last executing test programs:

6m33.734115911s ago: executing program 0 (id=929):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0)

6m32.367005014s ago: executing program 0 (id=933):
socket(0x400000000010, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4)

6m31.886091661s ago: executing program 0 (id=940):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300))
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x18082, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

6m31.780540258s ago: executing program 0 (id=941):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

6m30.571248609s ago: executing program 0 (id=943):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)

6m30.353556811s ago: executing program 0 (id=946):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0)

6m15.263339666s ago: executing program 32 (id=946):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0)

4m0.411373871s ago: executing program 4 (id=1487):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

3m55.716744008s ago: executing program 4 (id=1491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xe000, 0x4, 0xfffffff7, 0x6, 0x0, [{0x6, 0x49, 0x2d, '\x00', 0x9}, {0x0, 0x6, 0x5b, '\x00', 0x5}, {0x0, 0x2, 0xfe, '\x00', 0x9}, {0xfa, 0x2, 0x5, '\x00', 0x2}, {0x0, 0x6, 0x1, '\x00', 0x2}, {0x32, 0x40, 0x4, '\x00', 0x37}, {0x28, 0x1, 0xf0, '\x00', 0x1}, {0x4, 0x0, 0x1, '\x00', 0x2}, {0x80, 0x7b, 0x80}, {0x95, 0x6, 0x2f}, {0x2, 0x1, 0xf}, {0x80, 0x7, 0x4, '\x00', 0x1}, {0x3, 0x2, 0xf4, '\x00', 0x5}, {0x0, 0x62, 0x9, '\x00', 0x2a}, {0xc, 0x9, 0x9, '\x00', 0x1}, {0x4, 0x4, 0x3, '\x00', 0x2}, {0x4, 0x2, 0x7, '\x00', 0xff}, {0x76, 0x2, 0xf, '\x00', 0x5}, {0x10, 0x9, 0x41, '\x00', 0x8}, {0x8, 0x8, 0x10, '\x00', 0xff}, {0x9, 0x85, 0x8, '\x00', 0x9}, {0x8b, 0x53, 0x81, '\x00', 0xe}, {0x0, 0x3, 0x8, '\x00', 0x1}, {0x2, 0x9, 0x4, '\x00', 0x3}]}})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48})

3m55.263913208s ago: executing program 4 (id=1492):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000260a010400000000000000000a0000060900010073797a310000000010000480140001800a0001007265646972000000040002800900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]})
write(r2, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000040000003889423bc9ba170000000000000000bbfe8000000000000000000000000000aa4e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e13808ca72381f41e5fff9620915b6f78670dfaf9a20380831"], 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400))
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x200013, 0x0)

3m52.9999988s ago: executing program 4 (id=1496):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x4000800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m51.738283799s ago: executing program 4 (id=1499):
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=ANY=[@ANYBLOB="480000000206030000000000000000f5000000000500010006000000adc5b5d9050005000200000005000400000000000900020073797a310058a503a82601ce4580488100000068"], 0x48}}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

3m49.446568908s ago: executing program 4 (id=1502):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xe000, 0x4, 0xfffffff7, 0x6, 0x0, [{0x6, 0x49, 0x2d, '\x00', 0x9}, {0x0, 0x6, 0x5b, '\x00', 0x5}, {0x0, 0x2, 0xfe, '\x00', 0x9}, {0xfa, 0x2, 0x5, '\x00', 0x2}, {0x0, 0x6, 0x1, '\x00', 0x2}, {0x32, 0x40, 0x4, '\x00', 0x37}, {0x28, 0x1, 0xf0, '\x00', 0x1}, {0x4, 0x0, 0x1, '\x00', 0x2}, {0x80, 0x7b, 0x80}, {0x95, 0x6, 0x2f}, {0x2, 0x1, 0xf}, {0x80, 0x7, 0x4, '\x00', 0x1}, {0x3, 0x2, 0xf4, '\x00', 0x5}, {0x0, 0x62, 0x9, '\x00', 0x2a}, {0xc, 0x9, 0x9, '\x00', 0x1}, {0x4, 0x4, 0x3, '\x00', 0x2}, {0x4, 0x2, 0x7, '\x00', 0xff}, {0x76, 0x2, 0xf, '\x00', 0x5}, {0x10, 0x9, 0x41, '\x00', 0x8}, {0x8, 0x8, 0x10, '\x00', 0xff}, {0x9, 0x85, 0x8, '\x00', 0x9}, {0x8b, 0x53, 0x81, '\x00', 0xe}, {0x0, 0x3, 0x8, '\x00', 0x1}, {0x2, 0x9, 0x4, '\x00', 0x3}]}})
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48})
r5 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610)
unshare(0x6a040000)

3m33.910069606s ago: executing program 33 (id=1502):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xe000, 0x4, 0xfffffff7, 0x6, 0x0, [{0x6, 0x49, 0x2d, '\x00', 0x9}, {0x0, 0x6, 0x5b, '\x00', 0x5}, {0x0, 0x2, 0xfe, '\x00', 0x9}, {0xfa, 0x2, 0x5, '\x00', 0x2}, {0x0, 0x6, 0x1, '\x00', 0x2}, {0x32, 0x40, 0x4, '\x00', 0x37}, {0x28, 0x1, 0xf0, '\x00', 0x1}, {0x4, 0x0, 0x1, '\x00', 0x2}, {0x80, 0x7b, 0x80}, {0x95, 0x6, 0x2f}, {0x2, 0x1, 0xf}, {0x80, 0x7, 0x4, '\x00', 0x1}, {0x3, 0x2, 0xf4, '\x00', 0x5}, {0x0, 0x62, 0x9, '\x00', 0x2a}, {0xc, 0x9, 0x9, '\x00', 0x1}, {0x4, 0x4, 0x3, '\x00', 0x2}, {0x4, 0x2, 0x7, '\x00', 0xff}, {0x76, 0x2, 0xf, '\x00', 0x5}, {0x10, 0x9, 0x41, '\x00', 0x8}, {0x8, 0x8, 0x10, '\x00', 0xff}, {0x9, 0x85, 0x8, '\x00', 0x9}, {0x8b, 0x53, 0x81, '\x00', 0xe}, {0x0, 0x3, 0x8, '\x00', 0x1}, {0x2, 0x9, 0x4, '\x00', 0x3}]}})
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48})
r5 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610)
unshare(0x6a040000)

3m10.446488365s ago: executing program 3 (id=1588):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000040), 0x1001)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xe000, 0x4, 0xfffffff7, 0x6, 0x0, [{0x6, 0x49, 0x2d, '\x00', 0x9}, {0x0, 0x6, 0x5b, '\x00', 0x5}, {0x0, 0x2, 0xfe, '\x00', 0x9}, {0xfa, 0x2, 0x5, '\x00', 0x2}, {0x0, 0x6, 0x1, '\x00', 0x2}, {0x32, 0x40, 0x4, '\x00', 0x37}, {0x28, 0x1, 0xf0, '\x00', 0x1}, {0x4, 0x0, 0x1, '\x00', 0x2}, {0x80, 0x7b, 0x80}, {0x95, 0x6, 0x2f}, {0x2, 0x1, 0xf}, {0x80, 0x7, 0x4, '\x00', 0x1}, {0x3, 0x2, 0xf4, '\x00', 0x5}, {0x0, 0x62, 0x9, '\x00', 0x2a}, {0xc, 0x9, 0x9, '\x00', 0x1}, {0x4, 0x4, 0x3, '\x00', 0x2}, {0x4, 0x2, 0x7, '\x00', 0xff}, {0x76, 0x2, 0xf, '\x00', 0x5}, {0x10, 0x9, 0x41, '\x00', 0x8}, {0x8, 0x8, 0x10, '\x00', 0xff}, {0x9, 0x85, 0x8, '\x00', 0x9}, {0x8b, 0x53, 0x81, '\x00', 0xe}, {0x0, 0x3, 0x8, '\x00', 0x1}, {0x2, 0x9, 0x4, '\x00', 0x3}]}})
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48})
r6 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610)
unshare(0x6a040000)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000000c0)='./file0/file0\x00', r0}, 0x14)
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0})
socket$inet6_tcp(0xa, 0x1, 0x0)
munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000)

3m7.744418325s ago: executing program 3 (id=1592):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, 0x0, 0x24000840)
openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0)
epoll_create1(0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

3m6.090847804s ago: executing program 3 (id=1595):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0xb56d, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), 0x0, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

3m5.653450737s ago: executing program 3 (id=1597):
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=ANY=[@ANYBLOB="480000000206030000000000000000f5000000000500010006000000adc5b5d9050005000200000005000400000000000900020073797a310058a503a82601ce4580488100000068"], 0x48}}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3m1.370868573s ago: executing program 3 (id=1601):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b"}}}}}, 0x0)

3m0.923515171s ago: executing program 3 (id=1604):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200"], 0x50)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
syz_emit_ethernet(0x4a, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r3, 0x409, 0xc)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006)

2m44.964597949s ago: executing program 34 (id=1604):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200"], 0x50)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
syz_emit_ethernet(0x4a, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r3, 0x409, 0xc)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006)

16.917839453s ago: executing program 5 (id=1759):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0)
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r1 = socket$kcm(0x23, 0x5, 0x0)
listen(r1, 0x800)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
write$tun(r4, 0x0, 0x3db)
accept4(r1, 0x0, 0x0, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x1, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0xa, 0x1, 0x106)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

12.86892346s ago: executing program 2 (id=1761):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000bc9, 0x200)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x3, 0x1}, 0xc)
r4 = fsmount(r1, 0x0, 0x82)
fchdir(r4)
unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6)
r9 = dup(r0)
r10 = socket$kcm(0xa, 0x1, 0x106)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000180))
syz_clone3(&(0x7f0000000480)={0x8000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280)=<r11=>0x0, {0x31}, &(0x7f00000002c0)=""/205, 0xcd, &(0x7f0000000400)=""/4, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r9}}, 0x58)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000200)={0x0, <r12=>0x0})
setpgid(r11, r12)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

12.665084388s ago: executing program 1 (id=1762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0})
close(0x3)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x4005, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000480)=[0x0])
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058)

12.646066544s ago: executing program 5 (id=1763):
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)

10.983596379s ago: executing program 5 (id=1764):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
timerfd_create(0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30be, 0x400, 0x8, 0x40000187})
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r0], 0xc4}}, 0x0)

10.810971748s ago: executing program 2 (id=1765):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc", 0xa2}], 0x2}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580), 0x0, 0x1000803c, 0x0, 0x0)

10.697284476s ago: executing program 5 (id=1766):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200"], 0x50)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
syz_emit_ethernet(0x4a, 0x0, 0x0)
memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006)

7.478424832s ago: executing program 2 (id=1767):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0)
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r1 = socket$kcm(0x23, 0x5, 0x0)
listen(r1, 0x800)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
write$tun(r4, 0x0, 0x3db)
accept4(r1, 0x0, 0x0, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x1, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

6.043509514s ago: executing program 1 (id=1768):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r2, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}}, 0x4)

5.68009662s ago: executing program 2 (id=1769):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

5.545648192s ago: executing program 1 (id=1770):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r2 = gettid()
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
poll(0x0, 0x0, 0xffffffffffbffff8)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000005680)=[{{&(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="0961665e49ab22402aff9c20321d945f93476e1784dfe2a2cce7935cb95cac4e8ac28ceef774fa799960bf441c2ff4e0096827ea27077c086c9e496d929b75bb0a03234599d564f6afe116cdea68cc0fde6a4c9691800f0f4fa09de2a85cbe9b1ce0872c03877e171bdb988e25e8dba28cc8962ee238012b3aa8e92ec635c643ee83517192bb509d3859eaa777e950e6dc6c13014edee126a652f90620ff7fa457baffd154bd5cace0d982690a40e2e15449b90f86f110edfa2fe3dee2ab015da469d9e525d68e69b9807847a7e6b9de9fb42d3a1ee192b75458a3316b64a37dbede2d3fd1546a59f7e6daa954", 0xed}], 0x1, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [r1, r4, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, r1, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x1c, 0x1, 0x1, [r1, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0xf8, 0x48804}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="89eb108d7e2c555629241e56bcc36d1bc56ce790b4e1713b62de73dc2a1e0274581e3488ffb43d73b134f5fae79364ee", 0x30}, {&(0x7f0000005040)="a6612bcda7a0e0254c9ae6fa9497f0a08b4888dbd4dd6f07a184811a686b146b456065bd8f55d18f8b8e809552567fb7312706145f991612b4ccff040cbd90a82f4e92293d0cd2929bc1adbd9ba45c989a41f686b1a55580ab35e8462dde61230a6138070c07a6c07ffb62899b0de67385b968832f303a2b392a4a0721fceb6fe00df21f9aee89ea26796822ff41fc153413fcb8053d4d972e7d01d2c9eaa8128f5a480aa7f8ca5c92106037c1518b8749a40c33e5377614f7622ae88db4047420", 0xc1}, {0x0}], 0x4, &(0x7f0000005340)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x4c040}}, {{&(0x7f0000005400)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000005480), 0x0, &(0x7f0000005600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x10}}], 0x70, 0x4000050}}], 0x3, 0x0)
fcntl$setstatus(r5, 0x4, 0x2c00)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

4.406345294s ago: executing program 1 (id=1771):
r0 = socket$l2tp(0x2, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

4.383517098s ago: executing program 2 (id=1772):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a0008", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x2)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

