last executing test programs:

21m34.388460273s ago: executing program 32 (id=2216):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70c", 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e", 0xf2}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1", 0x81}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

18m5.053173854s ago: executing program 5 (id=3565):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

18m4.881835002s ago: executing program 5 (id=3566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24040084)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

18m4.629667306s ago: executing program 5 (id=3567):
fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

18m4.426276319s ago: executing program 5 (id=3570):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, 0x0, 0x0)

18m3.734741722s ago: executing program 5 (id=3577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040)

18m2.617635928s ago: executing program 5 (id=3585):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
sendmmsg$inet(r0, 0x0, 0x0, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

18m2.274649235s ago: executing program 33 (id=3585):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
sendmmsg$inet(r0, 0x0, 0x0, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

17m55.194191229s ago: executing program 4 (id=3616):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000), 0x0)

17m54.971193208s ago: executing program 4 (id=3619):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

17m54.725686953s ago: executing program 4 (id=3621):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000045dc653dff00cc1e5d9e8ac3f4cada452ad6881f06534745e0d2410efdf3fc7d074a8ec7c1edd661600f1781f333e78daa7d5a3d40699f8dc0848a924422211f7a29566cc4c8b90e51bc6522356a439476fb462aadf2c26e4c55548cfc8acfc8837f5ba0e5d582607c8019779ef593837edf7feb2cc9b55f38291b9fb30e8e127e9494a316c0bf52ec73cbd3cf9016b2cf2d28f9f8810087f6efd9510e49d3d4750b82a72c53f7ad8072816c304028a3e79890384c7c3bc57923375a8a4b8946e3d4f3fd692a0c33", @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000c0002000000"], 0x34}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000040)={0x0, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r5, 0xfffffff8}, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x142042}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
r13 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r13, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

17m53.163303887s ago: executing program 4 (id=3624):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, 0x0, 0x0)

17m49.858816442s ago: executing program 4 (id=3627):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

17m45.525599169s ago: executing program 4 (id=3635):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010201000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000eadc0000000000000004000004001008000100010000009ee5ff452b0d13986b6d83967fa6e0c200c9ddf28dd5435a2eba9ab97a0065a0b9679e3bc07923b16ad7f9822f1e60990dae553c61ffd325c4a656bcf931da87d36b7d96d561e0bb1ee743cf3be82352313d7b44473908b00d3bba1e71e510b529c342af8cc41654e87823f26f22b4ce6c903c4c984d69844c22b319d2be1f62144b8b872937fd6a8d73b2449061fed47aebd3076029202005e9148afc5030387779b21a1d40a8b375309088c46c87a656e4d679c2071542cb1d24"], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xb}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xb, 0xe15, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20ed0000", @ANYRES16=0x0, @ANYBLOB="410329bd7000fddbdf25070000000c0002800800020008020000"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

17m45.179975506s ago: executing program 34 (id=3635):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010201000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000eadc0000000000000004000004001008000100010000009ee5ff452b0d13986b6d83967fa6e0c200c9ddf28dd5435a2eba9ab97a0065a0b9679e3bc07923b16ad7f9822f1e60990dae553c61ffd325c4a656bcf931da87d36b7d96d561e0bb1ee743cf3be82352313d7b44473908b00d3bba1e71e510b529c342af8cc41654e87823f26f22b4ce6c903c4c984d69844c22b319d2be1f62144b8b872937fd6a8d73b2449061fed47aebd3076029202005e9148afc5030387779b21a1d40a8b375309088c46c87a656e4d679c2071542cb1d24"], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xb}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xb, 0xe15, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20ed0000", @ANYRES16=0x0, @ANYBLOB="410329bd7000fddbdf25070000000c0002800800020008020000"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

16m29.077808885s ago: executing program 7 (id=3955):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

16m27.453340907s ago: executing program 7 (id=3958):
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x618c, &(0x7f00000000c0)={0x0, 0xd910, 0x1, 0x3, 0x800001db})
r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x80000)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000340)=0xa)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x25, &(0x7f0000000000)={0x1, r0, 0x0, {0xfffffffffffffffd, 0x7}, 0x1}, 0x1)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x20, r7, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x88480, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x690, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {0x0, 0x7}, {0x3, 0x0, 0xffffffff}, {0x0, 0x0, 0xffffffff}, 0x0, 0x80, 0xfffffffe, 0x0, 0x0, 0x100, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})

16m25.095965646s ago: executing program 7 (id=3959):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x840)

16m24.459297749s ago: executing program 7 (id=3964):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}, 0x0)

16m24.121166758s ago: executing program 7 (id=3966):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00))
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r3 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)

16m20.781643006s ago: executing program 7 (id=3970):
socket(0x10, 0x3, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, 0x0, 0xa, 0x3, 'syz0\x00', &(0x7f0000000900)=['/dev/vim2m\x00', '\xed\xe8.\xb0\xeeE\xb7n\x18s\xdc\xc9\xd8?\xe4\xe2+\xeab#\xb74\x93UUAu\x7f~\x94i\v\xc6nl\x9f\nN\xa5i,Q*\x8cS\x86\xba\x1b\xc8\xbd\x92;/\x8c\xee/\xda\x00\x00\x05\x00\x00\x00', 'P\xf6\x06\x00', '%@\x00G&\xb4\x14\xd7\xee\xbfP\x15l\x99u\xa6\xb2\r\xc33=\xfe\xcf\x97x\xa3\xb1\xc0\xcd\xbc\xdd\x1f!\xc7EuP4\x96\xbb\xa8R\x91*\xbf\xb8\xe7\xdf_\xab\x19s\xa45\xeb\xfd\x0fT\xae\xbc?\x9c\xee]\x1e#\xd7n\xc5K|\xfd\x84\x1c\x94o\xdd\xf8{\xeb\xc5\xf5\xcd\xbb\xae\xce\xd7\x90\xcb5\b\xd2\x94\x16\x8d\xd0`[UB\x85j\xf7\xe2\xf7\xe0\xa7', '{-[+-\x00', 'GPL\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0xde})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe230100000400020011b53631b865c3dabe2c389aa342ea81ff125961731b0766a9d4d34bc9617b727fb397a7e6a7881478ca3b9d476b0c43718ce5c6986ad251fc81ebe6d9d43a5b96c115f49dd8b63ef4d37c25d391832c0af9eb92812816f7feb67401fde3466862e173dff9444a2ceeea88458f0273c59170e00d787210f1b0f94d8e2bc068b3ac5edc02a0d39858b47c3f1a1a1bfcfd32bd44643b89686a805ad73f3c2951e50843d2fda2035c7c41911367f2fb1f9f3e5f8b780e37529947cbc3b164a6f9211cf28291a1ecf10c90f0c0f430f822b172be07272d923a66435e364fef8bf65d3cf0d9f07b401919b5eece8f430ae33cbff35738e4dbb7ab35164f4fd2c70d3435e5f20f2e6c9675b1d50ee57daebda90c162f2f92070cf5692aec6b040ac79f94f4cd9d6691eff13e6de110363b9f191fad2f24428867cc0ab3b4dfc09411bfe572bb235d0f83c1eb0937e452027b4521", 0x1a9}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44815)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFBR(r3, 0x8940, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000440)=0xc)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r5, 0xd}, 0x8)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="146d4ddd388fe5c10100002f00011b277a8d7e218abef00b90468e00000000ecdbdf250139addcb75dec00bfc38154599235dba43e078ec4735966c0ebdd9de98775242b875b756692f13c0ea33beb3c681a1429e08ce17309b988111276817cddd0f3546e41bba1e523d8b300183bd1b921ccb0e16737e96089837b014ade1a8019c292065f8b63a8bf8ae8cf43c4181996c8b5d33f144c5aaed0bf56057193128df6d68c05fa023ae66df7bf8983df6f261d49821592b4cae639f6617ebe9a288d77e6ebeb8637946945dd9a64c689a2ceff298805f3d07984f678eed6ef2c52ba5f6712699338fe4ea36302014c5c8134"], 0x114}], 0x1, 0x0, 0x0, 0x40000855}, 0x20008001)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=0xffffffff)

16m17.712811645s ago: executing program 6 (id=3977):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r5 = dup3(r3, r4, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)

16m16.533368488s ago: executing program 6 (id=3984):
socket$rxrpc(0x21, 0x2, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x5, 0x8, 0xf, 0x48c}, 0x50)
close(0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x578410eb)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')

16m13.668550494s ago: executing program 6 (id=3993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c0000", @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2b", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

16m13.31745176s ago: executing program 6 (id=3996):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

16m9.823670121s ago: executing program 6 (id=4000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x44000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16m9.557811652s ago: executing program 3 (id=4002):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r3], 0x1c}}, 0x840)

16m9.138574895s ago: executing program 3 (id=4004):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

16m8.94466795s ago: executing program 6 (id=4005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
mmap(&(0x7f0000558000/0x2000)=nil, 0x2000, 0x2000007, 0x8010, r2, 0xffffc000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r4 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

16m8.080097031s ago: executing program 35 (id=4005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
mmap(&(0x7f0000558000/0x2000)=nil, 0x2000, 0x2000007, 0x8010, r2, 0xffffc000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r4 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

16m8.061441158s ago: executing program 3 (id=4008):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="380000000e00000000000000008000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", &(0x7f0000000b00)="4155eeb476bb994a7adbf9ced4cff73ffcc565c90d1d14d488c98904e0d534423e707c5479b3594e0fdb8e8fe861ad8b0baf8b88a81271f0124bb6b06ccb0ab9b2584e405faac843e88185bad71856917b1d4d97243b2bd4497bee39a561d0189bee83a0347b64dc849e99bf872e3fc58867d649170aaa5e5ee950c69d", 0x3}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d07}]})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050)
sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"])
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r7, 0x0, 0x800)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2)

