[  344.475580][ T9176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'.
[  345.663442][ T9220] mkiss: ax0: crc mode is auto.
[  346.855997][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.054230][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1152'.
[  347.574337][ T9265] netlink: 'syz.3.1166': attribute type 1 has an invalid length.
[  347.574356][ T9265] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1166'.
[  348.101376][ T9280] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1174'.
[  349.700958][ T9300] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  353.589893][ T9318] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1189'.
[  355.618602][ T9337] veth0_vlan: entered allmulticast mode
[  355.815275][ T9345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1192'.
[  357.082402][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'.
[  358.589684][ T9371] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  359.944483][   T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  360.259456][   T31] usb 4-1: device descriptor read/64, error -71
[  360.550818][   T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  360.691124][   T31] usb 4-1: device descriptor read/64, error -71
[  360.801317][   T31] usb usb4-port1: attempt power cycle
[  361.010243][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'.
[  361.043340][ T9432] syzkaller0: entered promiscuous mode
[  361.043356][ T9432] syzkaller0: entered allmulticast mode
[  361.140934][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  361.162169][   T31] usb 4-1: device descriptor read/8, error -71
[  361.410918][   T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  361.431904][   T31] usb 4-1: device descriptor read/8, error -71
[  361.541267][   T31] usb usb4-port1: unable to enumerate USB device
[  361.852119][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.870555][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.882809][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.901007][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.901942][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.957919][ T5797] ==================================================================
[  361.957978][ T5797] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  361.958123][ T5797] Read of size 8 at addr ffffc9000621a008 by task kworker/u9:2/5797
[  361.958137][ T5797] 
[  361.958167][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  361.958192][ T5797] Tainted: [L]=SOFTLOCKUP
[  361.958198][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  361.958209][ T5797] Workqueue: hci3 hci_rx_work
[  361.958344][ T5797] Call Trace:
[  361.958355][ T5797]  <TASK>
[  361.958364][ T5797]  dump_stack_lvl+0xe8/0x150
[  361.958454][ T5797]  print_report+0xba/0x230
[  361.958481][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.958521][ T5797]  kasan_report+0x117/0x150
[  361.958595][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.958615][ T5797]  __list_add_valid_or_report+0x4e/0x130
[  361.958632][ T5797]  kcov_remote_stop+0x457/0x680
[  361.958672][ T5797]  ? hci_send_to_monitor+0xe2/0x590
[  361.958714][ T5797]  hci_rx_work+0x42c/0x1030
[  361.958737][ T5797]  ? process_scheduled_works+0xa25/0x1830
[  361.958773][ T5797]  process_scheduled_works+0xb02/0x1830
[  361.958805][ T5797]  ? __pfx_process_scheduled_works+0x10/0x10
[  361.958829][ T5797]  ? assign_work+0x3d5/0x5e0
[  361.958852][ T5797]  worker_thread+0xa50/0xfc0
[  361.958883][ T5797]  kthread+0x388/0x470
[  361.958900][ T5797]  ? __pfx_worker_thread+0x10/0x10
[  361.958920][ T5797]  ? __pfx_kthread+0x10/0x10
[  361.958937][ T5797]  ret_from_fork+0x51e/0xb90
[  361.958974][ T5797]  ? __pfx_ret_from_fork+0x10/0x10
[  361.958994][ T5797]  ? __switch_to+0xc7d/0x1450
[  361.959024][ T5797]  ? __pfx_kthread+0x10/0x10
[  361.959041][ T5797]  ret_from_fork_asm+0x1a/0x30
[  361.959063][ T5797]  </TASK>
[  361.959104][ T5797] 
[  361.959109][ T5797] The buggy address belongs to a vmalloc virtual mapping
[  361.959148][ T5797] Memory state around the buggy address:
[  361.959158][ T5797]  ffffc90006219f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  361.959169][ T5797]  ffffc90006219f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  361.959180][ T5797] >ffffc9000621a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  361.959188][ T5797]                       ^
[  361.959197][ T5797]  ffffc9000621a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  361.959208][ T5797]  ffffc9000621a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  361.959216][ T5797] ==================================================================
[  361.959232][ T5797] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  361.959246][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  361.959268][ T5797] Tainted: [L]=SOFTLOCKUP
[  361.959275][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  361.959285][ T5797] Workqueue: hci3 hci_rx_work
[  361.959304][ T5797] Call Trace:
[  361.959310][ T5797]  <TASK>
[  361.959317][ T5797]  vpanic+0x56c/0xa60
[  361.959341][ T5797]  ? __pfx_vpanic+0x10/0x10
[  361.959367][ T5797]  panic+0xc5/0xd0
[  361.959388][ T5797]  ? __pfx_panic+0x10/0x10
[  361.959411][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.959427][ T5797]  ? rcu_is_watching+0x15/0xb0
[  361.959458][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.959474][ T5797]  check_panic_on_warn+0x89/0xb0
[  361.959502][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.959518][ T5797]  end_report+0x73/0x180
[  361.959540][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.959555][ T5797]  kasan_report+0x128/0x150
[  361.959578][ T5797]  ? __list_add_valid_or_report+0x4e/0x130
[  361.959598][ T5797]  __list_add_valid_or_report+0x4e/0x130
[  361.959616][ T5797]  kcov_remote_stop+0x457/0x680
[  361.959634][ T5797]  ? hci_send_to_monitor+0xe2/0x590
[  361.959652][ T5797]  hci_rx_work+0x42c/0x1030
[  361.959674][ T5797]  ? process_scheduled_works+0xa25/0x1830
[  361.959696][ T5797]  process_scheduled_works+0xb02/0x1830
[  361.959727][ T5797]  ? __pfx_process_scheduled_works+0x10/0x10
[  361.959751][ T5797]  ? assign_work+0x3d5/0x5e0
[  361.959773][ T5797]  worker_thread+0xa50/0xfc0
[  361.959805][ T5797]  kthread+0x388/0x470
[  361.959821][ T5797]  ? __pfx_worker_thread+0x10/0x10
[  361.959841][ T5797]  ? __pfx_kthread+0x10/0x10
[  361.959858][ T5797]  ret_from_fork+0x51e/0xb90
[  361.959881][ T5797]  ? __pfx_ret_from_fork+0x10/0x10
[  361.959901][ T5797]  ? __switch_to+0xc7d/0x1450
[  361.959921][ T5797]  ? __pfx_kthread+0x10/0x10
[  361.959938][ T5797]  ret_from_fork_asm+0x1a/0x30
[  361.959960][ T5797]  </TASK>
[  361.960223][ T5797] Kernel Offset: disabled