3.451815504s ago: executing program 1 (id=1773):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1], 0x3c}}, 0x0)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

3.20642869s ago: executing program 5 (id=1774):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, 0x0, 0x24000840)
r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0)
epoll_create1(0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
write(r2, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r3, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$sock_TIOCINQ(r3, 0x541b, 0x0)

1.370838172s ago: executing program 2 (id=1775):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0)
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r1 = socket$kcm(0x23, 0x5, 0x0)
listen(r1, 0x800)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
write$tun(r4, 0x0, 0x3db)
accept4(r1, 0x0, 0x0, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x1, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

1.367095505s ago: executing program 5 (id=1776):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x58}, 0x1, 0x7}, 0x4008000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 1 (id=1777):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0xb56d, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0)

kernel console output (not intermixed with test programs):

config 208 has an invalid interface number: 37 but max is 0
[  133.370070][ T5733] usb 1-1: config 208 has no interface number 0
[  133.370104][ T5733] usb 1-1: config 208 interface 37 has no altsetting 0
[  133.399917][ T6158] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  133.400012][ T5733] usb 1-1: New USB device found, idVendor=050d, idProduct=705e, bcdDevice=ab.76
[  133.400035][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.400051][ T5733] usb 1-1: Product: syz
[  133.400063][ T5733] usb 1-1: Manufacturer: syz
[  133.400076][ T5733] usb 1-1: SerialNumber: syz
[  133.973016][  T820] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  134.008424][ T5733] usb 1-1: USB disconnect, device number 3
[  134.198816][  T820] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  134.198875][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  134.198891][  T820] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  134.198905][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  134.198919][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  134.199994][  T820] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  134.200046][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  134.200064][  T820] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  134.200078][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  134.200092][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  134.231966][  T820] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  134.232022][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  134.232046][  T820] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  134.232069][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  134.232092][  T820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  134.235380][  T820] usb 5-1: string descriptor 0 read error: -22
[  134.235544][  T820] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  134.235565][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.241807][  T820] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  135.637610][  T820] usb 5-1: USB disconnect, device number 2
[  141.600605][ T5602] Bluetooth: hci4: command tx timeout
[  142.595378][ T6240] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  142.595378][ T6240] The task syz.3.144 (6240) triggered the difference, watch for misbehavior.
[  143.260619][ T5733] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[  143.413327][ T5733] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  143.413384][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  143.413410][ T5733] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.413444][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  143.413469][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  143.415955][ T5733] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  143.416008][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  143.416054][ T5733] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.416077][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  143.416101][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  143.419545][ T5733] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  143.419597][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  143.419624][ T5733] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.419649][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  143.419674][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  143.444536][ T6251] netlink: 'syz.4.150': attribute type 1 has an invalid length.
[  143.547791][ T5733] usb 3-1: string descriptor 0 read error: -22
[  143.547962][ T5733] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  143.547987][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.559906][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'.
[  143.754489][ T5733] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  143.899039][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'.
[  143.956276][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'.
[  143.994923][ T6251] bond1: entered promiscuous mode
[  143.998492][ T6251] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.099489][ T5733] usb 3-1: USB disconnect, device number 3
[  148.220259][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'.
[  148.220296][ T6300] netlink: 56 bytes leftover after parsing attributes in process `syz.2.166'.
[  148.242221][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'.
[  148.242254][ T6300] netlink: 56 bytes leftover after parsing attributes in process `syz.2.166'.
[  151.584861][ T5718] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  153.024675][ T5718] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  153.024733][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  153.024761][ T5718] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  153.024788][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  153.024812][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  153.029256][ T5718] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  153.029315][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  153.029344][ T5718] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  153.029370][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  153.029397][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  153.030882][ T5718] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  153.030935][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  153.030964][ T5718] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  153.030990][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  153.031015][ T5718] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  153.038333][ T5718] usb 3-1: string descriptor 0 read error: -22
[  153.038489][ T5718] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  153.038511][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.239074][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.181'.
[  153.239107][ T6347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.181'.
[  153.321901][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.181'.
[  153.321955][ T6348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.181'.
[  153.596740][ T5718] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  153.695072][ T5718] usb 3-1: USB disconnect, device number 4
[  153.753862][ T6353] netlink: 'syz.0.183': attribute type 10 has an invalid length.
[  153.968447][ T6357] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.184'.
[  154.656439][ T6381] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.191'.
[  155.237322][ T6394] binfmt_misc: register: failed to install interpreter file ./file0
[  156.481786][ T6402] netlink: 'syz.3.199': attribute type 1 has an invalid length.
[  156.539743][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.199'.
[  156.665867][ T6402] bond1: entered promiscuous mode
[  156.666644][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1
[  156.667564][ T6406] bond1: entered allmulticast mode
[  156.958554][ T6402] bond1: (slave bridge1): making interface the new active one
[  156.958582][ T6402] bridge1: entered promiscuous mode
[  156.958955][ T6402] bridge1: entered allmulticast mode
[  157.203961][ T6402] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  160.448825][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.213'.
[  160.448860][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.213'.
[  160.483121][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.213'.
[  160.483156][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.213'.
[  160.803627][ T6451] netlink: 'syz.4.218': attribute type 1 has an invalid length.
[  161.240063][ T6451] bond2: entered promiscuous mode
[  161.263914][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2
[  161.625052][ T6459] bond2: (slave bridge2): making interface the new active one
[  161.625080][ T6459] bridge2: entered promiscuous mode
[  161.677708][ T6459] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  162.757331][ T6486] netlink: 'syz.2.229': attribute type 1 has an invalid length.
[  163.646577][ T6486] bond1: entered promiscuous mode
[  163.650385][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1
[  163.777912][ T6498] bond1: (slave bridge1): making interface the new active one
[  163.777934][ T6498] bridge1: entered promiscuous mode
[  163.814233][ T6498] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  165.319960][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  166.640624][   T10] usb 4-1: Using ep0 maxpacket: 8
[  166.649544][   T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  166.649572][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.649590][   T10] usb 4-1: config 0 has no interface number 0
[  166.649637][   T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  166.649676][   T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  166.649700][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.681844][   T10] usb 4-1: config 0 descriptor??
[  166.693244][   T10] ldusb 4-1:0.55: Interrupt in endpoint not found
[  167.870885][ T6535] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[  168.022558][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'.
[  168.060976][  T820] usb 4-1: USB disconnect, device number 3
[  168.279969][ T6535] bond1: entered promiscuous mode
[  168.301495][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.483929][ T6540] bond1: entered allmulticast mode
[  168.811763][ T6551] Bluetooth: MGMT ver 1.23
[  169.754294][ T6552] bond1: (slave bridge1): making interface the new active one
[  169.754319][ T6552] bridge1: entered promiscuous mode
[  169.759881][ T6552] bridge1: entered allmulticast mode
[  169.786688][ T6552] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  170.940842][ T5602] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  171.320573][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout
[  171.534252][ T6579] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.252'.
[  173.623143][ T6607] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.269'.
[  174.840690][ T5602] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  174.841058][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout
[  176.340907][ T6639] netlink: 'syz.1.280': attribute type 1 has an invalid length.
[  176.454887][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'.
[  176.695015][ T6639] bond1: entered promiscuous mode
[  176.704443][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.714316][ T6644] bond1: entered allmulticast mode
[  176.842005][ T6661] netlink: 'syz.4.288': attribute type 1 has an invalid length.
[  177.166938][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'.
[  177.560721][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout
[  177.560936][ T4913] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  177.858697][ T6661] bond3: entered promiscuous mode
[  177.860984][ T6661] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.922078][ T6674] netlink: 'syz.3.291': attribute type 10 has an invalid length.
[  177.996614][ T6639] bond1: (slave bridge1): making interface the new active one
[  177.996636][ T6639] bridge1: entered promiscuous mode
[  177.996768][ T6639] bridge1: entered allmulticast mode
[  178.003895][ T6639] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  178.006300][ T6664] bond3: entered allmulticast mode
[  178.131945][ T6669] bond3: (slave bridge3): making interface the new active one
[  178.137916][ T6669] bridge3: entered promiscuous mode
[  178.138227][ T6669] bridge3: entered allmulticast mode
[  178.156665][ T6669] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  178.237208][ T6674] team0: Failed to send options change via netlink (err -105)
[  178.237235][ T6674] team0: Port device dummy0 added
[  178.697907][ T6679] netlink: 148 bytes leftover after parsing attributes in process `syz.2.293'.
[  179.233350][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'.
[  180.943350][ T6729] netlink: 'syz.3.314': attribute type 1 has an invalid length.
[  181.023610][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'.
[  181.111595][ T6729] bond2: entered promiscuous mode
[  181.128130][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.129340][ T6731] bond2: entered allmulticast mode
[  181.267674][ T6729] bond2: (slave bridge2): making interface the new active one
[  181.267701][ T6729] bridge2: entered promiscuous mode
[  181.267932][ T6729] bridge2: entered allmulticast mode
[  181.270030][ T6729] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  181.323153][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'.
[  182.319128][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'.
[  182.707962][ T6779] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[  182.785051][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'.
[  182.810896][ T6779] bond2: entered promiscuous mode
[  182.811546][ T6779] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.812902][ T6783] bond2: entered allmulticast mode
[  183.029536][ T6779] bond2: (slave bridge2): making interface the new active one
[  183.029560][ T6779] bridge2: entered promiscuous mode
[  183.029784][ T6779] bridge2: entered allmulticast mode
[  183.107831][ T6779] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  183.165857][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'.
[  183.218893][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'.
[  183.256501][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'.
[  183.256613][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'.
[  184.174783][ T6820] __nla_validate_parse: 2 callbacks suppressed
[  184.174857][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'.
[  184.818040][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'.
[  186.784500][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.369'.
[  189.138728][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.382'.
[  191.813480][ T6937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.394'.
[  193.489749][ T6951] netlink: 100 bytes leftover after parsing attributes in process `syz.0.398'.
[  193.806059][ T6962] sch_tbf: peakrate 11 is lower than or equals to rate 2048 !
[  195.173320][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  195.184891][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  195.256227][ T6981] netlink: 100 bytes leftover after parsing attributes in process `syz.3.409'.
[  195.257159][ T6981] netlink: 100 bytes leftover after parsing attributes in process `syz.3.409'.
[  195.469148][ T6983] netlink: 100 bytes leftover after parsing attributes in process `syz.3.410'.
[  198.349310][ T7013] netlink: 100 bytes leftover after parsing attributes in process `syz.4.420'.
[  198.362744][ T7013] netlink: 100 bytes leftover after parsing attributes in process `syz.4.420'.
[  198.389434][ T7015] netlink: 100 bytes leftover after parsing attributes in process `syz.1.421'.
[  198.473035][ T7017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.422'.
[  198.592558][ T7019] netlink: 104 bytes leftover after parsing attributes in process `syz.4.423'.
[  198.639798][ T7021] netlink: 'syz.1.424': attribute type 1 has an invalid length.
[  198.658206][ T7023] netlink: 104 bytes leftover after parsing attributes in process `syz.4.423'.
[  198.898665][ T7021] bond2: entered promiscuous mode
[  198.941075][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.048236][ T7028] bond2: (slave bridge3): making interface the new active one
[  199.048264][ T7028] bridge3: entered promiscuous mode
[  199.051870][ T7028] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  199.463004][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'.
[  199.763077][ T7041] netlink: 100 bytes leftover after parsing attributes in process `syz.2.429'.
[  199.814094][ T7046] netlink: 100 bytes leftover after parsing attributes in process `syz.2.429'.
[  199.961554][ T7048] netlink: 100 bytes leftover after parsing attributes in process `syz.4.433'.
[  203.844459][ T7092] __nla_validate_parse: 3 callbacks suppressed
[  203.844481][ T7092] netlink: 100 bytes leftover after parsing attributes in process `syz.3.447'.