16m5.281908379s ago: executing program 36 (id=3970):
socket(0x10, 0x3, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, 0x0, 0xa, 0x3, 'syz0\x00', &(0x7f0000000900)=['/dev/vim2m\x00', '\xed\xe8.\xb0\xeeE\xb7n\x18s\xdc\xc9\xd8?\xe4\xe2+\xeab#\xb74\x93UUAu\x7f~\x94i\v\xc6nl\x9f\nN\xa5i,Q*\x8cS\x86\xba\x1b\xc8\xbd\x92;/\x8c\xee/\xda\x00\x00\x05\x00\x00\x00', 'P\xf6\x06\x00', '%@\x00G&\xb4\x14\xd7\xee\xbfP\x15l\x99u\xa6\xb2\r\xc33=\xfe\xcf\x97x\xa3\xb1\xc0\xcd\xbc\xdd\x1f!\xc7EuP4\x96\xbb\xa8R\x91*\xbf\xb8\xe7\xdf_\xab\x19s\xa45\xeb\xfd\x0fT\xae\xbc?\x9c\xee]\x1e#\xd7n\xc5K|\xfd\x84\x1c\x94o\xdd\xf8{\xeb\xc5\xf5\xcd\xbb\xae\xce\xd7\x90\xcb5\b\xd2\x94\x16\x8d\xd0`[UB\x85j\xf7\xe2\xf7\xe0\xa7', '{-[+-\x00', 'GPL\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0xde})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)="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", 0x1a9}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44815)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFBR(r3, 0x8940, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000440)=0xc)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r5, 0xd}, 0x8)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="146d4ddd388fe5c10100002f00011b277a8d7e218abef00b90468e00000000ecdbdf250139addcb75dec00bfc38154599235dba43e078ec4735966c0ebdd9de98775242b875b756692f13c0ea33beb3c681a1429e08ce17309b988111276817cddd0f3546e41bba1e523d8b300183bd1b921ccb0e16737e96089837b014ade1a8019c292065f8b63a8bf8ae8cf43c4181996c8b5d33f144c5aaed0bf56057193128df6d68c05fa023ae66df7bf8983df6f261d49821592b4cae639f6617ebe9a288d77e6ebeb8637946945dd9a64c689a2ceff298805f3d07984f678eed6ef2c52ba5f6712699338fe4ea36302014c5c8134"], 0x114}], 0x1, 0x0, 0x0, 0x40000855}, 0x20008001)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=0xffffffff)

16m5.112556378s ago: executing program 3 (id=4010):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

16m4.205696672s ago: executing program 3 (id=4015):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x44000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16m1.023212619s ago: executing program 3 (id=4023):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

16m0.336079064s ago: executing program 37 (id=4023):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

12.383003701s ago: executing program 0 (id=7577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000007000010000000000000000000700", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0)

12.382323061s ago: executing program 8 (id=7578):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x2, 0x3, 0x9, 0x40, 0x8}, 0x20)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$read_default(0x2, 0x0, 0x17)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r4 = socket$igmp(0x2, 0x3, 0x2)
fgetxattr(r4, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001040)={0x0, 'pim6reg\x00', {0x3}, 0x3})
recvmsg$unix(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001280)=""/111, 0x6f}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/61, 0x3d}, {&(0x7f0000001380)=""/14, 0xe}, {&(0x7f00000013c0)=""/149, 0x95}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/169, 0xa9}], 0xa, &(0x7f0000002740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x1)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

12.13950409s ago: executing program 8 (id=7583):
socket(0x10, 0x1, 0x6)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)

12.088291161s ago: executing program 0 (id=7585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4)

9.515840335s ago: executing program 8 (id=7587):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

8.125104619s ago: executing program 1 (id=7590):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INTERRUPT(r0, 0x0, 0x0)

8.107427976s ago: executing program 9 (id=7591):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

7.409610307s ago: executing program 8 (id=7592):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffbffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xa1, 0x800006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff, 0x76, 0x6, 0xe5, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x71b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010844)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.174273547s ago: executing program 1 (id=7593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r2 = syz_open_dev$ndb(0x0, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0xffffffffffffffdc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=<r5=>0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8})
r6 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002180)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRES32=r5, @ANYRES64, @ANYRESDEC=r4, @ANYRES8=r6, @ANYRESOCT=r2, @ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x24004c51)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048091)

7.040721965s ago: executing program 1 (id=7594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0)

6.89059339s ago: executing program 1 (id=7595):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x2, 0x3, 0x9, 0x40, 0x8}, 0x20)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$read_default(0x2, 0x0, 0x17)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r4 = socket$igmp(0x2, 0x3, 0x2)
fgetxattr(r4, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001040)={0x0, 'pim6reg\x00', {0x3}, 0x3})
recvmsg$unix(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001280)=""/111, 0x6f}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/61, 0x3d}, {&(0x7f0000001380)=""/14, 0xe}, {&(0x7f00000013c0)=""/149, 0x95}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/169, 0xa9}], 0xa, &(0x7f0000002740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x1)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3.804100466s ago: executing program 0 (id=7596):
r0 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34325852, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}})

3.749497627s ago: executing program 9 (id=7597):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x108e9ba53a2606ba)

3.583065129s ago: executing program 0 (id=7599):
syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x40010)

3.564897015s ago: executing program 1 (id=7600):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xc0, 0x40, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x3, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.529301409s ago: executing program 2 (id=7601):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.401734828s ago: executing program 9 (id=7602):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x1d4, r2, 0xb00, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd05}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24008091}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010102}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000feffffff240a00001000000095008000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x85, &(0x7f0000000200)=""/133, 0x41000, 0x4}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000002ed116687b544c8248a0e49c796245bb811dd047f2c366bd2fdd380d9d149ecdf427d691c0e5e3fbe3b95e052717c0d54d892d3719758d32b4f3ead702731f8bbf30434b90644bdb0b22da4b55c362c9ef55efa3f3e55efbb7e6e0787f92402ec385d0192fcd4ee250d4d71d78e66821afe3e1da379f6e84d21e7fff854ae4a41894c435462c265535bff5448f7fc0ed2eca7f8cab85e849c94b2487639c644aa975aa47ecad07b0a988322a9712825d821ccdfedb7ff51a29fe17bf11057d8a6c6346f78175ecd8a60902c079a00fb249f2eb29f16058e59efec0f16d74e44917c623441aee1da8ac4bb1052e957a09faae16624e92bff56733603f72a3ed1c6da69b592135709e1176a553da888f2f8a8b0bee7624f1d6b70befa80d42"], 0x54}}, 0x0)

3.380208844s ago: executing program 0 (id=7603):
syz_usb_connect(0x2, 0x32, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x81, 0x68, 0x38, 0x10, 0x408, 0xea04, 0x4a9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x10, 0x10, 0x80, 0x4f, "", [{{0x9, 0x4, 0x24, 0x1, 0x1, 0x9, 0xc7, 0xcf, 0xcf, [], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0xa, 0xa3, 0x9, [@generic={0x5, 0x5, "27aea4"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})

3.285421018s ago: executing program 8 (id=7604):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = syz_open_dev$ndb(0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0xffffffffffffffdc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8})
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x1, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048091)

3.188684851s ago: executing program 2 (id=7605):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x80003, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r3, 0x0, 0x80)
recvmmsg(r3, 0x0, 0x0, 0x40002022, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000100)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

3.147896555s ago: executing program 8 (id=7606):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4)

3.11958691s ago: executing program 9 (id=7607):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2.922953706s ago: executing program 2 (id=7608):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

2.109853888s ago: executing program 9 (id=7609):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.853583755s ago: executing program 9 (id=7610):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x2, 0x3, 0x9, 0x40, 0x8}, 0x20)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$read_default(0x2, 0x0, 0x17)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r4 = socket$igmp(0x2, 0x3, 0x2)
fgetxattr(r4, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001040)={0x0, 'pim6reg\x00', {0x3}, 0x3})
recvmsg$unix(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001280)=""/111, 0x6f}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/61, 0x3d}, {&(0x7f0000001380)=""/14, 0xe}, {&(0x7f00000013c0)=""/149, 0x95}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/169, 0xa9}], 0xa, &(0x7f0000002740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x1)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.623104835s ago: executing program 2 (id=7611):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x40305839, &(0x7f0000000a00)={{r1}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"})
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="380000000100", 0x6)
r7 = socket$inet6(0xa, 0x3, 0x3)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000047c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r9, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="310300000000000000000500000008000300", @ANYRES64=r10], 0x1c}}, 0x800)
write(r0, &(0x7f0000000040)="09000000010001", 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.373899583s ago: executing program 2 (id=7612):
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34325852, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}})

1.257694124s ago: executing program 2 (id=7613):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000380)={@desc={0x1, 0x0, @desc2}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r5, 0x0, 0xffffffffffffffff)
r6 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x0, 0x3, 0x46, 0x0, 0x5})

1.05754728s ago: executing program 0 (id=7614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffbffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xa1, 0x800006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff, 0x76, 0x6, 0xe5, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x71b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010844)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 1 (id=7615):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x40010)

kernel console output (not intermixed with test programs):