[  203.849817][ T7092] netlink: 100 bytes leftover after parsing attributes in process `syz.3.447'.
[  207.944979][ T7123] netlink: 100 bytes leftover after parsing attributes in process `syz.3.460'.
[  207.953041][ T7123] netlink: 100 bytes leftover after parsing attributes in process `syz.3.460'.
[  210.322636][  T820] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  210.437230][ T7171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.478'.
[  210.470957][  T820] usb 3-1: Using ep0 maxpacket: 8
[  210.476590][  T820] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  210.476620][  T820] usb 3-1: config 0 has no interface number 0
[  210.476690][  T820] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  210.476715][  T820] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  210.476741][  T820] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  210.476765][  T820] usb 3-1: config 0 interface 55 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  210.476789][  T820] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  210.476834][  T820] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  210.476857][  T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.529834][ T7173] netlink: 104 bytes leftover after parsing attributes in process `syz.0.478'.
[  210.764329][  T820] usb 3-1: config 0 descriptor??
[  210.822578][  T820] ldusb 3-1:0.55: Interrupt in endpoint not found
[  211.923595][ T7187] netlink: 68 bytes leftover after parsing attributes in process `syz.0.482'.
[  211.969562][ T5614] Bluetooth: hci1: command 0x0406 tx timeout
[  211.969602][ T5614] Bluetooth: hci3: command 0x0406 tx timeout
[  211.969625][ T5614] Bluetooth: hci2: command 0x0406 tx timeout
[  211.969647][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout
[  211.994381][ T7187] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[  212.013115][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'.
[  212.106037][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'.
[  212.368359][ T7187] bond3: entered promiscuous mode
[  212.370125][ T7187] 8021q: adding VLAN 0 to HW filter on device bond3
[  212.381393][ T7190] bond3: entered allmulticast mode
[  212.561538][ T7187] bond3: (slave bridge3): making interface the new active one
[  212.561565][ T7187] bridge3: entered promiscuous mode
[  212.561894][ T7187] bridge3: entered allmulticast mode
[  212.628620][ T7187] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  212.787674][ T5867] usb 3-1: USB disconnect, device number 5
[  213.234197][ T7212] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.488'.
[  214.583078][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'.
[  214.724116][ T7235] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[  215.089369][ T7235] 8021q: adding VLAN 0 to HW filter on device bond3
[  215.485101][ T7238] bond3: (slave geneve2): making interface the new active one
[  215.487985][ T7238] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  215.795476][ T7255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.505'.
[  215.843279][ T7255] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[  215.922004][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'.
[  216.124470][ T7255] bond4: entered promiscuous mode
[  216.130931][ T7255] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.136022][ T7260] bond4: entered allmulticast mode
[  216.893618][ T7255] bond4: (slave bridge4): making interface the new active one
[  216.893646][ T7255] bridge4: entered promiscuous mode
[  216.895557][ T7255] bridge4: entered allmulticast mode
[  216.903424][ T7255] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  217.385496][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'.
[  217.432044][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'.
[  217.798695][ T7294] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.520'.
[  217.920833][ T7299] io-wq is not configured for unbound workers
[  220.680755][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  220.730861][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'.
[  220.850552][ T7331] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.530'.
[  221.676298][ T7339] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.534'.
[  221.990871][ T7347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.540'.
[  222.065187][ T7352] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  222.150757][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'.
[  222.290250][ T7357] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.541'.
[  222.423065][ T7352] bond4: entered promiscuous mode
[  222.427772][ T7352] 8021q: adding VLAN 0 to HW filter on device bond4
[  222.428644][ T7347] bond4: entered allmulticast mode
[  222.624052][ T7363] bond4: (slave bridge4): making interface the new active one
[  222.624078][ T7363] bridge4: entered promiscuous mode
[  222.661719][ T7363] bridge4: entered allmulticast mode
[  222.665174][ T7363] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  225.600479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  225.620471][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  225.630468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  228.331796][ T7431] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.568'.
[  228.335906][ T7443] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.572'.
[  230.019610][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'.
[  230.755942][ T7475] netlink: 68 bytes leftover after parsing attributes in process `syz.1.583'.
[  230.759185][ T7475] netlink: 'syz.1.583': attribute type 1 has an invalid length.
[  230.854779][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'.
[  230.889016][ T7479] netlink: 100 bytes leftover after parsing attributes in process `syz.0.584'.
[  230.921445][ T7481] netlink: 'syz.4.585': attribute type 1 has an invalid length.
[  230.926803][ T7475] bond5: entered promiscuous mode
[  230.927468][ T7475] 8021q: adding VLAN 0 to HW filter on device bond5
[  230.943568][ T7483] netlink: 100 bytes leftover after parsing attributes in process `syz.0.584'.
[  230.965283][ T7477] bond5: entered allmulticast mode
[  231.007134][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'.
[  231.054897][ T7481] bond4: entered promiscuous mode
[  231.064513][ T7481] 8021q: adding VLAN 0 to HW filter on device bond4
[  231.106177][ T7485] bond4: entered allmulticast mode
[  231.157501][ T7477] bond5: (slave bridge5): making interface the new active one
[  231.157527][ T7477] bridge5: entered promiscuous mode
[  231.157784][ T7477] bridge5: entered allmulticast mode
[  231.169363][ T7477] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  231.284960][ T7481] bond4: (slave bridge5): making interface the new active one
[  231.284987][ T7481] bridge5: entered promiscuous mode
[  231.285205][ T7481] bridge5: entered allmulticast mode
[  231.313521][ T7481] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  232.816257][ T7524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.603'.
[  232.839588][ T7524] netlink: 'syz.1.603': attribute type 1 has an invalid length.
[  232.942061][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'.
[  233.109949][ T7524] bond6: entered promiscuous mode
[  233.120029][ T7524] 8021q: adding VLAN 0 to HW filter on device bond6
[  233.127950][ T7527] bond6: entered allmulticast mode
[  233.405944][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.604'.
[  233.974382][ T7533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  233.974592][ T7533] block device autoloading is deprecated and will be removed.
[  234.067967][ T7532] could not allocate digest TFM handle md5
[  234.163906][ T7527] bond6: (slave bridge6): making interface the new active one
[  234.163932][ T7527] bridge6: entered promiscuous mode
[  234.164072][ T7527] bridge6: entered allmulticast mode
[  234.257460][ T7527] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  234.675106][ T7552] kernel profiling enabled (shift: 9)
[  235.184650][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'.
[  235.214450][ T7573] netlink: 'syz.3.618': attribute type 1 has an invalid length.
[  235.541036][ T7573] 8021q: adding VLAN 0 to HW filter on device bond3
[  235.882542][ T7579] bond3: (slave geneve2): making interface the new active one
[  235.929157][ T7579] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  236.507646][ T7605] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  236.595943][ T7605] 8021q: adding VLAN 0 to HW filter on device bond7
[  238.734129][ T7628] syz.3.634 (7628) used greatest stack depth: 16128 bytes left
[  239.157593][ T7639] netlink: 'syz.3.639': attribute type 1 has an invalid length.
[  239.278742][ T7639] 8021q: adding VLAN 0 to HW filter on device bond4
[  239.635246][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.642'.
[  239.638968][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.642'.
[  241.215035][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'.
[  241.487171][ T7672] netlink: 'syz.4.651': attribute type 1 has an invalid length.
[  241.584348][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.651'.
[  241.622029][ T7672] bond5: entered promiscuous mode
[  241.623013][ T7672] 8021q: adding VLAN 0 to HW filter on device bond5
[  241.675797][ T7676] bond5: entered allmulticast mode
[  242.184243][ T7681] bond5: (slave bridge6): making interface the new active one
[  242.184271][ T7681] bridge6: entered promiscuous mode
[  242.184531][ T7681] bridge6: entered allmulticast mode
[  242.186114][ T7681] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  242.326108][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'.
[  242.825197][ T7704] netlink: 'syz.4.661': attribute type 1 has an invalid length.
[  242.915399][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  243.057050][ T7704] bond6: entered promiscuous mode
[  243.069112][ T7704] 8021q: adding VLAN 0 to HW filter on device bond6
[  243.081207][ T7706] bond6: entered allmulticast mode
[  243.746611][ T7704] bond6: (slave bridge7): making interface the new active one
[  243.746638][ T7704] bridge7: entered promiscuous mode
[  243.771768][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.663'.
[  243.799901][ T7704] bridge7: entered allmulticast mode
[  243.805611][ T7704] bond6: (slave bridge7): Enslaving as an active interface with an up link
[  244.261198][ T7712] could not allocate digest TFM handle md5
[  244.414169][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.666'.
[  244.939158][ T7731] bond1: left allmulticast mode
[  244.939184][ T7731] bridge1: left allmulticast mode
[  244.967325][ T7731] bond2: left allmulticast mode
[  244.967352][ T7731] bridge2: left allmulticast mode
[  245.011322][ T7731] bond3: left allmulticast mode
[  245.011374][ T7731] bridge3: left allmulticast mode
[  245.014625][ T7731] bond4: left allmulticast mode
[  245.014647][ T7731] bridge4: left allmulticast mode
[  246.191443][ T6043] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  246.580526][ T6043] usb 1-1: Using ep0 maxpacket: 8
[  246.583072][ T6043] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  246.583100][ T6043] usb 1-1: config 0 has no interface number 0
[  246.583147][ T6043] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  246.583172][ T6043] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  246.583199][ T6043] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  246.583222][ T6043] usb 1-1: config 0 interface 55 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  246.583245][ T6043] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  246.583290][ T6043] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  246.583314][ T6043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.743637][ T5725] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  246.787581][ T6043] usb 1-1: config 0 descriptor??
[  246.827123][ T6043] ldusb 1-1:0.55: Interrupt in endpoint not found
[  246.911199][ T5725] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  246.911262][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  246.911290][ T5725] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.911316][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  246.911343][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  246.912826][ T5725] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  246.912879][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  246.912907][ T5725] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.912933][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  246.912959][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  246.915157][ T5725] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  246.915212][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  246.915239][ T5725] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.915265][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  246.915292][ T5725] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  246.927285][ T5725] usb 3-1: string descriptor 0 read error: -22
[  246.929518][ T5725] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  246.930862][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.064998][ T5725] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  247.168145][   T10] usb 1-1: USB disconnect, device number 4
[  247.244845][ T7763] netlink: 'syz.2.681': attribute type 64 has an invalid length.
[  247.244869][ T7763] netlink: 5 bytes leftover after parsing attributes in process `syz.2.681'.
[  247.963630][ T7779] netlink: 100 bytes leftover after parsing attributes in process `syz.0.686'.
[  249.170867][ T7785] netlink: 'syz.4.688': attribute type 1 has an invalid length.
[  249.254904][ T7785] bond7: entered promiscuous mode
[  249.255484][ T7785] 8021q: adding VLAN 0 to HW filter on device bond7
[  249.374870][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'.
[  249.376169][ T7785] bond7: entered allmulticast mode
[  249.542110][ T5725] usb 3-1: USB disconnect, device number 6
[  249.801761][ T7792] bond7: (slave bridge8): making interface the new active one
[  249.801788][ T7792] bridge8: entered promiscuous mode
[  249.802030][ T7792] bridge8: entered allmulticast mode
[  249.834605][ T7792] bond7: (slave bridge8): Enslaving as an active interface with an up link
[  251.661838][ T5718] bridge0: entered promiscuous mode
[  251.784642][ T7816] netlink: 100 bytes leftover after parsing attributes in process `syz.3.697'.
[  252.951491][ T5718] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  253.102318][ T5718] usb 5-1: Using ep0 maxpacket: 8
[  253.104323][ T5718] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  253.104342][ T5718] usb 5-1: config 0 has no interface number 0
[  253.104369][ T5718] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  253.104383][ T5718] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  253.104398][ T5718] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  253.104410][ T5718] usb 5-1: config 0 interface 55 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  253.104423][ T5718] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  253.104447][ T5718] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  253.104461][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.246471][ T5718] usb 5-1: config 0 descriptor??
[  253.268214][ T5718] ldusb 5-1:0.55: Interrupt in endpoint not found
[  253.544497][ T5725] usb 5-1: USB disconnect, device number 3
[  253.722284][   T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  253.873171][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  253.873233][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  253.873263][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.873289][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  253.873315][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  253.874778][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  253.874831][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  253.874859][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.874885][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  253.874911][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  253.878580][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  253.878639][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  253.878668][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.878695][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  253.878722][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  254.075569][   T10] usb 2-1: string descriptor 0 read error: -22
[  254.075739][   T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  254.075764][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.616683][   T10] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  254.759696][ T7829] netlink: 'syz.1.702': attribute type 64 has an invalid length.
[  254.759719][ T7829] netlink: 5 bytes leftover after parsing attributes in process `syz.1.702'.
[  254.824969][ T5725] usb 2-1: USB disconnect, device number 3
[  254.945357][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.709'.
[  254.945420][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.709'.
[  255.577060][ T7866] netlink: 104 bytes leftover after parsing attributes in process `syz.2.714'.
[  255.656288][ T7867] netlink: 104 bytes leftover after parsing attributes in process `syz.2.714'.
[  255.968783][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  255.968894][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  256.942533][ T7875] netlink: 192 bytes leftover after parsing attributes in process `syz.2.718'.
[  257.273023][ T7883] netlink: 104 bytes leftover after parsing attributes in process `syz.4.719'.
[  257.986209][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.723'.
[  258.267508][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'.
[  258.312884][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'.
[  258.353020][ T7900] fuse: Bad value for 'fd'
[  260.142450][ T7922] __nla_validate_parse: 1 callbacks suppressed
[  260.142472][ T7922] netlink: 104 bytes leftover after parsing attributes in process `syz.2.734'.
[  261.029834][ T7943] netlink: 192 bytes leftover after parsing attributes in process `syz.2.742'.
[  263.003526][ T7949] fuse: Bad value for 'fd'
[  265.495306][ T5607] Bluetooth: hci4: command 0x0406 tx timeout
[  266.471184][ T7973] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.751'.
[  266.500607][ T5329] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  266.653438][ T5329] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  266.653498][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  266.653525][ T5329] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  266.653549][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  266.653574][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  266.657913][ T5329] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  266.657975][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  266.658004][ T5329] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  266.658029][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  266.658054][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  266.660362][ T5329] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  266.662157][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  266.662190][ T5329] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  266.662216][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  266.662243][ T5329] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  266.810562][ T5329] usb 4-1: string descriptor 0 read error: -22
[  266.810721][ T5329] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  266.810746][ T5329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.841072][ T7977] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  267.020144][ T5329] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  267.092964][ T7969] netlink: 'syz.3.749': attribute type 64 has an invalid length.
[  267.092988][ T7969] netlink: 5 bytes leftover after parsing attributes in process `syz.3.749'.
[  267.336040][ T7977] bond8: entered promiscuous mode
[  267.336622][ T7977] 8021q: adding VLAN 0 to HW filter on device bond8
[  267.389750][ T5867] usb 4-1: USB disconnect, device number 4
[  267.707817][ T7997] fuse: Invalid rootmode
[  268.324320][ T8010] netlink: 68 bytes leftover after parsing attributes in process `syz.4.764'.
[  268.339116][ T8010] netlink: 'syz.4.764': attribute type 1 has an invalid length.
[  268.426410][ T8010] bond9: entered promiscuous mode
[  268.427074][ T8010] 8021q: adding VLAN 0 to HW filter on device bond9
[  268.543084][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'.
[  268.543188][ T8010] bond9: entered allmulticast mode
[  268.714658][ T8010] bond9: (slave bridge11): making interface the new active one
[  268.714685][ T8010] bridge11: entered promiscuous mode
[  268.714953][ T8010] bridge11: entered allmulticast mode
[  268.752911][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.767'.
[  268.759816][ T8010] bond9: (slave bridge11): Enslaving as an active interface with an up link
[  271.209436][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'.
[  271.857600][ T8074] netlink: 104 bytes leftover after parsing attributes in process `syz.1.789'.
[  272.148569][ T8083] binfmt_misc: register: failed to install interpreter file ./file0
[  274.810509][   T67] Bluetooth: hci5: Frame reassembly failed (-84)
[  275.952338][ T8113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.802'.
[  276.453306][ T8122] netlink: 68 bytes leftover after parsing attributes in process `syz.3.806'.
[  276.458443][ T8122] netlink: 'syz.3.806': attribute type 1 has an invalid length.
[  276.558630][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'.
[  276.666904][ T8122] bond5: entered promiscuous mode
[  276.667322][ T8122] 8021q: adding VLAN 0 to HW filter on device bond5
[  276.716296][ T8124] bond5: entered allmulticast mode
[  276.834519][ T5607] Bluetooth: hci5: command 0x1003 tx timeout
[  276.838570][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  277.835795][ T8122] bond5: (slave bridge4): making interface the new active one
[  277.835823][ T8122] bridge4: entered promiscuous mode
[  277.836072][ T8122] bridge4: entered allmulticast mode
[  277.896252][ T8122] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  278.439501][ T8137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.809'.
[  279.396595][ T5602] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  280.112043][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout
[  280.150328][ T8148] netlink: 104 bytes leftover after parsing attributes in process `syz.2.814'.
[  280.215890][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'.
[  280.216324][ T8152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  280.216337][ T8152] IPv6: NLM_F_CREATE should be set when creating new route
[  283.355394][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'.
[  284.585717][ T8195] netlink: 104 bytes leftover after parsing attributes in process `syz.3.831'.
[  285.355777][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'.
[  285.623449][ T8233] netlink: 100 bytes leftover after parsing attributes in process `syz.1.845'.
[  285.657144][ T8233] netlink: 100 bytes leftover after parsing attributes in process `syz.1.845'.
[  285.845587][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'.
[  285.953618][ T8240] 8021q: adding VLAN 0 to HW filter on device bond5
[  285.997624][ T8246] netlink: 'syz.2.850': attribute type 1 has an invalid length.
[  286.102046][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv1
[  286.162241][ T8242] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  286.295713][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.854'.
[  286.653868][ T8270] netlink: 100 bytes leftover after parsing attributes in process `syz.2.859'.
[  286.656169][ T8270] netlink: 100 bytes leftover after parsing attributes in process `syz.2.859'.
[  286.867181][ T8274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.861'.
[  286.889401][ T8274] netlink: 'syz.2.861': attribute type 1 has an invalid length.
[  287.007905][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.863'.
[  287.055461][ T8274] bond2: entered promiscuous mode
[  287.088977][ T8274] 8021q: adding VLAN 0 to HW filter on device bond2
[  287.090279][ T8280] bond2: entered allmulticast mode
[  287.381415][ T8280] bond2: (slave bridge2): making interface the new active one
[  287.381443][ T8280] bridge2: entered promiscuous mode
[  287.381698][ T8280] bridge2: entered allmulticast mode
[  287.386563][ T8280] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  291.833935][ T8335] __nla_validate_parse: 6 callbacks suppressed
[  291.834138][ T8335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.880'.
[  292.971415][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.885'.
[  292.977177][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.885'.
[  293.051460][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'.
[  293.051485][ T8350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.886'.
[  293.091456][ T8335] could not allocate digest TFM handle md5
[  293.297740][ T8355] 9p: Bad value for 'wfdno'
[  293.529639][ T8360] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.889'.
[  295.002289][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'.
[  295.406497][ T8384] netlink: 48 bytes leftover after parsing attributes in process `syz.4.897'.
[  295.409249][ T8384] netlink: 48 bytes leftover after parsing attributes in process `syz.4.897'.
[  295.429629][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.898'.
[  298.462789][ T8415] __nla_validate_parse: 3 callbacks suppressed
[  298.462810][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'.
[  300.055044][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'.
[  300.917244][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'.
[  302.402675][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'.
[  302.453764][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'.
[  302.644154][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'.
[  302.782551][ T8457] netlink: 'syz.2.927': attribute type 1 has an invalid length.
[  302.821339][ T8457] bond3: entered promiscuous mode
[  302.821991][ T8457] 8021q: adding VLAN 0 to HW filter on device bond3
[  303.975869][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.927'.
[  304.062703][ T8457] bond3: entered allmulticast mode
[  304.155925][ T8457] bond3: (slave bridge3): making interface the new active one
[  304.155951][ T8457] bridge3: entered promiscuous mode
[  304.156172][ T8457] bridge3: entered allmulticast mode
[  304.158311][ T8457] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  305.612141][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'.
[  305.840364][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'.
[  305.995740][ T8486] 8021q: adding VLAN 0 to HW filter on device bond4
[  307.244933][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv1
[  307.267682][ T8489] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  307.818846][ T8516] netlink: 100 bytes leftover after parsing attributes in process `syz.1.948'.
[  307.827792][ T8516] netlink: 100 bytes leftover after parsing attributes in process `syz.1.948'.
[  307.904161][ T8519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.951'.
[  307.915451][ T8519] netlink: 'syz.2.951': attribute type 1 has an invalid length.
[  308.054862][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'.
[  309.357099][ T8519] bond5: entered promiscuous mode
[  309.357761][ T8519] 8021q: adding VLAN 0 to HW filter on device bond5
[  309.380805][ T8523] bond5: entered allmulticast mode
[  309.513055][ T8530] bond5: (slave bridge4): making interface the new active one
[  309.513082][ T8530] bridge4: entered promiscuous mode
[  309.513325][ T8530] bridge4: entered allmulticast mode
[  309.544452][ T8533] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.954'.
[  309.550199][ T8530] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  309.565322][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'.
[  309.845462][ T8535] 8021q: adding VLAN 0 to HW filter on device bond6
[  310.044583][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv1
[  310.069766][ T8537] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  311.209496][ T8554] netlink: 'syz.1.963': attribute type 1 has an invalid length.
[  311.278216][ T8557] netlink: 100 bytes leftover after parsing attributes in process `syz.3.964'.
[  311.286338][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'.
[  311.332015][ T8561] netlink: 100 bytes leftover after parsing attributes in process `syz.3.964'.
[  311.382536][ T8563] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.966'.
[  311.444669][ T8554] bond8: entered promiscuous mode
[  311.447762][ T8554] 8021q: adding VLAN 0 to HW filter on device bond8
[  312.194347][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'.
[  312.417830][ T8584] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  312.468596][ T8586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.975'.
[  312.469581][ T8586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.975'.
[  315.365013][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'.
[  315.849281][ T8625] netlink: 104 bytes leftover after parsing attributes in process `syz.2.990'.
[  316.602942][ T8643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.996'.
[  317.138129][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'.
[  317.404320][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  317.404410][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  319.347852][ T8672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1007'.
[  319.361481][ T8672] netlink: 'syz.2.1007': attribute type 1 has an invalid length.
[  319.387576][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'.
[  319.480993][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'.
[  319.603341][ T8682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1010'.
[  319.606916][ T8672] bond6: entered promiscuous mode
[  319.618996][ T8672] 8021q: adding VLAN 0 to HW filter on device bond6
[  319.624179][ T8682] netlink: 'syz.3.1010': attribute type 1 has an invalid length.
[  319.648253][ T8677] bond6: entered allmulticast mode
[  319.724520][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1010'.
[  319.970618][ T8682] bond7: entered promiscuous mode
[  319.981789][ T8682] 8021q: adding VLAN 0 to HW filter on device bond7
[  320.038746][ T8684] bond7: entered allmulticast mode
[  320.105312][ T8677] bond6: (slave bridge5): making interface the new active one
[  320.105338][ T8677] bridge5: entered promiscuous mode
[  320.105557][ T8677] bridge5: entered allmulticast mode
[  320.108528][ T8677] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  320.158894][ T8696] bond7: (slave bridge5): making interface the new active one
[  320.158920][ T8696] bridge5: entered promiscuous mode
[  320.159147][ T8696] bridge5: entered allmulticast mode
[  320.181487][ T8696] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  320.543620][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1018'.
[  320.604432][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1018'.
[  321.900279][ T8713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1022'.
[  321.928052][ T8717] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1020'.
[  323.138527][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  323.245923][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  323.275428][ T8740] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1031'.
[  323.294861][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  323.310314][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  323.335231][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  323.336303][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  323.464113][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'.
[  324.101588][ T8761] fuse: Bad value for 'group_id'
[  324.101610][ T8761] fuse: Bad value for 'group_id'
[  325.390725][ T5602] Bluetooth: hci5: command tx timeout
[  325.629953][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1043'.
[  325.630071][ T8774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.630085][ T8774] IPv6: NLM_F_CREATE should be set when creating new route
[  325.772240][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1045'.
[  325.954239][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'.
[  327.350293][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  327.440313][ T8795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1049'.
[  327.445967][ T8783] 8021q: adding VLAN 0 to HW filter on device bond7
[  327.490262][ T5602] Bluetooth: hci5: command tx timeout
[  327.508385][ T8795] netlink: 'syz.3.1049': attribute type 1 has an invalid length.
[  327.565857][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'.
[  329.124207][ T8508] syz_tun (unregistering): left allmulticast mode
[  329.321553][ T8795] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  329.518899][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'.
[  329.519021][ T8817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.550514][ T5602] Bluetooth: hci5: command tx timeout
[  329.749935][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'.
[  331.198503][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'.
[  331.198669][ T8846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  331.507950][ T8849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1071'.
[  331.631490][ T5602] Bluetooth: hci5: command tx timeout
[  332.128330][ T8866] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1077'.
[  332.403704][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'.
[  332.611688][ T8876] 8021q: adding VLAN 0 to HW filter on device bond8
[  332.858266][ T8878] bond8 (unregistering): Released all slaves
[  335.301366][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.301582][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.301830][ T8738] bridge_slave_0: entered allmulticast mode
[  335.314284][ T8738] bridge_slave_0: entered promiscuous mode
[  335.321410][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.325050][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.325359][ T8738] bridge_slave_1: entered allmulticast mode
[  335.349156][ T8738] bridge_slave_1: entered promiscuous mode
[  335.613738][ T8921] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1093'.
[  335.627986][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.639662][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.837335][ T8738] team0: Port device team_slave_0 added
[  336.350773][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'.
[  336.691964][ T8738] team0: Port device team_slave_1 added