 1432.084471][T18157] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1432.108329][T18157] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1432.135645][T18157] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1432.328787][T26515] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6339'.
[ 1432.350030][T26515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6339'.
[ 1432.383809][T18157] usb 10-1: GET_CAPABILITIES returned 0
[ 1432.389948][T18157] usbtmc 10-1:16.0: can't read capabilities
[ 1432.588990][T14990] usb 10-1: USB disconnect, device number 45
[ 1432.814222][T26522] device syzkaller0 entered promiscuous mode
[ 1433.889503][T17592] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1434.083345][T17592] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1434.109436][T17592] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1434.143510][T17592] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1434.173285][T17592] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1434.204878][T17592] usb 10-1: Product: syz
[ 1434.209189][T17592] usb 10-1: Manufacturer: syz
[ 1434.213888][T17592] usb 10-1: SerialNumber: syz
[ 1434.256035][T17592] usb 10-1: config 0 descriptor??
[ 1434.482678][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6346'.
[ 1434.556012][T17592] usb 10-1: USB disconnect, device number 46
[ 1434.817369][T26547] syz.0.6347 (26547): drop_caches: 2
[ 1436.208559][T26561] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6354'.
[ 1436.330180][T26529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1437.181713][T26596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6366'.
[ 1437.294727][T13895] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1437.505663][T13895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1437.536130][T13895] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1437.584880][T13895] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1437.603139][T13895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1437.620635][T13895] usb 2-1: Product: syz
[ 1437.629564][T13895] usb 2-1: Manufacturer: syz
[ 1437.638819][T13895] usb 2-1: SerialNumber: syz
[ 1437.676255][T13895] usb 2-1: config 0 descriptor??
[ 1438.862531][T14990] usb 2-1: USB disconnect, device number 72
[ 1438.926200][T26616] syz.9.6368 (26616): drop_caches: 2
[ 1441.042485][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'.
[ 1441.502005][T26608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1442.164541][   T22] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1442.309377][T26671] device syzkaller0 entered promiscuous mode
[ 1442.350827][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6387'.
[ 1442.386421][   T22] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.405907][   T22] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1442.432187][   T22] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1442.442208][   T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1442.451799][   T22] usb 10-1: Product: syz
[ 1442.456978][   T22] usb 10-1: Manufacturer: syz
[ 1442.461776][   T22] usb 10-1: SerialNumber: syz
[ 1442.476295][   T22] usb 10-1: config 0 descriptor??
[ 1443.117161][T14990] usb 10-1: USB disconnect, device number 47
[ 1443.203081][T26698] syz.0.6392 (26698): drop_caches: 2
[ 1448.183317][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'.
[ 1448.612723][T26737] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6402'.
[ 1448.615770][T26739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1448.643575][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6402'.
[ 1448.771590][T26739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1449.166955][T26763] syz.0.6409 (26763): drop_caches: 2
[ 1450.941978][T26778] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6414'.
[ 1451.371976][T26793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1451.381450][T26793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1451.728196][T26746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1452.249631][T26820] device syzkaller0 entered promiscuous mode
[ 1452.852926][T26841] syz.1.6433 (26841): drop_caches: 2
[ 1454.891090][T26872] device syzkaller0 entered promiscuous mode
[ 1455.407200][T26887] syz.0.6451 (26887): drop_caches: 2
[ 1455.414535][T14990] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1455.604623][T14990] usb 10-1: Using ep0 maxpacket: 8
[ 1455.650191][T14990] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1455.667458][T14990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1455.696762][T14990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1455.715106][T14990] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1455.728638][T14990] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1455.738170][T14990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.958121][T14990] usb 10-1: GET_CAPABILITIES returned 0
[ 1455.964551][T14990] usbtmc 10-1:16.0: can't read capabilities
[ 1456.167033][T14990] usb 10-1: USB disconnect, device number 48
[ 1456.532690][T26845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1457.038885][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6460'.
[ 1457.109270][T26914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1457.459320][T26914] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1457.743446][T26920] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1458.974457][T19143] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1459.184806][T19143] usb 10-1: Using ep0 maxpacket: 8
[ 1459.192198][T19143] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1459.212586][T19143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1459.233279][T19143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1459.253835][T19143] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1459.276467][T19143] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1459.297103][T19143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.642474][T19143] usb 10-1: GET_CAPABILITIES returned 0
[ 1459.673987][T19143] usbtmc 10-1:16.0: can't read capabilities
[ 1460.220144][T14990] usb 10-1: USB disconnect, device number 49
[ 1460.719427][T26993] syz.0.6484 (26993): drop_caches: 2
[ 1461.133228][T26929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1461.348710][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6489'.
[ 1461.807579][T27019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6495'.
[ 1462.280966][T27039] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1462.837206][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6506'.
[ 1463.077699][T27060] device syzkaller0 entered promiscuous mode
[ 1465.391035][T27041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1467.165168][T27068] device syzkaller0 entered promiscuous mode
[ 1467.234711][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6511'.
[ 1467.421739][T27093] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6517'.
[ 1467.558069][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6519'.
[ 1467.603666][T27097] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1467.631480][T27097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1467.638857][T27097] IPv6: NLM_F_CREATE should be set when creating new route
[ 1467.908506][T27112] syz.9.6520 (27112): drop_caches: 2
[ 1467.993702][T27114] device syzkaller0 entered promiscuous mode
[ 1470.748605][T27103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1472.440776][T27129] device syzkaller0 entered promiscuous mode
[ 1476.527133][T27141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6530'.
[ 1476.840103][T27168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6537'.
[ 1477.506369][T27186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6543'.
[ 1477.764706][T18157] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1477.841788][T27197] device syzkaller0 entered promiscuous mode
[ 1477.891918][T27200] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6546'.
[ 1477.959084][T18157] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1477.979711][T18157] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1478.032108][T18157] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1478.051409][T18157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1478.060536][T18157] usb 2-1: Product: syz
[ 1478.081345][T18157] usb 2-1: Manufacturer: syz
[ 1478.087453][T18157] usb 2-1: SerialNumber: syz
[ 1478.113401][T18157] usb 2-1: config 0 descriptor??
[ 1478.291297][T27215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6551'.
[ 1478.401496][T27188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'.
[ 1478.478613][T27219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6552'.
[ 1478.693603][T18157] usb 2-1: USB disconnect, device number 73
[ 1478.781898][T27229] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6555'.
[ 1478.833630][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6555'.
[ 1478.883059][T27232] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6556'.
[ 1480.318183][T27283] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1480.327790][T27283] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1480.336624][T27283] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1480.345434][T27283] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1480.734907][T13894] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1480.949973][T13894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1480.991852][T13894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1481.029370][T13894] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1481.069787][T13894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1481.100436][T13894] usb 2-1: Product: syz
[ 1481.114581][T13894] usb 2-1: Manufacturer: syz
[ 1481.150277][T13894] usb 2-1: SerialNumber: syz
[ 1481.160793][T13894] usb 2-1: config 0 descriptor??
[ 1481.207470][T27312] netlink: 'syz.8.6581': attribute type 1 has an invalid length.
[ 1481.274299][T27312] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1481.325165][T27314] bond1: (slave ip6erspan0): making interface the new active one
[ 1481.349341][T27314] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1481.418606][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1481.597139][T27323] __nla_validate_parse: 7 callbacks suppressed
[ 1481.597158][T27323] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6583'.
[ 1481.743515][T27326] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6584'.
[ 1481.757034][T27326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6584'.
[ 1481.782341][ T1176] usb 2-1: USB disconnect, device number 74
[ 1481.899290][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6586'.
[ 1482.693791][T27359] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6595'.
[ 1482.873195][T27368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1482.890887][T27368] device syzkaller0 entered promiscuous mode
[ 1482.989558][T27368] tipc: Resetting bearer <eth:syzkaller0>
[ 1483.012390][T27367] tipc: Resetting bearer <eth:syzkaller0>
[ 1483.090137][T27372] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6600'.
[ 1483.102649][T27367] tipc: Disabling bearer <eth:syzkaller0>
[ 1483.137638][T27371] mac80211_hwsim hwsim26 ªªªªª;: renamed from wlan0
[ 1483.504952][T27383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1483.542335][T27381] tipc: Disabling bearer <eth:syzkaller0>
[ 1483.854866][T14990] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1483.917974][T27396] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1484.066218][T14990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.093624][T14990] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1484.131727][T14990] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1484.153670][T14990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1484.175548][T14990] usb 1-1: Product: syz
[ 1484.179773][T14990] usb 1-1: Manufacturer: syz
[ 1484.209139][T14990] usb 1-1: SerialNumber: syz
[ 1484.232352][T14990] usb 1-1: config 0 descriptor??
[ 1484.253260][T27406] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6610'.
[ 1484.515641][T27385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6603'.
[ 1484.729595][ T1176] usb 1-1: USB disconnect, device number 68
[ 1485.116165][T27429] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1485.164639][T13895] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1485.344594][T13895] usb 10-1: Using ep0 maxpacket: 8
[ 1485.355882][T13895] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1485.388751][T13895] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1485.419136][T13895] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1485.444548][T13895] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1485.471286][T13895] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1485.497641][T13895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.533843][T27447] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6623'.
[ 1485.757846][T13895] usb 10-1: GET_CAPABILITIES returned 0
[ 1485.767047][T13895] usbtmc 10-1:16.0: can't read capabilities
[ 1485.966718][T19143] usb 10-1: USB disconnect, device number 50
[ 1486.193257][T27463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1486.217969][T27463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1486.269965][T27463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1486.286554][T27463] device bridge_slave_0 left promiscuous mode
[ 1486.305667][T27463] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1486.341527][T27463] device bridge_slave_1 left promiscuous mode
[ 1486.360338][T27463] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1486.381120][T27463] bond0: (slave bond_slave_0): Releasing backup interface
[ 1486.451347][T27463] bond0: (slave bond_slave_1): Releasing backup interface
[ 1486.566094][T27463] team0: Port device team_slave_0 removed
[ 1486.617981][T27463] team0: Port device team_slave_1 removed
[ 1486.647655][T27463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1486.662190][T27463] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1486.675513][T27463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1486.683284][T27463] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1486.712605][T27466] team0: Mode changed to "roundrobin"
[ 1487.289819][T27487] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6635'.