[  336.926824][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'.
[  336.926963][ T8935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.980242][ T8926] 8021q: adding VLAN 0 to HW filter on device bond8
[  337.261273][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.261291][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.261318][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.323209][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.323228][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.323256][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.557200][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1102'.
[  337.638794][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'.
[  337.639010][ T8947] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  337.763732][ T8738] hsr_slave_0: entered promiscuous mode
[  337.764813][ T8738] hsr_slave_1: entered promiscuous mode
[  337.783982][ T8738] debugfs: 'hsr0' already exists in 'hsr'
[  337.784010][ T8738] Cannot create hsr debugfs directory
[  338.050504][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'.
[  338.050645][ T8959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.669205][ T8974] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1114'.
[  339.391072][ T8981] fuse: Unknown parameter 'group_i00000000000000000000'
[  340.663672][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1121'.
[  340.693435][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'.
[  340.836444][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'.
[  340.913945][ T9004] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1124'.
[  340.917172][ T9004] netlink: 'syz.2.1124': attribute type 1 has an invalid length.
[  342.363760][ T9004] bond8: entered promiscuous mode
[  342.366204][ T9004] 8021q: adding VLAN 0 to HW filter on device bond8
[  342.367333][ T9005] bond8: entered allmulticast mode
[  342.519677][ T9009] bond8: (slave bridge6): making interface the new active one
[  342.519704][ T9009] bridge6: entered promiscuous mode
[  342.519952][ T9009] bridge6: entered allmulticast mode
[  342.547465][ T9009] bond8: (slave bridge6): Enslaving as an active interface with an up link
[  342.568496][ T8738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  342.608286][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  342.626373][ T8738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  342.698352][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  342.699565][ T8738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  342.857700][ T9022] __nla_validate_parse: 1 callbacks suppressed
[  342.857722][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'.
[  342.941563][ T9023] fuse: Unknown parameter 'group_id00000000000000000000'
[  343.954713][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  344.044111][ T8738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  344.262702][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'.
[  344.285609][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  345.727101][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.824493][ T8738] 8021q: adding VLAN 0 to HW filter on device team0
[  345.843847][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.844076][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.939019][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.943880][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.068401][ T9060] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1142'.
[  346.086340][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'.
[  346.087266][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'.
[  346.088709][ T9060] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1142'.
[  348.011218][ T9092] netlink: 'syz.4.1153': attribute type 1 has an invalid length.
[  348.043168][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'.
[  348.044234][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1152'.
[  350.111696][ T9134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1168'.
[  350.172673][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.285697][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'.
[  355.764202][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout
[  355.897970][ T5602] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  357.601784][ T9176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1179'.
[  357.706833][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'.
[  360.925945][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1194'.
[  361.101532][ T5725] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  361.250574][ T5725] usb 4-1: Using ep0 maxpacket: 8
[  361.259443][ T5725] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  361.259474][ T5725] usb 4-1: config 0 has no interface number 0
[  361.259521][ T5725] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  361.259546][ T5725] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  361.259572][ T5725] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  361.259599][ T5725] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  361.259645][ T5725] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  361.259670][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.380148][ T9221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'.
[  361.424967][ T5725] usb 4-1: config 0 descriptor??
[  361.449651][ T5725] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  362.610541][ T8738] veth0_vlan: entered promiscuous mode
[  362.682092][ T5725] usb 4-1: USB disconnect, device number 5
[  362.689944][ T5725] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  362.787427][ T8738] veth1_vlan: entered promiscuous mode
[  364.194613][ T8738] veth0_macvtap: entered promiscuous mode
[  364.253505][ T8738] veth1_macvtap: entered promiscuous mode
[  364.590278][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.669767][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.716779][   T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.716830][   T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.716866][   T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.716902][   T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.724757][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.724773][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.664230][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1215'.
[  369.748452][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.748473][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.487905][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1226'.
[  373.560569][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1239'.
[  374.531188][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'.
[  374.544648][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'.
[  374.557584][ T9354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1244'.
[  375.604593][ T9356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1244'.
[  378.196001][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'.
[  378.223324][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'.
[  378.223525][ T9381] dummy0: entered promiscuous mode
[  378.223605][ T9381] dummy0: entered allmulticast mode
[  378.844695][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  378.844790][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  381.730176][ T9422] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1263'.
[  382.128107][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'.
[  382.135456][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'.
[  384.199922][ T9454] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1278'.
[  385.904886][ T9468] fuse: Invalid rootmode
[  386.931871][ T9469] loop7: detected capacity change from 0 to 16384
[  387.606170][ T9494] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1291'.
[  387.619907][ T5718] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  387.740532][ T5725] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  387.780988][ T5718] usb 3-1: Using ep0 maxpacket: 16
[  387.783529][ T5718] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  387.783557][ T5718] usb 3-1: config 0 has no interface number 0
[  387.786707][ T5718] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  387.786737][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.786757][ T5718] usb 3-1: Product: syz
[  387.786771][ T5718] usb 3-1: Manufacturer: syz
[  387.786786][ T5718] usb 3-1: SerialNumber: syz
[  387.855233][ T5718] usb 3-1: config 0 descriptor??
[  387.870931][ T5718] hub 3-1:0.132: bad descriptor, ignoring hub
[  387.870978][ T5718] hub 3-1:0.132: probe with driver hub failed with error -5
[  387.911229][ T5718] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input5
[  387.920801][ T5725] usb 5-1: Using ep0 maxpacket: 8
[  387.949040][ T5725] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  387.949072][ T5725] usb 5-1: config 0 has no interface number 0
[  387.949120][ T5725] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  387.949145][ T5725] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  387.949171][ T5725] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  387.949193][ T5725] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  387.949238][ T5725] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  387.949262][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.964407][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'.
[  388.017803][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1296'.
[  388.053541][ T9507] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1297'.
[  388.117327][ T5725] usb 5-1: config 0 descriptor??
[  388.170760][ T5725] ldusb 5-1:0.55: Interrupt in endpoint not found
[  388.446531][ T5606] usb 5-1: USB disconnect, device number 4
[  388.688365][ T5718] usb 3-1: USB disconnect, device number 7
[  388.970862][ T9521] fuse: Invalid rootmode
[  389.109200][ T9528] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1305'.
[  389.568626][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1309'.
[  389.625385][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1309'.
[  389.949922][ T9542] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1308'.
[  390.324456][ T9552] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  391.105027][ T9553] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  392.068327][ T9559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1317'.
[  392.590172][ T9574] fuse: Invalid rootmode
[  393.187865][ T9599] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1330'.
[  394.424557][ T9615] loop7: detected capacity change from 16384 to 0
[  394.507117][ T9621] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1339'.
[  394.546395][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2
[  394.841204][ T9631] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1342'.
[  395.050322][ T9633] fuse: Bad value for 'rootmode'
[  396.830462][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'.
[  399.021508][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1362'.
[  399.086236][ T9679] fuse: Bad value for 'rootmode'
[  399.753655][ T9695] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1367'.
[  400.930510][ T5733] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  402.450572][ T9704] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1371'.
[  404.801259][ T5733] usb 2-1: Using ep0 maxpacket: 8
[  405.294391][ T5733] usb 2-1: device descriptor read/all, error -71
[  405.615112][ T9714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1375'.
[  407.678184][ T9733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1376'.
[  408.385789][ T9728] fuse: Bad value for 'rootmode'
[  408.387030][ T9735] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1382'.
[  410.525709][ T9755] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  414.420746][ T9777] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1394'.
[  414.631428][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1396'.
[  414.717661][ T9779] bond10: entered promiscuous mode
[  414.725765][ T9779] 8021q: adding VLAN 0 to HW filter on device bond10
[  414.893542][ T9783] bond10: entered allmulticast mode
[  415.135945][ T9796] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1398'.
[  416.222590][ T9794] bridge12: entered promiscuous mode
[  416.225657][ T9794] bridge12: entered allmulticast mode
[  416.228213][ T9794] bond10: (slave bridge12): Enslaving as an active interface with an up link
[  417.217824][ T9808] comedi: valid board names for 8255 driver are:
[  417.217840][ T9808]  8255
[  417.217848][ T9808] comedi: valid board names for vmk80xx driver are:
[  417.217857][ T9808]  vmk80xx
[  417.217864][ T9808] comedi: valid board names for usbduxsigma driver are:
[  417.217872][ T9808]  usbduxsigma
[  417.217879][ T9808] comedi: valid board names for usbduxfast driver are:
[  417.217888][ T9808]  usbduxfast
[  417.217895][ T9808] comedi: valid board names for usbdux driver are:
[  417.217904][ T9808]  usbdux
[  417.217911][ T9808] comedi: valid board names for ni6501 driver are:
[  417.217920][ T9808]  ni6501
[  417.217926][ T9808] comedi: valid board names for dt9812 driver are:
[  417.217935][ T9808]  dt9812
[  417.217942][ T9808] comedi: valid board names for ni_labpc_cs driver are:
[  417.217951][ T9808]  ni_labpc_cs
[  417.217958][ T9808] comedi: valid board names for ni_daq_700 driver are:
[  417.217967][ T9808]  ni_daq_700
[  417.217974][ T9808] comedi: valid board names for labpc_pci driver are:
[  417.217983][ T9808]  labpc_pci
[  417.217990][ T9808] comedi: valid board names for adl_pci9118 driver are:
[  417.218000][ T9808]  pci9118dg
[  417.218007][ T9808]  pci9118hg
[  417.218014][ T9808]  pci9118hr
[  417.218021][ T9808] comedi: valid board names for 8255_pci driver are:
[  417.218030][ T9808]  8255_pci
[  417.218037][ T9808] comedi: valid board names for s526 driver are:
[  417.218046][ T9808]  s526
[  417.218053][ T9808] comedi: valid board names for multiq3 driver are:
[  417.218062][ T9808]  multiq3
[  417.218069][ T9808] comedi: valid board names for pcmuio driver are:
[  417.218079][ T9808]  pcmuio48
[  417.218086][ T9808]  pcmuio96
[  417.218093][ T9808] comedi: valid board names for pcmmio driver are:
[  417.218101][ T9808]  pcmmio
[  417.218108][ T9808] comedi: valid board names for pcmda12 driver are:
[  417.218117][ T9808]  pcmda12
[  417.218124][ T9808] comedi: valid board names for pcmad driver are:
[  417.218133][ T9808]  pcmad12
[  417.218140][ T9808]  pcmad16
[  417.218146][ T9808] comedi: valid board names for ni_labpc driver are:
[  417.218155][ T9808]  lab-pc-1200
[  417.218162][ T9808]  lab-pc-1200ai
[  417.218169][ T9808]  lab-pc+
[  417.218175][ T9808] comedi: valid board names for atmio16 driver are:
[  417.218184][ T9808]  atmio16
[  417.218191][ T9808]  atmio16d
[  417.218197][ T9808] comedi: valid board names for ni_at_ao driver are:
[  417.218206][ T9808]  at-ao-6
[  417.218213][ T9808]  at-ao-10
[  417.218220][ T9808] comedi: valid board names for ni_at_a2150 driver are:
[  417.218229][ T9808]  ni_at_a2150
[  417.218236][ T9808] comedi: valid board names for adq12b driver are:
[  417.218245][ T9808]  adq12b
[  417.218252][ T9808] comedi: valid board names for mpc624 driver are:
[  417.218261][ T9808]  mpc624
[  417.218268][ T9808] comedi: valid board names for c6xdigio driver are:
[  417.218277][ T9808]  c6xdigio
[  417.218284][ T9808] comedi: valid board names for aio_iiro_16 driver are:
[  417.218293][ T9808]  aio_iiro_16
[  417.218300][ T9808] comedi: valid board names for aio_aio12_8 driver are:
[  417.218309][ T9808]  aio_aio12_8
[  417.218316][ T9808]  aio_ai12_8
[  417.218323][ T9808]  aio_ao12_4
[  417.218330][ T9808] comedi: valid board names for fl512 driver are:
[  417.218338][ T9808]  fl512
[  417.218344][ T9808] comedi: valid board names for dmm32at driver are:
[  417.218353][ T9808]  dmm32at
[  417.218360][ T9808] comedi: valid board names for dt282x driver are:
[  417.218369][ T9808]  dt2821
[  417.218375][ T9808]  dt2821-f
[  417.218382][ T9808]  dt2821-g
[  417.218389][ T9808]  dt2823
[  417.218396][ T9808]  dt2824-pgh
[  417.218423][ T9808]  dt2824-pgl
[  417.218430][ T9808]  dt2825
[  417.218436][ T9808]  dt2827
[  417.218443][ T9808]  dt2828
[  417.218449][ T9808]  dt2829
[  417.218456][ T9808]  dt21-ez
[  417.218462][ T9808]  dt23-ez
[  417.218469][ T9808]  dt24-ez
[  417.218475][ T9808]  dt24-ez-pgl
[  417.218482][ T9808] comedi: valid board names for dt2817 driver are:
[  417.218491][ T9808]  dt2817
[  417.218497][ T9808] comedi: valid board names for dt2815 driver are:
[  417.497715][ T9808]  dt2815
[  417.497733][ T9808] comedi: valid board names for dt2814 driver are:
[  417.497743][ T9808]  dt2814
[  417.497751][ T9808] comedi: valid board names for dt2811 driver are:
[  417.497760][ T9808]  dt2811-pgh
[  417.497767][ T9808]  dt2811-pgl
[  417.497774][ T9808] comedi: valid board names for dt2801 driver are:
[  417.497783][ T9808]  dt2801
[  417.497790][ T9808] comedi: valid board names for das6402 driver are:
[  417.497799][ T9808]  das6402-12
[  417.497806][ T9808]  das6402-16
[  417.497813][ T9808] comedi: valid board names for das1800 driver are:
[  417.497823][ T9808]  das-1701st
[  417.497829][ T9808]  das-1701st-da
[  417.497836][ T9808]  das-1702st
[  417.497843][ T9808]  das-1702st-da
[  417.497850][ T9808]  das-1702hr
[  417.497857][ T9808]  das-1702hr-da
[  417.497864][ T9808]  das-1701ao
[  417.497870][ T9808]  das-1702ao
[  417.497876][ T9808]  das-1801st
[  417.497883][ T9808]  das-1801st-da
[  417.497890][ T9808]  das-1802st
[  417.497897][ T9808]  das-1802st-da
[  417.497905][ T9808]  das-1802hr
[  417.497912][ T9808]  das-1802hr-da
[  417.497919][ T9808]  das-1801hc
[  417.497926][ T9808]  das-1802hc
[  417.497933][ T9808]  das-1801ao
[  417.497939][ T9808]  das-1802ao
[  417.497946][ T9808] comedi: valid board names for das800 driver are:
[  417.497955][ T9808]  das-800
[  417.497961][ T9808]  cio-das800
[  417.497968][ T9808]  das-801
[  417.497974][ T9808]  cio-das801
[  417.497981][ T9808]  das-802
[  417.497988][ T9808]  cio-das802
[  417.497995][ T9808]  cio-das802/16
[  417.498002][ T9808] comedi: valid board names for isa-das08 driver are:
[  417.498011][ T9808]  isa-das08
[  417.498017][ T9808]  das08-pgm
[  417.498024][ T9808]  das08-pgh
[  417.498031][ T9808]  das08-pgl
[  417.498038][ T9808]  das08-aoh
[  417.498045][ T9808]  das08-aol
[  417.498051][ T9808]  das08-aom
[  417.498058][ T9808]  das08/jr-ao
[  417.498065][ T9808]  das08jr-16-ao
[  417.498073][ T9808]  pc104-das08
[  417.498080][ T9808]  das08jr/16
[  417.498086][ T9808] comedi: valid board names for das16m1 driver are:
[  417.498096][ T9808]  das16m1
[  417.498102][ T9808] comedi: valid board names for dac02 driver are:
[  417.498111][ T9808]  dac02
[  417.498118][ T9808] comedi: valid board names for rti802 driver are:
[  417.498127][ T9808]  rti802
[  417.498134][ T9808] comedi: valid board names for rti800 driver are:
[  417.498143][ T9808]  rti800
[  417.498149][ T9808]  rti815
[  417.498156][ T9808] comedi: valid board names for pcm3724 driver are:
[  417.498165][ T9808]  pcm3724
[  417.498172][ T9808] comedi: valid board names for pcl818 driver are:
[  417.498181][ T9808]  pcl818l
[  417.498188][ T9808]  pcl818h
[  417.498195][ T9808]  pcl818hd
[  417.498202][ T9808]  pcl818hg
[  417.498209][ T9808]  pcl818
[  417.498215][ T9808]  pcl718
[  417.498222][ T9808]  pcm3718
[  417.498229][ T9808] comedi: valid board names for pcl816 driver are:
[  417.498238][ T9808]  pcl816
[  417.498245][ T9808]  pcl814b
[  417.498252][ T9808] comedi: valid board names for pcl812 driver are:
[  417.498261][ T9808]  pcl812
[  417.498301][ T9808]  pcl812pg
[  417.498308][ T9808]  acl8112pg
[  417.498315][ T9808]  acl8112dg
[  417.498322][ T9808]  acl8112hg
[  417.498328][ T9808]  a821pgl
[  417.498335][ T9808]  a821pglnda
[  417.498341][ T9808]  a821pgh
[  417.498348][ T9808]  a822pgl
[  417.498355][ T9808]  a822pgh
[  417.498361][ T9808]  a823pgl
[  417.498368][ T9808]  a823pgh
[  417.498374][ T9808]  pcl813
[  417.498380][ T9808]  pcl813b
[  417.498387][ T9808]  acl8113
[  417.498393][ T9808]  iso813
[  417.498400][ T9808]  acl8216
[  417.498407][ T9808]  a826pg
[  417.498413][ T9808] comedi: valid board names for pcl730 driver are:
[  417.498422][ T9808]  pcl730
[  417.498429][ T9808]  iso730
[  417.498435][ T9808]  acl7130
[  417.498442][ T9808]  pcm3730
[  417.498448][ T9808]  pcl725
[  417.498453][ T9808]  p8r8dio
[  417.498458][ T9808]  acl7225b
[  417.498465][ T9808]  p16r16dio
[  417.498471][ T9808]  pcl733
[  417.498478][ T9808]  pcl734
[  417.498485][ T9808]  opmm-1616-xt
[  417.498492][ T9808]  pearl-mm-p
[  417.498499][ T9808]  ir104-pbf
[  417.498506][ T9808] comedi: valid board names for pcl726 driver are:
[  417.498515][ T9808]  pcl726
[  417.498522][ T9808]  pcl727
[  417.498528][ T9808]  pcl728
[  417.498535][ T9808]  acl6126
[  417.498542][ T9808]  acl6128
[  417.498548][ T9808] comedi: valid board names for pcl724 driver are:
[  417.498557][ T9808]  pcl724
[  417.498563][ T9808]  pcl722
[  417.498570][ T9808]  pcl731
[  417.498576][ T9808]  acl7122
[  417.498583][ T9808]  acl7124
[  417.498590][ T9808]  pet48dio
[  417.498596][ T9808]  pcmio48
[  417.498603][ T9808]  onyx-mm-dio
[  417.498610][ T9808] comedi: valid board names for pcl711 driver are:
[  417.498627][ T9808]  pcl711
[  417.498634][ T9808]  pcl711b
[  417.498640][ T9808]  acl8112hg
[  417.498647][ T9808]  acl8112dg
[  417.498654][ T9808] comedi: valid board names for amplc_pc263 driver are:
[  417.498663][ T9808]  pc263
[  417.498670][ T9808] comedi: valid board names for amplc_pc236 driver are:
[  417.498680][ T9808]  pc36at
[  417.498686][ T9808] comedi: valid board names for amplc_dio200 driver are:
[  417.498695][ T9808]  pc212e
[  417.498702][ T9808]  pc214e
[  417.498708][ T9808]  pc215e
[  417.498715][ T9808]  pc218e
[  417.498722][ T9808]  pc272e
[  417.498728][ T9808] comedi: valid board names for comedi_parport driver are:
[  417.498738][ T9808]  comedi_parport
[  417.498745][ T9808] comedi: valid board names for comedi_test driver are:
[  417.498754][ T9808]  comedi_test
[  417.498761][ T9808] comedi: valid board names for comedi_bond driver are:
[  417.498770][ T9808]  comedi_bond
[  417.957142][ T9813] fuse: Unknown parameter 'use00000000000000000000'
[  418.536743][ T9829] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1408'.
[  418.720723][ T9831] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  420.751187][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1410'.
[  421.943098][ T9834] bond11: entered promiscuous mode
[  421.954087][ T9834] 8021q: adding VLAN 0 to HW filter on device bond11
[  422.583217][ T9838] bond11: entered allmulticast mode
[  422.608399][ T9845] bridge13: entered promiscuous mode
[  422.608617][ T9845] bridge13: entered allmulticast mode
[  422.609877][ T9845] bond11: (slave bridge13): Enslaving as an active interface with an up link
[  424.446704][ T9866] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1419'.
[  424.750571][ T5718] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  424.960551][ T5718] usb 2-1: Using ep0 maxpacket: 8
[  424.969040][ T5718] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  424.969070][ T5718] usb 2-1: config 0 has no interface number 0
[  424.969113][ T5718] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  424.969136][ T5718] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  424.969161][ T5718] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  424.969182][ T5718] usb 2-1: config 0 interface 55 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  424.969206][ T5718] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  424.969250][ T5718] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  424.969274][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.080767][ T5718] usb 2-1: config 0 descriptor??
[  425.126582][ T5718] ldusb 2-1:0.55: Interrupt in endpoint not found
[  425.462752][ T5725] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  425.629271][ T5725] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  425.629307][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.629327][ T5725] usb 5-1: Product: syz
[  425.629341][ T5725] usb 5-1: Manufacturer: syz
[  425.629356][ T5725] usb 5-1: SerialNumber: syz
[  425.823837][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'.
[  425.825693][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'.
[  426.536886][ T5732] usb 2-1: USB disconnect, device number 6
[  426.724621][ T5725] rtl8150 5-1:1.0: couldn't reset the device
[  426.725897][ T5725] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  427.079263][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1430'.
[  427.963768][ T5725] usb 5-1: USB disconnect, device number 5
[  428.290039][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'.
[  428.582349][ T9919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1436'.
[  428.632461][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'.
[  429.837945][ T9926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1439'.
[  432.226277][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'.
[  432.226375][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'.
[  433.373020][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1445'.
[  434.459547][ T9950] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1446'.
[  436.140384][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  436.450926][ T9952] fuse: Unknown parameter 'user_id00000000000000000000'
[  440.554699][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  440.554792][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  440.700378][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  442.160373][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  442.250381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  442.300386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  442.330380][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  443.960381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  447.932868][ T5607] Bluetooth: hci5: command 0x0406 tx timeout
[  448.854147][T10048] fuse: Unknown parameter '0x0000000000000006'
[  448.984551][T10051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1471'.
[  452.398568][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1479'.
[  458.571454][T10099] netlink: 'syz.4.1487': attribute type 1 has an invalid length.
[  458.640140][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1487'.
[  461.281427][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1488'.
[  461.281487][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1488'.
[  461.721646][T10099] bond12: entered promiscuous mode
[  461.722206][T10099] 8021q: adding VLAN 0 to HW filter on device bond12
[  461.907720][T10100] bond12: entered allmulticast mode
[  461.948090][T10107] bridge14: entered promiscuous mode
[  461.948286][T10107] bridge14: entered allmulticast mode
[  461.948997][T10107] bond12: (slave bridge14): Enslaving as an active interface with an up link
[  462.796004][T10126] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  463.286676][T10125] Can't find a SQUASHFS superblock on nullb0
[  465.842734][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'.
[  466.185369][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'.
[  466.501902][T10149] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1499'.
[  468.388192][T10151] netlink: 'syz.3.1501': attribute type 1 has an invalid length.
[  468.473270][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'.
[  469.475167][T10151] bond9: entered promiscuous mode
[  469.475816][T10151] 8021q: adding VLAN 0 to HW filter on device bond9
[  469.614729][T10152] bond9: entered allmulticast mode
[  471.435347][T10167] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1504'.
[  473.300294][T10152] bridge7: entered promiscuous mode
[  473.301172][T10152] bridge7: entered allmulticast mode
[  473.309688][T10152] bond9: (slave bridge7): Enslaving as an active interface with an up link
[  475.061002][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1509'.
[  478.139618][T10193] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  478.486966][T10193] Can't find a SQUASHFS superblock on nullb0
[  479.154893][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1513'.
[  479.468430][T10201] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  479.782958][T10204] Can't find a SQUASHFS superblock on nullb0
[  480.331904][T10210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1515'.
[  484.450590][   T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  484.612287][   T36] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  484.612321][   T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.612342][   T36] usb 4-1: Product: syz
[  484.612357][   T36] usb 4-1: Manufacturer: syz
[  484.612371][   T36] usb 4-1: SerialNumber: syz
[  485.295375][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  485.350870][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  485.354772][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  485.383729][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  485.388572][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  485.440017][   T36] rtl8150 4-1:1.0: couldn't reset the device
[  485.443860][   T36] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  485.572385][   T36] usb 4-1: USB disconnect, device number 6
[  486.108509][T10251] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1528'.
[  487.738338][ T5607] Bluetooth: hci4: command tx timeout
[  487.998811][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'.
[  489.791278][ T5607] Bluetooth: hci4: command tx timeout
[  489.980878][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'.
[  490.081615][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1544'.
[  490.151473][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1545'.
[  491.707165][T10328] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  491.819779][T10328] Can't find a SQUASHFS superblock on nullb0
[  491.885709][ T5607] Bluetooth: hci4: command tx timeout
[  493.882118][T10338] netlink: 'syz.1.1557': attribute type 2 has an invalid length.
[  493.951629][ T5607] Bluetooth: hci4: command tx timeout
[  494.003102][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'.
[  495.279016][T10241] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.279140][T10241] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.279276][T10241] bridge_slave_0: entered allmulticast mode
[  495.308886][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'.
[  495.308992][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'.
[  495.336968][T10241] bridge_slave_0: entered promiscuous mode
[  495.368671][T10241] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.368908][T10241] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.369148][T10241] bridge_slave_1: entered allmulticast mode
[  495.393401][T10241] bridge_slave_1: entered promiscuous mode
[  495.683118][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.925201][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.179460][T10241] team0: Port device team_slave_0 added
[  496.189048][T10241] team0: Port device team_slave_1 added
[  497.212634][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.212647][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.212664][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.217019][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.217031][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.217047][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.862645][T10385] Can't find a SQUASHFS superblock on nullb0
[  500.176032][T10393] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1574'.
[  501.714311][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  501.714401][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  501.949013][T10241] hsr_slave_0: entered promiscuous mode
[  501.974534][T10241] hsr_slave_1: entered promiscuous mode
[  501.988426][T10241] debugfs: 'hsr0' already exists in 'hsr'
[  501.988454][T10241] Cannot create hsr debugfs directory
[  502.024855][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1576'.
[  502.092242][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'.
[  502.707337][T10408] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1581'.
[  503.302975][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1584'.
[  504.215774][T10426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1586'.
[  507.687278][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'.
[  509.951864][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'.
[  510.009653][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1590'.
[  513.155450][T10476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1597'.
[  513.837848][T10479] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1598'.
[  516.259902][T10481] netlink: 'syz.1.1600': attribute type 2 has an invalid length.
[  522.690362][    C0] sched: DL replenish lagged too much
[  523.774060][T10515] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1609'.
[  524.948493][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'.
[  525.034573][T10522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'.
[  526.929876][T10529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1612'.
[  531.351071][T10241] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  535.739567][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'.
[  535.788221][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  535.815507][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  535.817924][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  535.881580][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.883779][T10241] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  535.886488][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  535.905273][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  536.099722][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  536.168788][T10544] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1618'.
[  537.294700][T10241] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  537.391252][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  537.397548][T10241] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  537.727944][T10241] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  538.084850][ T5602] Bluetooth: hci1: command tx timeout
[  540.110487][ T5602] Bluetooth: hci1: command tx timeout
[  540.177520][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1620'.
[  540.338332][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'.
[  542.198211][ T5602] Bluetooth: hci1: command tx timeout
[  544.234955][T10598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1627'.