[ 1487.398069][T27493] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1487.940573][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1488.057224][T27512] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1488.211940][T27520] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6646'.
[ 1490.754285][T27561] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1491.062753][T27570] bond0: (slave dummy0): Releasing backup interface
[ 1491.111216][T27570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1491.165597][T27570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1491.187491][T27570] device bridge_slave_0 left promiscuous mode
[ 1491.194351][T27570] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1491.234694][T27570] device bridge_slave_1 left promiscuous mode
[ 1491.252381][T27570] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1491.275223][T27570] bond0: (slave bond_slave_0): Releasing backup interface
[ 1491.294897][T19143] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1491.343637][T27570] bond0: (slave bond_slave_1): Releasing backup interface
[ 1491.514537][T19143] usb 10-1: Using ep0 maxpacket: 8
[ 1491.522517][T19143] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1491.542643][T27570] team0: Port device team_slave_0 removed
[ 1491.564629][T19143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1491.597265][T19143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1491.625347][T19143] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1491.654967][T19143] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1491.671840][T19143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.695763][T27570] team0: Port device team_slave_1 removed
[ 1491.705585][T27570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1491.713096][T27570] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1491.729003][T27570] bond1: (slave ip6erspan0): Releasing active interface
[ 1491.770084][T27574] team0: Mode changed to "roundrobin"
[ 1491.891190][T19143] usb 10-1: GET_CAPABILITIES returned 0
[ 1491.896983][T19143] usbtmc 10-1:16.0: can't read capabilities
[ 1492.008810][T27599] xt_nfacct: accounting object `syz0' does not exist
[ 1492.093900][T18157] usb 10-1: USB disconnect, device number 51
[ 1492.375820][T27619] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1493.384179][T27642] team0: No ports can be present during mode change
[ 1493.930008][T27659] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6687'.
[ 1494.294676][T19143] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1494.484527][T19143] usb 10-1: Using ep0 maxpacket: 8
[ 1494.501656][T19143] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1494.545740][T19143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1494.571270][T19143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1494.595834][T19143] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1494.634447][T19143] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1494.661540][T19143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.712704][T27678] team0: Unable to change to the same mode the team is in
[ 1494.886368][T19143] usb 10-1: GET_CAPABILITIES returned 0
[ 1494.892585][T19143] usbtmc 10-1:16.0: can't read capabilities
[ 1495.027234][T27688] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1495.115419][T14990] usb 10-1: USB disconnect, device number 52
[ 1495.134717][T18577] Bluetooth: hci5: command 0x0406 tx timeout
[ 1495.252536][T27694] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6701'.
[ 1495.864877][T27716] team0: Unable to change to the same mode the team is in
[ 1495.910344][T27718] device syzkaller0 entered promiscuous mode
[ 1496.071107][T27722] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1496.187384][T27727] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6714'.
[ 1496.964619][T14990] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1497.164461][T14990] usb 2-1: Using ep0 maxpacket: 8
[ 1497.171107][T14990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1497.218381][T14990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1497.242895][T14990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1497.284815][T14990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1497.319650][T14990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1497.339812][T14990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.380337][T27755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1497.417231][T27755] bond0: (slave bond_slave_0): Releasing backup interface
[ 1497.438432][T27755] bond0: (slave bond_slave_1): Releasing backup interface
[ 1497.456505][T27755] team0: Port device team_slave_0 removed
[ 1497.463849][T27755] team0: Port device team_slave_1 removed
[ 1497.470252][T27755] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1497.479162][T27755] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1497.489143][T27755] device veth3 left promiscuous mode
[ 1497.495116][T27755] bridge0: port 1(veth3) entered disabled state
[ 1497.507975][T27758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1497.534294][T27760] team0: Mode changed to "roundrobin"
[ 1497.572599][T14990] usb 2-1: GET_CAPABILITIES returned 0
[ 1497.578741][T14990] usbtmc 2-1:16.0: can't read capabilities
[ 1497.721522][T27769] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6727'.
[ 1497.782448][ T1176] usb 2-1: USB disconnect, device number 75
[ 1497.814945][T27762] device syzkaller0 entered promiscuous mode
[ 1502.653815][T27822] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1502.709870][T27822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1502.717230][T27822] IPv6: NLM_F_CREATE should be set when creating new route
[ 1502.724589][T27822] IPv6: NLM_F_CREATE should be set when creating new route
[ 1502.880815][T27832] netlink: 200 bytes leftover after parsing attributes in process `syz.9.6740'.
[ 1503.474478][T13895] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1503.676711][T13895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1503.702181][T13895] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1503.766339][T13895] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1503.785375][T13895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1503.795211][T13895] usb 9-1: Product: syz
[ 1503.799409][T13895] usb 9-1: Manufacturer: syz
[ 1503.804021][T13895] usb 9-1: SerialNumber: syz
[ 1503.819884][T13895] usb 9-1: config 0 descriptor??
[ 1504.514205][T27873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1504.540370][T27844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6746'.
[ 1504.551638][T27866] device syzkaller0 entered promiscuous mode
[ 1504.561668][ T1176] usb 9-1: USB disconnect, device number 40
[ 1504.595355][T27860] tipc: Resetting bearer <eth:syzkaller0>
[ 1504.747030][T27860] tipc: Disabling bearer <eth:syzkaller0>
[ 1505.229692][T27892] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1505.274542][T27892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1505.281848][T27892] IPv6: NLM_F_CREATE should be set when creating new route
[ 1505.289231][T27892] IPv6: NLM_F_CREATE should be set when creating new route
[ 1505.309221][T27893] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6759'.
[ 1505.398710][T27881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6754'.
[ 1505.896042][T27914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1505.906436][T27914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1505.916698][T27914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1505.927658][T27914] device bridge_slave_0 left promiscuous mode
[ 1505.933951][T27914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1505.961519][T27914] device bridge_slave_1 left promiscuous mode
[ 1505.971476][T27914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1506.001416][T27914] bond0: (slave bond_slave_0): Releasing backup interface
[ 1506.064336][T27914] bond0: (slave bond_slave_1): Releasing backup interface
[ 1506.256160][T27914] team0: Port device team_slave_0 removed
[ 1506.324806][T18157] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1506.362106][T27914] team0: Port device team_slave_1 removed
[ 1506.383987][T27914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1506.403530][T27914] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1506.423194][T27914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1506.431527][T27914] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1506.488088][T27914] device veth3 left promiscuous mode
[ 1506.493673][T27914] bridge1: port 1(veth3) entered disabled state
[ 1506.539898][T18157] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1506.552385][T18157] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1506.611113][T18157] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1506.628498][T18157] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1506.637378][T27920] device syzkaller0 entered promiscuous mode
[ 1506.660245][T18157] usb 10-1: Product: syz
[ 1506.677163][T18157] usb 10-1: Manufacturer: syz
[ 1506.697465][T18157] usb 10-1: SerialNumber: syz
[ 1506.716369][T18157] usb 10-1: config 0 descriptor??
[ 1506.903438][T27938] device gretap0 entered promiscuous mode
[ 1506.939741][T27938] device vlan3 entered promiscuous mode
[ 1506.943040][T27943] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6774'.
[ 1507.134713][T27927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6769'.
[ 1507.415211][T18157] usb 10-1: USB disconnect, device number 53
[ 1508.099568][T27958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6777'.
[ 1508.356871][T27983] device syzkaller0 entered promiscuous mode
[ 1508.378223][T27980] device syzkaller0 entered promiscuous mode
[ 1508.577229][T27984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1508.593257][T27979] tipc: Resetting bearer <eth:syzkaller0>
[ 1508.650067][T27979] tipc: Disabling bearer <eth:syzkaller0>
[ 1508.683240][T27993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1508.748868][T27990] device syzkaller0 entered promiscuous mode
[ 1508.978771][T27993] tipc: Resetting bearer <eth:syzkaller0>
[ 1508.992342][T27989] tipc: Resetting bearer <eth:syzkaller0>
[ 1509.105865][T28012] fuse: Bad value for 'fd'
[ 1509.721750][T27989] tipc: Disabling bearer <eth:syzkaller0>
[ 1511.119303][T28035] device syzkaller0 entered promiscuous mode
[ 1511.178354][T28045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1511.209348][T28045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1515.996183][T28061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6804'.
[ 1517.461390][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6819'.
[ 1517.702106][T28131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1517.825504][T28155] device syzkaller0 entered promiscuous mode
[ 1519.049088][T28210] device syzkaller0 entered promiscuous mode
[ 1519.345955][T28216] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6838'.
[ 1519.725025][ T1176] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1519.880838][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6847'.
[ 1519.907791][T28240] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1519.922173][ T1176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.933145][ T1176] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1519.956493][ T1176] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1519.967003][ T1176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1519.975795][ T1176] usb 3-1: Product: syz
[ 1519.980347][ T1176] usb 3-1: Manufacturer: syz
[ 1519.985377][ T1176] usb 3-1: SerialNumber: syz
[ 1520.019456][ T1176] usb 3-1: config 0 descriptor??
[ 1520.068691][T28244] device syzkaller0 entered promiscuous mode
[ 1520.818896][T28227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6840'.
[ 1521.814574][T14990] usb 3-1: USB disconnect, device number 67
[ 1522.030867][T28281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6862'.
[ 1522.088673][T19143] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1522.140105][T28285] device syzkaller0 entered promiscuous mode
[ 1522.334617][T19143] usb 9-1: Using ep0 maxpacket: 8
[ 1522.341569][T19143] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1522.366745][T19143] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1522.425431][T19143] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1522.462338][T19143] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1522.482406][T19143] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1522.494924][T19143] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.726350][T19143] usb 9-1: GET_CAPABILITIES returned 0
[ 1522.731933][T19143] usbtmc 9-1:16.0: can't read capabilities
[ 1522.929009][T19143] usb 9-1: USB disconnect, device number 41
[ 1523.444863][T26674] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1523.676759][T26674] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.697346][T26674] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1523.722860][T26674] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1523.746053][T26674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1523.772848][T26674] usb 2-1: Product: syz
[ 1523.789248][T26674] usb 2-1: Manufacturer: syz
[ 1523.802978][T26674] usb 2-1: SerialNumber: syz
[ 1523.832330][T26674] usb 2-1: config 0 descriptor??
[ 1524.169103][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6879'.
[ 1524.447208][T14990] usb 2-1: USB disconnect, device number 76
[ 1524.602984][T26674] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1524.794609][T26674] usb 9-1: Using ep0 maxpacket: 8
[ 1524.802173][T26674] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1524.822706][T26674] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1524.853638][T26674] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1524.870946][T26674] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1524.907122][T26674] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1524.924021][T26674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.183489][T26674] usb 9-1: GET_CAPABILITIES returned 0
[ 1525.189236][T26674] usbtmc 9-1:16.0: can't read capabilities
[ 1525.387351][T13895] usb 9-1: USB disconnect, device number 42
[ 1525.703271][T28442] device syzkaller0 entered promiscuous mode
[ 1525.870350][T28447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1525.889166][T28445] tipc: Disabling bearer <eth:syzkaller0>