[  544.415327][ T5602] Bluetooth: hci1: command tx timeout
[  545.596256][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  545.627093][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  545.700841][T10611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1629'.
[  546.401680][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  546.425059][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  546.444748][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  549.520679][ T5602] Bluetooth: hci2: command tx timeout
[  550.118448][T10547] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.118600][T10547] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.118813][T10547] bridge_slave_0: entered allmulticast mode
[  550.123621][T10547] bridge_slave_0: entered promiscuous mode
[  550.144244][T10547] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.144854][T10547] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.145086][T10547] bridge_slave_1: entered allmulticast mode
[  550.148157][T10547] bridge_slave_1: entered promiscuous mode
[  550.257669][T10547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.270958][T10547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.372685][T10547] team0: Port device team_slave_0 added
[  550.388683][T10547] team0: Port device team_slave_1 added
[  550.471481][T10547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.471500][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.471530][T10547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.491636][T10547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.491653][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.491677][T10547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.846636][T10547] hsr_slave_0: entered promiscuous mode
[  550.849884][T10547] hsr_slave_1: entered promiscuous mode
[  550.872895][T10547] debugfs: 'hsr0' already exists in 'hsr'
[  550.872926][T10547] Cannot create hsr debugfs directory
[  551.440468][   T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  552.560988][ T5602] Bluetooth: hci2: command tx timeout
[  555.442984][ T5602] Bluetooth: hci2: command tx timeout
[  555.645095][T10666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1640'.
[  558.524169][ T5602] Bluetooth: hci2: command tx timeout
[  560.368408][T10679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1642'.
[  563.154876][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  563.154955][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  566.240500][ T6043] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  566.396370][ T6043] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  566.396416][ T6043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.396437][ T6043] usb 2-1: Product: syz
[  566.396452][ T6043] usb 2-1: Manufacturer: syz
[  566.396467][ T6043] usb 2-1: SerialNumber: syz
[  566.779022][T10608] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.779182][T10608] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.779421][T10608] bridge_slave_0: entered allmulticast mode
[  566.795903][T10608] bridge_slave_0: entered promiscuous mode
[  566.814423][T10608] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.820195][T10608] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.820626][T10608] bridge_slave_1: entered allmulticast mode
[  566.845443][T10608] bridge_slave_1: entered promiscuous mode
[  566.986007][ T6043] rtl8150 2-1:1.0: couldn't reset the device
[  566.986417][ T6043] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  567.187107][ T6043] usb 2-1: USB disconnect, device number 7
[  567.389805][T10701] netlink: 'syz.2.1649': attribute type 2 has an invalid length.
[  567.875427][T10707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1650'.
[  571.214258][T10608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.267469][T10608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.483607][T10712] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1651'.
[  574.299973][T10718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1652'.
[  578.970524][T10730] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1653'.
[  580.883002][   T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  581.067369][   T36] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  581.067405][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.067427][   T36] usb 3-1: Product: syz
[  581.067442][   T36] usb 3-1: Manufacturer: syz
[  581.067457][   T36] usb 3-1: SerialNumber: syz
[  581.409768][   T36] rtl8150 3-1:1.0: couldn't reset the device
[  581.410202][   T36] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  581.452706][   T36] usb 3-1: USB disconnect, device number 8
[  581.659906][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'.
[  581.965211][T10748] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1659'.
[  586.121909][T10608] team0: Port device team_slave_0 added
[  586.127530][T10608] team0: Port device team_slave_1 added
[  586.827244][T10608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.827265][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.827294][T10608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.070852][T10608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.070866][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.070882][T10608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.142166][T10547] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  587.225327][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  587.239689][T10547] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  587.342083][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  587.523492][T10547] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  587.564948][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  587.604050][T10547] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  588.691695][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  588.765898][T10608] hsr_slave_0: entered promiscuous mode
[  588.766819][T10608] hsr_slave_1: entered promiscuous mode
[  588.782817][T10608] debugfs: 'hsr0' already exists in 'hsr'
[  588.782847][T10608] Cannot create hsr debugfs directory
[  590.506391][T10787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1670'.
[  591.813919][  T999] bridge_slave_1: left allmulticast mode
[  591.814171][  T999] bridge_slave_1: left promiscuous mode
[  591.853966][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.924568][  T999] bridge_slave_0: left allmulticast mode
[  591.924607][  T999] bridge_slave_0: left promiscuous mode
[  591.924900][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.862841][T10793] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1672'.
[  592.943171][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'.
[  593.209770][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  593.262776][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  593.279183][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  593.289356][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  593.292699][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  594.017929][T10805] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1674'.
[  595.560536][ T5602] Bluetooth: hci4: command tx timeout
[  596.121492][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  596.231256][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  596.294838][  T999] bond0 (unregistering): Released all slaves
[  597.931350][ T5602] Bluetooth: hci4: command tx timeout
[  598.503169][  T999] hsr_slave_0: left promiscuous mode
[  598.540554][  T999] hsr_slave_1: left promiscuous mode
[  598.541552][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  598.582206][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.127017][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1682'.
[  599.309677][T10831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1681'.
[  599.955673][T10833] netlink: 'syz.1.1683': attribute type 2 has an invalid length.
[  600.525269][ T5602] Bluetooth: hci4: command tx timeout
[  602.601895][ T5602] Bluetooth: hci4: command tx timeout
[  602.916462][  T999] team0 (unregistering): Port device team_slave_1 removed
[  602.961182][  T999] team0 (unregistering): Port device team_slave_0 removed
[  603.200587][ T5718] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  603.390896][ T5718] usb 2-1: Using ep0 maxpacket: 8
[  603.406062][ T5718] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  603.406094][ T5718] usb 2-1: config 0 has no interface number 0
[  603.406139][ T5718] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  603.406164][ T5718] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  603.406189][ T5718] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  603.406211][ T5718] usb 2-1: config 0 interface 55 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  603.406234][ T5718] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  603.406277][ T5718] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  603.406300][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.431418][ T5718] usb 2-1: config 0 descriptor??
[  603.453768][ T5718] ldusb 2-1:0.55: Interrupt in endpoint not found
[  606.620403][  T820] usb 2-1: USB disconnect, device number 8
[  610.404241][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  610.462934][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  610.536752][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  610.582973][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  610.585143][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  611.144297][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[  611.276887][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'.
[  612.095532][T10902] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1695'.
[  612.750912][ T5602] Bluetooth: hci1: command tx timeout
[  614.830373][ T5602] Bluetooth: hci1: command tx timeout
[  614.848832][T10923] netlink: 'syz.1.1697': attribute type 1 has an invalid length.
[  616.560500][ T5718] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  616.567523][T10923] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  616.730516][ T5718] usb 6-1: Using ep0 maxpacket: 8
[  616.733647][ T5718] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  616.733674][ T5718] usb 6-1: config 0 has no interface number 0
[  616.733939][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  616.733967][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  616.733995][ T5718] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  616.734018][ T5718] usb 6-1: config 0 interface 55 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  616.734044][ T5718] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  616.734090][ T5718] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  616.734115][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.878683][ T5718] usb 6-1: config 0 descriptor??
[  616.892432][ T5718] ldusb 6-1:0.55: Interrupt in endpoint not found
[  616.910435][ T5602] Bluetooth: hci1: command tx timeout
[  616.992366][T10937] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  617.103922][T10942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1701'.
[  619.352047][ T5602] Bluetooth: hci1: command tx timeout
[  619.940149][ T5711] usb 6-1: USB disconnect, device number 3
[  624.898568][T10982] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1703'.
[  625.348679][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  625.348761][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  628.387291][T10798] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.387446][T10798] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.387666][T10798] bridge_slave_0: entered allmulticast mode
[  628.427508][T10798] bridge_slave_0: entered promiscuous mode
[  628.596633][T10798] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.596768][T10798] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.597019][T10798] bridge_slave_1: entered allmulticast mode
[  628.627467][T10798] bridge_slave_1: entered promiscuous mode
[  629.532467][T11011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1708'.
[  630.452303][T11012] netlink: 'syz.5.1709': attribute type 1 has an invalid length.
[  632.404682][T11025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1711'.
[  635.297475][T11030] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  635.403153][T11030] Can't find a SQUASHFS superblock on nullb0
[  637.825752][T11012] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  638.518536][T11052] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1714'.
[  640.650174][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.226537][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.226864][T10883] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.227004][T10883] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.227268][T10883] bridge_slave_0: entered allmulticast mode
[  641.289959][T10883] bridge_slave_0: entered promiscuous mode
[  641.391886][T10883] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.392026][T10883] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.392248][T10883] bridge_slave_1: entered allmulticast mode
[  641.405597][T10883] bridge_slave_1: entered promiscuous mode
[  641.587779][T11053] block nbd0: shutting down sockets
[  642.360750][T11074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1721'.
[  643.590647][T10798] team0: Port device team_slave_0 added
[  644.512628][T10798] team0: Port device team_slave_1 added
[  644.530016][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  645.004522][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  645.489090][T11081] Can't find a SQUASHFS superblock on nullb0
[  646.887532][T11085] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  647.407935][T11085] bond9: entered promiscuous mode
[  647.408345][T11085] 8021q: adding VLAN 0 to HW filter on device bond9
[  648.404501][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.404518][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.404543][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.784554][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.784574][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.784604][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.795572][T10883] team0: Port device team_slave_0 added
[  648.913448][T10883] team0: Port device team_slave_1 added
[  649.122889][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'.
[  649.211942][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.211962][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.211991][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.533088][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.533106][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.533210][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  650.815828][T10798] hsr_slave_0: entered promiscuous mode
[  650.816987][T10798] hsr_slave_1: entered promiscuous mode
[  650.817778][T10798] debugfs: 'hsr0' already exists in 'hsr'
[  650.817799][T10798] Cannot create hsr debugfs directory
[  651.958123][T11116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1730'.
[  652.177805][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1731'.
[  652.236433][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1731'.
[  652.315855][T11104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  654.337998][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'.
[  654.487111][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'.
[  657.215088][T11142] block nbd0: shutting down sockets
[  657.665297][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  657.712526][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  657.715034][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  657.733186][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  657.734176][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  659.531410][T10883] hsr_slave_0: entered promiscuous mode
[  659.539951][T10883] hsr_slave_1: entered promiscuous mode
[  659.543791][T10883] debugfs: 'hsr0' already exists in 'hsr'
[  659.543819][T10883] Cannot create hsr debugfs directory
[  660.087562][ T5602] Bluetooth: hci2: command tx timeout
[  662.298907][  T999] bridge_slave_1: left allmulticast mode
[  662.302574][  T999] bridge_slave_1: left promiscuous mode
[  662.311971][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.959259][ T5607] Bluetooth: hci2: command tx timeout
[  663.003146][  T999] bridge_slave_0: left allmulticast mode
[  663.003187][  T999] bridge_slave_0: left promiscuous mode
[  663.003480][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.421755][T11181] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1743'.
[  663.488282][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.591380][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.662312][  T999] bond0 (unregistering): Released all slaves
[  664.662595][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'.
[  664.732019][T11189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'.
[  664.762110][  T999] hsr_slave_0: left promiscuous mode
[  664.780425][  T999] hsr_slave_1: left promiscuous mode
[  664.781181][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.811593][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.990479][ T5607] Bluetooth: hci2: command tx timeout
[  665.272235][  T999] team0 (unregistering): Port device team_slave_1 removed