[ 1525.974630][T13895] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1526.149223][T28453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6924'.
[ 1526.200004][T13895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.224639][T13895] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1526.246270][T13895] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1526.262758][T13895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1526.271502][T13895] usb 2-1: Product: syz
[ 1526.294610][T13895] usb 2-1: Manufacturer: syz
[ 1526.308862][T13895] usb 2-1: SerialNumber: syz
[ 1526.330377][T13895] usb 2-1: config 0 descriptor??
[ 1526.622528][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6919'.
[ 1526.687294][T28471] device syzkaller0 entered promiscuous mode
[ 1526.909354][T19143] usb 2-1: USB disconnect, device number 77
[ 1526.986691][T28480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1527.002359][T28479] tipc: Disabling bearer <eth:syzkaller0>
[ 1527.105393][T17592] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1527.300023][T17592] usb 9-1: Using ep0 maxpacket: 8
[ 1527.307262][T17592] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1527.343249][T17592] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1527.364600][T17592] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1527.394551][T17592] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1527.434580][T17592] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1527.443681][T17592] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.695387][T17592] usb 9-1: GET_CAPABILITIES returned 0
[ 1527.706806][T17592] usbtmc 9-1:16.0: can't read capabilities
[ 1527.905031][T19143] usb 9-1: USB disconnect, device number 43
[ 1528.495988][T17592] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1528.686235][T17592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1528.704205][T17592] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1528.735226][T17592] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[ 1528.751514][T17592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1528.776089][T17592] usb 1-1: Product: syz
[ 1528.780345][T17592] usb 1-1: Manufacturer: syz
[ 1528.795863][T17592] usb 1-1: SerialNumber: syz
[ 1528.822659][T17592] usb 1-1: config 0 descriptor??
[ 1529.109870][T28509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6948'.
[ 1529.326107][T28531] device syzkaller0 entered promiscuous mode
[ 1529.364933][T18157] usb 1-1: USB disconnect, device number 69
[ 1529.968132][T28542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6961'.
[ 1530.015276][T28542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6961'.
[ 1530.046529][T28542] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6961'.
[ 1530.272315][T28557] device syzkaller0 entered promiscuous mode
[ 1530.530013][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6973'.
[ 1530.561596][T28568] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6973'.
[ 1530.645753][T28568] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1530.654640][T28568] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1530.663667][T28568] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1530.672723][T28568] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1531.414833][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6973'.
[ 1531.448645][T28568] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6973'.
[ 1531.859074][T28582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6977'.
[ 1531.923970][T28582] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6977'.
[ 1532.331447][T28596] device syzkaller0 entered promiscuous mode
[ 1536.563973][T28641] device syzkaller0 entered promiscuous mode
[ 1536.753637][T28644] __nla_validate_parse: 4 callbacks suppressed
[ 1536.753656][T28644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7001'.
[ 1537.125192][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7007'.
[ 1537.172342][T28659] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7007'.
[ 1537.192646][T28654] device syzkaller0 entered promiscuous mode
[ 1537.238241][T28665] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7008'.
[ 1544.366481][T28706] device syzkaller0 entered promiscuous mode
[ 1544.461962][T28710] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7019'.
[ 1544.587107][T28713] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7020'.
[ 1545.773078][T28693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1548.510802][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7021'.
[ 1548.522922][T28715] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.532062][T28715] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.540877][T28715] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.549729][T28715] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.560822][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7021'.
[ 1548.983824][T28750] team0: Unable to change to the same mode the team is in
[ 1550.760767][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.454573][T13894] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1551.684602][T13894] usb 3-1: Using ep0 maxpacket: 8
[ 1551.692524][T13894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1551.843571][T13894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1552.041374][T13894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1552.454663][T13894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1552.536140][T13894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1552.613662][T13894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.664582][T13894] usb 3-1: can't set config #16, error -71
[ 1552.698091][T13894] usb 3-1: USB disconnect, device number 68
[ 1552.948008][T28772] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7036'.
[ 1553.158197][T28774] device syzkaller0 entered promiscuous mode
[ 1558.802237][T28803] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1558.814941][T28822] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7050'.
[ 1559.033117][T28831] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7053'.
[ 1559.197424][T28839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1559.230624][T28839] device syzkaller0 entered promiscuous mode
[ 1559.275165][T28839] tipc: Resetting bearer <eth:syzkaller0>
[ 1559.303872][T28837] tipc: Resetting bearer <eth:syzkaller0>
[ 1559.407442][T28837] tipc: Disabling bearer <eth:syzkaller0>
[ 1560.260909][T28862] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1560.503896][T28866] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7065'.
[ 1561.054167][T13895] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1562.265370][T28865] device syzkaller0 entered promiscuous mode
[ 1562.454654][T13895] usb 2-1: Using ep0 maxpacket: 8
[ 1562.466328][T13895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1562.531686][T13895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1562.573752][T13895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1562.602760][T13895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1562.692704][T13895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1562.714570][T13895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.992225][T13895] usb 2-1: GET_CAPABILITIES returned 0
[ 1562.999960][T13895] usbtmc 2-1:16.0: can't read capabilities
[ 1563.200416][T18157] usb 2-1: USB disconnect, device number 78
[ 1563.500552][T28885] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7072'.
[ 1563.517742][T18577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1563.532534][T18577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1563.542107][T18577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1563.552704][T18577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1563.580319][T18577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1563.597358][T18577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1565.629936][T18577] Bluetooth: hci0: command 0x0409 tx timeout
[ 1567.697391][T18577] Bluetooth: hci0: command 0x041b tx timeout
[ 1568.407656][ T7400] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1568.455242][ T7400] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1569.064633][T28932] fuse: Bad value for 'group_id'
[ 1569.894866][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[ 1571.934507][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[ 1572.905465][ T7400] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1572.934901][T13894] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1572.962852][ T7400] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.102561][T28939] device syzkaller0 entered promiscuous mode
[ 1573.148327][T13894] usb 3-1: Using ep0 maxpacket: 8
[ 1573.177822][T13894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1573.191285][T13894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1573.222081][T13894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1573.252863][T13894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1573.294331][T13894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1573.334478][T13894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.380910][ T7400] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1573.414273][ T7400] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.605680][T13894] usb 3-1: GET_CAPABILITIES returned 0
[ 1573.611200][T13894] usbtmc 3-1:16.0: can't read capabilities
[ 1573.684508][T13894] usb 3-1: USB disconnect, device number 69
[ 1574.230762][T28974] netlink: 200 bytes leftover after parsing attributes in process `syz.9.7087'.
[ 1578.088004][ T7400] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1578.098687][ T7400] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.146533][T28984] device syzkaller0 entered promiscuous mode
[ 1583.094817][T29001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1583.104299][T29001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1583.118898][T29001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1583.130256][T29001] device bridge_slave_0 left promiscuous mode
[ 1583.143430][T29001] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1583.154219][T29001] device bridge_slave_1 left promiscuous mode
[ 1583.165771][T29001] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1583.188164][T29001] bond0: (slave bond_slave_0): Releasing backup interface
[ 1583.201111][T29001] device bond_slave_0 left promiscuous mode
[ 1583.331884][T29001] bond0: (slave bond_slave_1): Releasing backup interface
[ 1583.478245][T29001] device bond_slave_1 left promiscuous mode
[ 1583.604876][T26674] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1583.815126][T26674] usb 1-1: Using ep0 maxpacket: 8
[ 1583.829026][T26674] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1583.874893][T26674] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1583.900769][T29001] team0: Port device team_slave_0 removed
[ 1583.932268][T26674] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1583.987662][T26674] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1584.047799][T26674] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1584.083353][T26674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1584.285077][T29001] team0: Port device team_slave_1 removed
[ 1584.388282][T29001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1584.440346][T26674] usb 1-1: GET_CAPABILITIES returned 0
[ 1584.451673][T26674] usbtmc 1-1:16.0: can't read capabilities
[ 1584.491661][T29001] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1584.635794][T29001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1584.691943][T29001] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1584.971394][T29005] team0: Mode changed to "roundrobin"
[ 1586.364756][T13895] usb 1-1: USB disconnect, device number 70
[ 1586.590161][T29040] device syzkaller0 entered promiscuous mode
[ 1586.656889][T28884] chnl_net:caif_netlink_parms(): no params data found
[ 1586.720932][ T7400] tipc: Disabling bearer <udp:syz2>
[ 1586.740921][ T7400] tipc: Left network mode
[ 1586.848576][T29057] device syzkaller0 entered promiscuous mode
[ 1591.106808][T29062] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1596.302013][T29088] device syzkaller0 entered promiscuous mode
[ 1597.974641][T29029] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1598.194827][T29029] usb 2-1: Using ep0 maxpacket: 8
[ 1598.208976][T29029] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1598.264557][T29029] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1598.297509][T29029] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1598.323257][T29029] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1598.337138][T29029] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1598.346621][T29029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.578043][T29029] usb 2-1: GET_CAPABILITIES returned 0
[ 1598.583555][T29029] usbtmc 2-1:16.0: can't read capabilities
[ 1598.792810][T29029] usb 2-1: USB disconnect, device number 79
[ 1602.499098][T29124] device syzkaller0 entered promiscuous mode
[ 1602.528914][T28884] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1602.562293][T28884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1602.573365][T28884] device bridge_slave_0 entered promiscuous mode
[ 1602.671471][T29139] fuse: Bad value for 'fd'
[ 1607.488259][T28884] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1607.497314][T28884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1607.506070][T28884] device bridge_slave_1 entered promiscuous mode
[ 1607.514047][T29141] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1607.579751][T29136] device syzkaller0 entered promiscuous mode
[ 1610.234568][T17592] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1610.419830][T17592] usb 10-1: Using ep0 maxpacket: 8
[ 1610.458800][T17592] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1610.468976][T17592] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1610.480161][T17592] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1610.499152][T17592] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1610.520036][T17592] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1610.529422][T17592] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.780015][T17592] usb 10-1: GET_CAPABILITIES returned 0
[ 1610.786075][T17592] usbtmc 10-1:16.0: can't read capabilities
[ 1610.831575][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1610.990220][T17592] usb 10-1: USB disconnect, device number 54
[ 1613.644152][T28884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1613.685943][T28884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1613.919068][T29204] device syzkaller0 entered promiscuous mode
[ 1614.162772][T28884] team0: Port device team_slave_0 added
[ 1618.477183][T28884] team0: Port device team_slave_1 added
[ 1618.772469][T28884] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1618.795430][T28884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1618.861454][T28884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1618.909461][T28884] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1618.925388][T28884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1618.974512][T28884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1619.167456][T29251] device syzkaller0 entered promiscuous mode
[ 1619.191289][T29247] device syzkaller0 entered promiscuous mode
[ 1619.522571][T28884] device hsr_slave_0 entered promiscuous mode
[ 1619.565347][T28884] device hsr_slave_1 entered promiscuous mode
[ 1619.585867][T28884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1619.610276][T28884] Cannot create hsr debugfs directory
[ 1623.268427][T18577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1623.299232][T18577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1623.308828][T18577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1623.316850][T18577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1623.324944][T18577] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1623.342405][T18577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1624.299372][ T7400] device hsr_slave_0 left promiscuous mode
[ 1624.305904][ T7400] device hsr_slave_1 left promiscuous mode
[ 1624.331806][ T7400] device veth1_macvtap left promiscuous mode
[ 1624.339104][ T7400] device veth0_macvtap left promiscuous mode
[ 1624.346048][ T7400] device veth1_vlan left promiscuous mode
[ 1624.351928][ T7400] device veth0_vlan left promiscuous mode
[ 1624.745111][ T7400] bond1 (unregistering): Released all slaves
[ 1625.456182][T18577] Bluetooth: hci1: command 0x0409 tx timeout
[ 1626.385258][ T7400] bond0 (unregistering): Released all slaves
[ 1626.552819][T29268] device syzkaller0 entered promiscuous mode
[ 1627.170459][T29317] device syzkaller0 entered promiscuous mode
[ 1627.278859][T29332] device syzkaller0 entered promiscuous mode
[ 1627.535532][T18577] Bluetooth: hci1: command 0x041b tx timeout
[ 1629.625367][T18577] Bluetooth: hci1: command 0x040f tx timeout
[ 1631.253807][T29305] chnl_net:caif_netlink_parms(): no params data found
[ 1631.336894][T29346] device syzkaller0 entered promiscuous mode
[ 1631.476259][T29352] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1631.484143][T29352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1631.491434][T29352] IPv6: NLM_F_CREATE should be set when creating new route
[ 1631.498739][T29352] IPv6: NLM_F_CREATE should be set when creating new route
[ 1631.694900][T18577] Bluetooth: hci1: command 0x0419 tx timeout
[ 1631.745305][T29305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1631.801042][T29305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.866310][T29305] device bridge_slave_0 entered promiscuous mode
[ 1631.918225][T29305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1631.956939][T29305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.973010][T29305] device bridge_slave_1 entered promiscuous mode
[ 1632.263995][T29373] device syzkaller0 entered promiscuous mode
[ 1636.564055][T29305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1636.641106][T29390] device syzkaller0 entered promiscuous mode
[ 1640.255135][T29305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1640.372183][T29305] team0: Port device team_slave_0 added
[ 1640.436283][T29305] team0: Port device team_slave_1 added
[ 1640.521146][T29305] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1640.532441][T29305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1640.564956][T29305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1640.620629][T29440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1640.628893][T29305] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1640.637243][T29305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1640.669021][T29305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1640.844566][T29305] device hsr_slave_0 entered promiscuous mode
[ 1640.867452][T29305] device hsr_slave_1 entered promiscuous mode
[ 1640.889086][T29305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1640.925137][T29305] Cannot create hsr debugfs directory
[ 1640.934774][ T7400] device hsr_slave_0 left promiscuous mode
[ 1640.944856][ T7400] device hsr_slave_1 left promiscuous mode
[ 1640.966694][T29451] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7164'.
[ 1641.014344][ T7400] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1641.054219][ T7400] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1641.113661][ T7400] device bridge_slave_1 left promiscuous mode
[ 1641.150580][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1641.231400][ T7400] device bridge_slave_0 left promiscuous mode
[ 1641.252434][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1642.006312][ T7400] team0 (unregistering): Port device team_slave_1 removed
[ 1642.092381][ T7400] team0 (unregistering): Port device team_slave_0 removed
[ 1642.162292][ T7400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1642.453138][ T7400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1642.699264][ T7400] bond0 (unregistering): Released all slaves
[ 1643.747628][T29492] device syzkaller0 entered promiscuous mode
[ 1644.138771][T29524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1644.589555][T29537] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7179'.
[ 1644.857086][T29537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1647.318805][T29580] device syzkaller0 entered promiscuous mode
[ 1647.343789][T29305] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1647.368356][T29305] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1651.410570][T29305] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1651.473244][T29305] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1651.781709][T29305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1651.840469][T29628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7193'.
[ 1652.204917][T29633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1652.225961][T29633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1652.241762][T29633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1652.320437][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1652.341009][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1652.534615][T29305] 8021q: adding VLAN 0 to HW filter on device team0
[ 1652.570785][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1652.602549][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1652.638827][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.646017][ T7400] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1652.679831][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1652.720666][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1652.748772][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1652.756086][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1652.785253][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1652.809612][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1652.868130][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1652.885883][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1652.919954][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1653.024514][T29656] device syzkaller0 entered promiscuous mode
[ 1653.054187][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1653.067725][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1653.087426][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1653.110787][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1653.135607][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1657.978031][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1657.986863][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1658.032484][T29305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1658.168043][T29699] fuse: Bad value for 'group_id'
[ 1658.491812][T29712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7208'.
[ 1658.612744][T29712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1658.665968][T29712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1658.701837][T29712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1658.893877][T29305] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1658.934693][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1658.949826][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1659.098800][T29727] device syzkaller0 entered promiscuous mode
[ 1659.144601][ T6640] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1659.334629][ T6640] usb 2-1: Using ep0 maxpacket: 8
[ 1659.344220][ T6640] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1659.388613][ T6640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1659.420394][ T6640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1659.448210][ T6640] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1659.472998][ T6640] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1659.509816][ T6640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.742368][ T6640] usb 2-1: GET_CAPABILITIES returned 0
[ 1659.748886][ T6640] usbtmc 2-1:16.0: can't read capabilities
[ 1659.947781][T29034] usb 2-1: USB disconnect, device number 80
[ 1663.630662][T29737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1663.640726][T29744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7215'.
[ 1663.652016][T29745] device syzkaller0 entered promiscuous mode
[ 1663.693864][T29750] tipc: Resetting bearer <eth:syzkaller0>
[ 1663.738192][T29735] tipc: Resetting bearer <eth:syzkaller0>
[ 1663.805572][T29735] tipc: Disabling bearer <eth:syzkaller0>
[ 1663.827557][T29790] fuse: Bad value for 'group_id'
[ 1664.073051][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1664.124458][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1664.191634][T29305] device veth0_vlan entered promiscuous mode
[ 1664.222455][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1664.263534][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1664.320929][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1664.362165][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1664.411806][T29305] device veth1_vlan entered promiscuous mode
[ 1664.433987][T29814] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7224'.
[ 1664.467443][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1664.477892][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1664.491717][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1664.502409][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1664.520120][T29305] device veth0_macvtap entered promiscuous mode
[ 1664.552080][T29814] netlink: 'syz.9.7224': attribute type 5 has an invalid length.
[ 1664.560358][ T4271] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1664.580331][T29305] device veth1_macvtap entered promiscuous mode
[ 1664.636445][T29814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1664.687616][T29305] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1664.711510][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1664.732559][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1664.744657][ T4271] usb 2-1: Using ep0 maxpacket: 8
[ 1664.751836][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1664.752717][ T4271] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1664.764288][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1664.802216][ T4271] usb 2-1: config 121 has an invalid interface number: 163 but max is 0
[ 1664.837802][ T4271] usb 2-1: config 121 has no interface number 0
[ 1664.892624][ T4271] usb 2-1: config 121 interface 163 has no altsetting 0
[ 1664.930548][ T4271] usb 2-1: New USB device found, idVendor=17ef, idProduct=3098, bcdDevice=9d.54
[ 1664.949685][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.964486][ T4271] usb 2-1: Product: syz
[ 1664.980069][ T4271] usb 2-1: Manufacturer: syz
[ 1664.989622][ T4271] usb 2-1: SerialNumber: syz
[ 1665.029614][T29832] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7226'.
[ 1665.091512][T29305] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1665.155873][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1665.195684][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1665.218212][ T4271] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1665.295093][ T4271] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1665.310535][T29305] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.349062][ T4271] r8152-cfgselector 2-1: USB disconnect, device number 81
[ 1665.379703][T29305] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.426951][T29305] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.449826][T29305] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.840782][T15651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1665.872762][T15651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1665.896232][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1666.104284][T29844] device syzkaller0 entered promiscuous mode
[ 1671.132503][ T4901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1671.161022][ T4901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1671.199953][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1671.380612][T29896] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7234'.
[ 1671.511830][T29904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7237'.
[ 1671.574585][T29904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7237'.
[ 1671.610914][T29904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7237'.
[ 1671.651160][T29904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7237'.