[  665.310841][  T999] team0 (unregistering): Port device team_slave_0 removed
[  667.070827][ T5607] Bluetooth: hci2: command tx timeout
[  667.867753][T11212] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  668.050629][T11206] Can't find a SQUASHFS superblock on nullb0
[  669.861681][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  669.888146][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  669.902831][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  669.947033][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  669.960220][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  672.111387][ T5607] Bluetooth: hci4: command tx timeout
[  672.314828][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[  675.759887][ T5607] Bluetooth: hci4: command tx timeout
[  676.721603][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1753'.
[  678.159371][ T5607] Bluetooth: hci4: command tx timeout
[  678.771090][T11251] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  679.171344][  T999] bridge_slave_1: left allmulticast mode
[  679.171384][  T999] bridge_slave_1: left promiscuous mode
[  679.171578][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.276448][  T999] bridge_slave_0: left allmulticast mode
[  679.276478][  T999] bridge_slave_0: left promiscuous mode
[  679.276688][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.191026][ T5607] Bluetooth: hci4: command tx timeout
[  680.651003][  T999] bridge_slave_1: left allmulticast mode
[  680.651043][  T999] bridge_slave_1: left promiscuous mode
[  680.651311][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.785035][  T999] bridge_slave_0: left allmulticast mode
[  680.785074][  T999] bridge_slave_0: left promiscuous mode
[  680.785351][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.039945][T11282] netlink: 'syz.5.1759': attribute type 2 has an invalid length.
[  681.134078][T11284] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  681.528967][T11288] Can't find a SQUASHFS superblock on nullb0
[  681.671598][  T999] bridge_slave_1: left allmulticast mode
[  681.671626][  T999] bridge_slave_1: left promiscuous mode
[  681.671836][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.757356][  T999] bridge_slave_0: left allmulticast mode
[  684.757396][  T999] bridge_slave_0: left promiscuous mode
[  684.757674][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.181165][T11302] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1761'.
[  686.390808][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  686.422612][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  686.964364][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.093049][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.334168][  T999] bond0 (unregistering): Released all slaves
[  690.417475][T11327] netlink: 'syz.2.1767': attribute type 2 has an invalid length.
[  692.114581][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.124079][T11333] block nbd0: server does not support multiple connections per device.
[  692.140894][T11333] block nbd0: shutting down sockets
[  692.172395][T11336] netlink: 'syz.2.1769': attribute type 1 has an invalid length.
[  692.231191][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1769'.
[  692.250660][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.333419][  T999] bond0 (unregistering): Released all slaves
[  692.592904][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.671754][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.732199][  T999] bond0 (unregistering): Released all slaves
[  692.827275][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[  692.861326][T11336] bond10: entered promiscuous mode
[  692.861649][T11336] 8021q: adding VLAN 0 to HW filter on device bond10
[  693.124928][T11343] bond10: (slave bridge7): making interface the new active one
[  693.124955][T11343] bridge7: entered promiscuous mode
[  693.175826][T11343] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  694.081266][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1772'.
[  694.178316][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1772'.
[  694.631079][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'.
[  695.607387][T11145] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.748332][T11145] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.748681][T11145] bridge_slave_0: entered allmulticast mode
[  695.986571][T11145] bridge_slave_0: entered promiscuous mode
[  696.552831][T11145] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.552990][T11145] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.553287][T11145] bridge_slave_1: entered allmulticast mode
[  696.585152][T11145] bridge_slave_1: entered promiscuous mode
[  696.739823][T11385] netlink: 'syz.2.1775': attribute type 2 has an invalid length.
[  698.274735][    C0] 
[  698.274745][    C0] ======================================================
[  698.274750][    C0] WARNING: possible circular locking dependency detected
[  698.274756][    C0] syzkaller #0 Not tainted
[  698.274762][    C0] ------------------------------------------------------
[  698.274767][    C0] syz.2.1775/11384 is trying to acquire lock:
[  698.274774][    C0] ffff88806e7a1ce0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0
[  698.274811][    C0] 
[  698.274811][    C0] but task is already holding lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  698.274815][    C0] ffff88806431e2e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0
[  698.274837][    C0] 
[  698.274837][    C0] which lock already depends on the new lock.
[  698.274837][    C0] 
[  698.274841][    C0] 
[  698.274841][    C0] the existing dependency chain (in reverse order) is:
[  698.274846][    C0] 
[  698.274846][    C0] -> #1 (slock-AF_PHONET){+...}-{3:3}:
[  698.274860][    C0]        rt_spin_lock+0x83/0x400
[  698.274886][    C0]        __sk_receive_skb+0x1f1/0x9e0
[  698.274896][    C0]        phonet_rcv+0x781/0xc40
[  698.274911][    C0]        process_backlog+0x5e1/0xc60
[  698.274921][    C0]        __napi_poll+0xab/0x550
[  698.274940][    C0]        net_rx_action+0x696/0xe00
[  698.274949][    C0]        handle_softirqs+0x1de/0x6d0
[  698.274961][    C0]        __local_bh_enable_ip+0x170/0x2b0
[  698.274972][    C0]        netif_rx+0xb9/0xf0
[  698.274984][    C0]        pn_send+0x62a/0x8e0
[  698.274998][    C0]        pn_skb_send+0x218/0x510
[  698.275012][    C0]        pipe_snd_status+0x1f1/0x320
[  698.275027][    C0]        pipe_do_rcv+0xf15/0x16a0
[  698.275036][    C0]        __sk_receive_skb+0x962/0x9e0
[  698.275046][    C0]        pep_do_rcv+0x685/0xaa0
[  698.275054][    C0]        __release_sock+0x2a9/0x3d0
[  698.275068][    C0]        release_sock+0x1be/0x290
[  698.275078][    C0]        pep_sock_accept+0xd47/0x11e0
[  698.275087][    C0]        pn_socket_accept+0xc1/0x310
[  698.275100][    C0]        do_accept+0x52b/0x760
[  698.275110][    C0]        __sys_accept4+0x139/0x230
[  698.275123][    C0]        __x64_sys_accept4+0x9a/0xb0
[  698.275141][    C0]        do_syscall_64+0x15f/0xf80
[  698.275160][    C0]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.275179][    C0] 
[  698.275179][    C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}:
[  698.275200][    C0]        __lock_acquire+0x15a5/0x2cf0
[  698.275214][    C0]        lock_acquire+0x106/0x350
[  698.275227][    C0]        rt_spin_lock_nested+0x81/0x3f0
[  698.275241][    C0]        __sk_receive_skb+0x1bf/0x9e0
[  698.275251][    C0]        pep_do_rcv+0x685/0xaa0
[  698.275260][    C0]        __sk_receive_skb+0x962/0x9e0
[  698.275269][    C0]        phonet_rcv+0x781/0xc40
[  698.275283][    C0]        process_backlog+0x5e1/0xc60
[  698.275292][    C0]        __napi_poll+0xab/0x550
[  698.275307][    C0]        net_rx_action+0x696/0xe00
[  698.275316][    C0]        handle_softirqs+0x1de/0x6d0
[  698.275327][    C0]        __local_bh_enable_ip+0x170/0x2b0
[  698.275337][    C0]        netif_rx+0xb9/0xf0
[  698.275349][    C0]        pn_send+0x62a/0x8e0
[  698.275363][    C0]        pn_skb_send+0x218/0x510
[  698.275376][    C0]        pep_sock_close+0x2c1/0x5b0
[  698.275385][    C0]        pn_socket_release+0x9b/0xc0
[  698.275398][    C0]        sock_close+0xc3/0x240
[  698.275412][    C0]        __fput+0x461/0xa70
[  698.275427][    C0]        task_work_run+0x1d9/0x270
[  698.275442][    C0]        exit_to_user_mode_loop+0xed/0x480
[  698.275456][    C0]        do_syscall_64+0x33e/0xf80
[  698.275467][    C0]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.275477][    C0] 
[  698.275477][    C0] other info that might help us debug this:
[  698.275477][    C0] 
[  698.275481][    C0]  Possible unsafe locking scenario:
[  698.275481][    C0] 
[  698.275484][    C0]        CPU0                    CPU1
[  698.275487][    C0]        ----                    ----
[  698.275491][    C0]   lock(slock-AF_PHONET);
[  698.275498][    C0]                                lock(slock-AF_PHONET/1);
[  698.275509][    C0]                                lock(slock-AF_PHONET);
[  698.275517][    C0]   lock(slock-AF_PHONET/1);
[  698.275526][    C0] 
[  698.275526][    C0]  *** DEADLOCK ***
[  698.275526][    C0] 
[  698.275530][    C0] 7 locks held by syz.2.1775/11384:
[  698.275536][    C0]  #0: ffff88803f5f82b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  698.275570][    C0]  #1: ffff88806431dad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0
[  698.275594][    C0]  #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  698.275620][    C0]  #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  698.275644][    C0]  #4: ffff88806431e2e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0
[  698.275669][    C0]  #5: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  698.275697][    C0]  #6: ffff88806431e398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40
[  698.275726][    C0] 
[  698.275726][    C0] stack backtrace:
[  698.275734][    C0] CPU: 0 UID: 0 PID: 11384 Comm: syz.2.1775 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  698.275747][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  698.275756][    C0] Call Trace:
[  698.275763][    C0]  <TASK>
[  698.275772][    C0]  dump_stack_lvl+0xe8/0x150
[  698.275788][    C0]  print_circular_bug+0x2e1/0x300
[  698.275799][    C0]  check_noncircular+0x12e/0x150
[  698.275818][    C0]  __lock_acquire+0x15a5/0x2cf0
[  698.275833][    C0]  ? try_to_take_rt_mutex+0x840/0xb00
[  698.275855][    C0]  ? __sk_receive_skb+0x1bf/0x9e0
[  698.275866][    C0]  lock_acquire+0x106/0x350
[  698.275886][    C0]  ? __sk_receive_skb+0x1bf/0x9e0
[  698.275897][    C0]  ? sk_filter_trim_cap+0x8f1/0xce0
[  698.275915][    C0]  rt_spin_lock_nested+0x81/0x3f0
[  698.275930][    C0]  ? __sk_receive_skb+0x1bf/0x9e0
[  698.275941][    C0]  ? __pfx_sk_filter_trim_cap+0x10/0x10
[  698.275955][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  698.275969][    C0]  ? __pfx_rt_spin_lock_nested+0x10/0x10
[  698.275986][    C0]  ? rt_spin_lock+0x1e0/0x400
[  698.276002][    C0]  __sk_receive_skb+0x1bf/0x9e0
[  698.276015][    C0]  pep_do_rcv+0x685/0xaa0
[  698.276026][    C0]  ? __pfx_pep_do_rcv+0x10/0x10
[  698.276038][    C0]  ? __pfx_pep_do_rcv+0x10/0x10
[  698.276048][    C0]  ? phonet_rcv+0x781/0xc40
[  698.276062][    C0]  __sk_receive_skb+0x962/0x9e0
[  698.276075][    C0]  phonet_rcv+0x781/0xc40
[  698.276090][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  698.276105][    C0]  ? __pfx_phonet_rcv+0x10/0x10
[  698.276122][    C0]  ? process_backlog+0x271/0xc60
[  698.276136][    C0]  ? process_backlog+0x271/0xc60
[  698.276145][    C0]  ? __pfx_phonet_rcv+0x10/0x10
[  698.276161][    C0]  process_backlog+0x5e1/0xc60
[  698.276176][    C0]  __napi_poll+0xab/0x550
[  698.276197][    C0]  net_rx_action+0x696/0xe00
[  698.276222][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  698.276241][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  698.276265][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  698.276296][    C0]  ? enqueue_to_backlog+0x340/0xcb0
[  698.276316][    C0]  handle_softirqs+0x1de/0x6d0
[  698.276330][    C0]  __local_bh_enable_ip+0x170/0x2b0
[  698.276343][    C0]  netif_rx+0xb9/0xf0
[  698.276356][    C0]  pn_send+0x62a/0x8e0
[  698.276373][    C0]  pn_skb_send+0x218/0x510
[  698.276390][    C0]  pep_sock_close+0x2c1/0x5b0
[  698.276401][    C0]  pn_socket_release+0x9b/0xc0
[  698.276415][    C0]  sock_close+0xc3/0x240
[  698.276431][    C0]  ? __pfx_sock_close+0x10/0x10
[  698.276446][    C0]  __fput+0x461/0xa70
[  698.276465][    C0]  task_work_run+0x1d9/0x270
[  698.276481][    C0]  ? __pfx_task_work_run+0x10/0x10
[  698.276498][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.276510][    C0]  exit_to_user_mode_loop+0xed/0x480
[  698.276523][    C0]  ? rcu_is_watching+0x15/0xb0
[  698.276540][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.276551][    C0]  do_syscall_64+0x33e/0xf80
[  698.276563][    C0]  ? clear_bhb_loop+0x40/0x90
[  698.276576][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.276586][    C0] RIP: 0033:0x7f95e6eccdd9
[  698.276598][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.276608][    C0] RSP: 002b:00007ffff05257d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  698.276621][    C0] RAX: 0000000000000000 RBX: 00007f95e7147da0 RCX: 00007f95e6eccdd9
[  698.276629][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  698.276636][    C0] RBP: 00007f95e7147da0 R08: 0000000000000006 R09: 0000000000000000
[  698.276643][    C0] R10: 00007f95e7147cb0 R11: 0000000000000246 R12: 00000000000aa49a
[  698.276650][    C0] R13: 00007f95e714618c R14: 00000000000aa467 R15: 00007f95e7146180
[  698.276662][    C0]  </TASK>
[  698.483272][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[  699.167212][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.863450][  T999] hsr_slave_0: left promiscuous mode
[  699.900494][  T999] hsr_slave_1: left promiscuous mode
[  699.901039][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  699.941401][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.051190][  T999] hsr_slave_0: left promiscuous mode
[  700.167674][  T999] hsr_slave_1: left promiscuous mode
[  700.168399][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.201093][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.480476][  T999] hsr_slave_0: left promiscuous mode
[  700.522809][  T999] hsr_slave_1: left promiscuous mode
[  700.523297][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.562559][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.860832][  T999] team0 (unregistering): Port device team_slave_1 removed
[  700.900795][  T999] team0 (unregistering): Port device team_slave_0 removed
[  701.040980][  T999] team0 (unregistering): Port device team_slave_1 removed
[  701.081078][  T999] team0 (unregistering): Port device team_slave_0 removed
[  701.331792][  T999] team0 (unregistering): Port device team_slave_1 removed
[  701.351735][  T999] team0 (unregistering): Port device team_slave_0 removed
[  701.454020][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.829193][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4
[  704.072028][  T999] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.291834][  T999] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.491792][  T999] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.691988][  T999] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.040654][  T999] bridge_slave_1: left allmulticast mode
[  705.040683][  T999] bridge_slave_1: left promiscuous mode
[  705.040855][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.140759][  T999] bridge_slave_0: left allmulticast mode
[  705.140779][  T999] bridge_slave_0: left promiscuous mode
[  705.140907][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.490530][  T999] bridge_slave_1: left allmulticast mode
[  705.490552][  T999] bridge_slave_1: left promiscuous mode
[  705.490719][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.551181][  T999] bridge_slave_0: left allmulticast mode
[  705.551212][  T999] bridge_slave_0: left promiscuous mode
[  705.551385][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.930852][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  706.011042][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  706.092046][  T999] bond0 (unregistering): Released all slaves
[  706.420842][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  706.500793][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  706.541979][  T999] bond0 (unregistering): Released all slaves
[  706.581892][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[  706.868226][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[  707.224839][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7
[  707.623777][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8
[  707.780430][  T999] hsr_slave_0: left promiscuous mode
[  707.800449][  T999] hsr_slave_1: left promiscuous mode
[  707.801493][  T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  707.801508][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.851457][  T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  707.851479][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.910897][  T999] veth1_macvtap: left promiscuous mode
[  707.910967][  T999] veth0_macvtap: left promiscuous mode
[  707.911117][  T999] veth1_vlan: left promiscuous mode
[  707.911212][  T999] veth0_vlan: left promiscuous mode