[ 1672.257086][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1672.695568][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1672.712360][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1672.722903][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1672.733907][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1672.748224][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1672.760219][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1672.843784][T29934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7245'.
[ 1673.589684][T15651] tipc: Disabling bearer <udp:syz2>
[ 1673.598263][T15651] tipc: Left network mode
[ 1673.623780][T29933] chnl_net:caif_netlink_parms(): no params data found
[ 1674.323555][T29963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7249'.
[ 1674.378349][T29965] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7250'.
[ 1674.413043][T29963] netlink: 'syz.2.7249': attribute type 5 has an invalid length.
[ 1674.487193][T29968] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1674.511289][T29933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1674.534283][T29933] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1674.560224][T29933] device bridge_slave_0 entered promiscuous mode
[ 1674.673558][T29963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1674.690854][T29963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1674.699899][T29963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1674.814955][T18577] Bluetooth: hci0: command 0x0409 tx timeout
[ 1674.827338][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7253'.
[ 1674.854555][T29978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7253'.
[ 1674.865738][T29933] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1674.874615][T29933] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1674.875734][T29933] device bridge_slave_1 entered promiscuous mode
[ 1674.987329][T29933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1675.021901][T29933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1675.222349][T29933] team0: Port device team_slave_0 added
[ 1675.331588][T29933] team0: Port device team_slave_1 added
[ 1675.534809][T29933] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1675.534828][T29933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1675.534849][T29933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1675.539194][T29933] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1675.539211][T29933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1675.539234][T29933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1675.564895][T30003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1675.565722][T30003] device syzkaller0 entered promiscuous mode
[ 1675.965701][T30011] tipc: Resetting bearer <eth:syzkaller0>
[ 1676.018774][T29933] device hsr_slave_0 entered promiscuous mode
[ 1676.042948][T29933] device hsr_slave_1 entered promiscuous mode
[ 1676.064554][T29933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1676.064685][T29933] Cannot create hsr debugfs directory
[ 1676.282108][T30001] tipc: Resetting bearer <eth:syzkaller0>
[ 1676.359481][T30001] tipc: Disabling bearer <eth:syzkaller0>
[ 1676.894997][T18577] Bluetooth: hci0: command 0x041b tx timeout
[ 1678.063220][T15651] bond1 (unregistering): Released all slaves
[ 1678.975993][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[ 1679.651493][T15651] bond0 (unregistering): Released all slaves
[ 1679.731285][T30041] __nla_validate_parse: 2 callbacks suppressed
[ 1679.731321][T30041] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7262'.
[ 1679.822315][T30048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7264'.
[ 1680.297948][T30069] device syzkaller0 entered promiscuous mode
[ 1680.357384][T30077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7270'.
[ 1680.704143][T29933] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1680.723892][T29933] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1680.777185][T30091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7275'.
[ 1680.809485][T29933] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1680.837197][T29933] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1680.920105][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7276'.
[ 1680.994767][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7276'.
[ 1681.024997][T30101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7277'.
[ 1681.043297][T30100] device syzkaller0 entered promiscuous mode
[ 1681.054732][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[ 1681.061951][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7276'.
[ 1681.071890][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7276'.
[ 1681.083197][T30101] team0: Unable to change to the same mode the team is in
[ 1681.315990][T30109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7280'.
[ 1681.467805][T30113] Bluetooth: MGMT ver 1.22
[ 1681.608668][T29933] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1681.686713][T29031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1681.699786][T29031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1681.752733][T29933] 8021q: adding VLAN 0 to HW filter on device team0
[ 1681.797853][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1681.828892][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1681.883231][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1681.890589][T15651] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1681.977881][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1682.014568][T30127] device syzkaller0 entered promiscuous mode
[ 1682.029977][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1682.050292][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1682.086286][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1682.093446][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1682.248673][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1682.293782][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1682.341626][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1682.394637][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1682.426756][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1682.442157][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1682.460294][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1682.523025][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1682.541718][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1682.592942][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1682.622721][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1682.656076][T29933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1682.844018][T30150] team0: Unable to change to the same mode the team is in
[ 1682.992425][T30154] device syzkaller0 entered promiscuous mode
[ 1683.143543][T30157] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.152538][T30157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.161544][T30157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.170278][T30157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.953632][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1683.984678][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1683.998105][T29933] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1684.118679][T30179] device syzkaller0 entered promiscuous mode
[ 1684.632943][T30191] team0: Mode changed to "roundrobin"
[ 1684.905486][T30198] device syzkaller0 entered promiscuous mode
[ 1685.121475][T30203] __nla_validate_parse: 11 callbacks suppressed
[ 1685.121487][T30203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7304'.
[ 1685.255501][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1685.271941][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1685.343155][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1685.362036][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1685.379853][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1685.411242][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1685.424253][T29933] device veth0_vlan entered promiscuous mode
[ 1685.502702][T29933] device veth1_vlan entered promiscuous mode
[ 1685.626822][T13895] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1685.653668][T13895] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1685.674464][T29031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1685.696602][T29031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1685.746713][T29933] device veth0_macvtap entered promiscuous mode
[ 1685.832523][T29933] device veth1_macvtap entered promiscuous mode
[ 1685.892143][T29933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1685.935641][T29933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1685.986205][T29933] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1686.005966][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1686.055222][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1686.069432][T30216] fido_id[30216]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1686.094788][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1686.105772][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1686.156239][T29933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1686.184538][T29933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1686.215130][T29933] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1686.233276][T30221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7310'.
[ 1686.262470][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1686.279158][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1686.329280][T29933] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1686.364575][T29933] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1686.373361][T29933] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1686.423696][T29933] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1686.650234][ T7400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1686.665279][T30226] device syzkaller0 entered promiscuous mode
[ 1686.671357][ T7400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1686.754930][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1686.818214][T29031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1686.883842][T29031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1686.921411][T29031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1687.054065][T30232] device syzkaller0 entered promiscuous mode
[ 1687.922799][T30250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7320'.
[ 1688.166324][T18577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1688.182876][T18577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1688.202896][T18577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1688.211224][T18577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1688.220068][T18577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1688.227568][T18577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1688.439090][T30262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7323'.
[ 1688.509744][T13934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1688.550284][T13934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1688.666757][T30265] netlink: 'syz.1.7323': attribute type 5 has an invalid length.
[ 1688.742593][T30261] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1688.750991][T30261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1688.758310][T30261] IPv6: NLM_F_CREATE should be set when creating new route
[ 1688.765627][T30261] IPv6: NLM_F_CREATE should be set when creating new route
[ 1688.780736][T30269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7324'.
[ 1688.790217][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7324'.
[ 1688.806463][T30269] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1688.815399][T30269] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1688.824128][T30269] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1688.833040][T30269] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1688.911910][T13934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1688.922876][T13934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1688.970113][T30269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7324'.
[ 1688.990350][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7324'.
[ 1689.098636][T13934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1689.144681][T13934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1689.244049][T30273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7326'.
[ 1689.344651][T14990] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1689.365861][T13934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1689.394602][T13934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1689.554534][T14990] usb 2-1: Using ep0 maxpacket: 8
[ 1689.561464][T14990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1689.639701][T30252] chnl_net:caif_netlink_parms(): no params data found
[ 1689.658561][T14990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1689.711041][T14990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1689.771375][T14990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1689.792545][T14990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1689.803991][T14990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.972357][T30252] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1690.009517][T30252] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1690.027909][T14990] usb 2-1: GET_CAPABILITIES returned 0
[ 1690.033585][T14990] usbtmc 2-1:16.0: can't read capabilities
[ 1690.040938][T30252] device bridge_slave_0 entered promiscuous mode
[ 1690.075814][T13934] tipc: Disabling bearer <udp:syz2>
[ 1690.081536][T13934] tipc: Left network mode
[ 1690.097145][T30252] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1690.116819][T30252] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1690.161214][T30252] device bridge_slave_1 entered promiscuous mode
[ 1690.231869][T26674] usb 2-1: USB disconnect, device number 82
[ 1690.254591][T18577] Bluetooth: hci2: command 0x0409 tx timeout
[ 1690.550588][T30252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1690.591652][T30252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1690.798065][T30252] team0: Port device team_slave_0 added
[ 1690.939051][T30306] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7332'.
[ 1690.974091][T30311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7334'.
[ 1690.992831][T30252] team0: Port device team_slave_1 added
[ 1691.192354][T30311] netlink: 'syz.1.7334': attribute type 5 has an invalid length.
[ 1691.207350][T30316] tipc: Started in network mode
[ 1691.212419][T30316] tipc: Node identity ac14140f, cluster identity 4711
[ 1691.237466][T30316] tipc: New replicast peer: 255.255.255.255
[ 1691.254758][T30316] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1691.263035][T30252] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1691.277900][T30252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1691.337394][T30252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1691.407139][T30252] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1691.414224][T30252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1691.502029][T30327] netlink: 'syz.0.7338': attribute type 1 has an invalid length.
[ 1691.510090][T30252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1691.530722][T30327] netlink: 'syz.0.7338': attribute type 2 has an invalid length.
[ 1691.616715][T30322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1691.630417][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7339'.
[ 1691.874195][T30252] device hsr_slave_0 entered promiscuous mode
[ 1691.889511][T30252] device hsr_slave_1 entered promiscuous mode
[ 1691.901812][T30252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1691.913119][T30252] Cannot create hsr debugfs directory
[ 1692.271660][ T1176] tipc: Node number set to 2886997007
[ 1692.336266][ T4283] Bluetooth: hci2: command 0x041b tx timeout
[ 1692.355011][    T7] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1692.562789][    T7] usb 10-1: Using ep0 maxpacket: 8
[ 1692.576624][    T7] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1692.607871][    T7] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1692.621844][    T7] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1692.641046][    T7] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1692.720905][    T7] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1692.761146][    T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.816904][T13934] device hsr_slave_0 left promiscuous mode
[ 1692.828081][T13934] device hsr_slave_1 left promiscuous mode
[ 1693.016131][    T7] usb 10-1: GET_CAPABILITIES returned 0
[ 1693.021970][    T7] usbtmc 10-1:16.0: can't read capabilities
[ 1693.028459][T13934] device veth1_macvtap left promiscuous mode
[ 1693.043744][T13934] device veth0_macvtap left promiscuous mode
[ 1693.059781][T13934] device veth1_vlan left promiscuous mode
[ 1693.092720][T13934] device veth0_vlan left promiscuous mode
[ 1693.219155][    T7] usb 10-1: USB disconnect, device number 55
[ 1693.950615][T30370] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7349'.
[ 1694.416521][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[ 1696.502568][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[ 1696.745878][T13934] bond0 (unregistering): Released all slaves
[ 1696.864074][T30357] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1696.872862][T30374] netlink: 'syz.9.7349': attribute type 5 has an invalid length.
[ 1696.889972][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1696.910320][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1696.919907][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1696.964485][T30387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7353'.
[ 1697.007941][T30392] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1697.046316][T30392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1697.053590][T30392] IPv6: NLM_F_CREATE should be set when creating new route
[ 1697.061006][T30392] IPv6: NLM_F_CREATE should be set when creating new route
[ 1697.278495][T30399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1697.305520][T30399] device syzkaller0 entered promiscuous mode
[ 1697.326818][T30401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7357'.
[ 1697.425335][T30401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7357'.
[ 1697.454293][T30399] tipc: Resetting bearer <eth:syzkaller0>
[ 1697.640458][T29029] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1697.657656][T30397] tipc: Resetting bearer <eth:syzkaller0>
[ 1697.726581][T30397] tipc: Disabling bearer <eth:syzkaller0>
[ 1697.728194][T30412] fuse: Unknown parameter 'grou00000000000000000000'
[ 1697.850851][T29029] usb 9-1: Using ep0 maxpacket: 8
[ 1697.876699][T29029] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1697.906422][T29029] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1697.955408][T29029] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1697.995517][T29029] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1698.044823][T29029] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1698.094642][T29029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.355358][T29029] usb 9-1: GET_CAPABILITIES returned 0
[ 1698.363080][T29029] usbtmc 9-1:16.0: can't read capabilities
[ 1698.558723][T29029] usb 9-1: USB disconnect, device number 44
[ 1698.622375][T30434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7364'.
[ 1698.696048][T30435] netlink: 'syz.0.7364': attribute type 5 has an invalid length.
[ 1698.790293][T30434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1698.838859][T30434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1698.883874][T30434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1699.028700][T30252] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1699.155720][T30252] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1699.223873][T30252] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1699.265892][T30252] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1699.394964][T30439] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7365'.
[ 1699.588327][T30252] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1699.681594][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1699.701279][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1699.728255][T30252] 8021q: adding VLAN 0 to HW filter on device team0
[ 1699.747838][T30448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1699.785520][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1699.802798][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1699.820705][T13934] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1699.827998][T13934] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1699.860978][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7368'.
[ 1699.882178][T30450] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1699.891567][T30450] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1699.900405][T30450] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1699.909182][T30450] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1699.926301][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1699.945515][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1699.980812][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1700.000426][T13934] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1700.007649][T13934] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1700.045335][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1700.066657][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1700.104431][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7368'.
[ 1700.138705][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1700.188600][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1700.239303][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1700.270421][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1700.310185][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1700.352291][T30252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1700.407790][T30252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1700.437652][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1700.453243][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1700.474226][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1700.515618][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1700.562310][T30463] tipc: Started in network mode
[ 1700.572668][T30463] tipc: Node identity 767cfc7b1fbe, cluster identity 4711
[ 1700.606132][T30463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1700.619713][T30468] fuse: Unknown parameter 'grou00000000000000000000'
[ 1700.621309][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1700.663889][T30462] tipc: Resetting bearer <eth:syzkaller0>
[ 1700.685139][T30461] device syzkaller0 entered promiscuous mode
[ 1700.698410][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 1700.734280][T30457] tipc: Resetting bearer <eth:syzkaller0>
[ 1700.840190][T30457] tipc: Disabling bearer <eth:syzkaller0>
[ 1701.262354][T30488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7376'.
[ 1701.354821][T18157] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1701.360544][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1701.373011][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1701.428522][T30252] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1701.500203][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1701.519351][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1701.554544][T18157] usb 1-1: Using ep0 maxpacket: 8
[ 1701.564041][T18157] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1701.576249][T30491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1701.592896][T18157] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1701.597151][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1701.623689][T18157] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1701.651537][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1701.656250][T18157] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1701.683151][T30252] device veth0_vlan entered promiscuous mode
[ 1701.704904][T18157] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1701.728024][T18157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.766331][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1701.783485][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1701.824569][T30252] device veth1_vlan entered promiscuous mode
[ 1701.940874][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1701.956217][T18157] usb 1-1: GET_CAPABILITIES returned 0
[ 1701.962297][T18157] usbtmc 1-1:16.0: can't read capabilities
[ 1701.968469][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1701.969085][T30508] fuse: Unknown parameter 'grou00000000000000000000'
[ 1702.037511][T30252] device veth0_macvtap entered promiscuous mode
[ 1702.057174][T30252] device veth1_macvtap entered promiscuous mode
[ 1702.124883][T30252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1702.159489][ T1176] usb 1-1: USB disconnect, device number 71
[ 1702.186437][T30252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.217644][T30252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1702.249478][T30252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.281116][T30252] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1702.306899][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1702.318335][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1702.351419][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1702.371119][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1702.492743][T30252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1702.517195][T30252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.558009][T30252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1702.611532][T30252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1702.684698][T30252] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1702.720643][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1702.793802][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1702.963115][T30252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.004584][T30252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.049775][T30252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.073733][T30252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.092706][T30534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7389'.
[ 1703.283127][ T7428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1703.313038][ T7428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1703.357487][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1703.381452][T13934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1703.409744][T13934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1703.453468][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1704.189589][T30557] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1704.209574][T30557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1704.216901][T30557] IPv6: NLM_F_CREATE should be set when creating new route
[ 1704.224246][T30557] IPv6: NLM_F_CREATE should be set when creating new route
[ 1707.968673][T30602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1708.048964][T30602] tipc: Resetting bearer <eth:syzkaller0>
[ 1708.176517][T30600] tipc: Disabling bearer <eth:syzkaller0>
[ 1708.461093][T30617] syz.1.7410 (30617): drop_caches: 2
[ 1709.574751][T26674] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[ 1709.796841][T26674] usb 9-1: not running at top speed; connect to a high speed hub
[ 1709.836691][T26674] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1709.933683][T26674] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1710.001053][T26674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.064424][T26674] usb 9-1: Product: syz
[ 1710.094544][T26674] usb 9-1: Manufacturer: syz
[ 1710.099209][T26674] usb 9-1: SerialNumber: syz
[ 1710.444769][T26674] usb 9-1: USB disconnect, device number 45
[ 1710.937311][T30667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'.
[ 1710.963274][T30667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'.
[ 1711.183694][T30675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7421'.
[ 1711.226632][T30675] team0: No ports can be present during mode change
[ 1711.469409][T30680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1711.503880][T30680] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.519845][T30684] device syzkaller0 entered promiscuous mode
[ 1711.632817][T30679] tipc: Disabling bearer <eth:syzkaller0>
[ 1712.000892][T30693] tipc: Started in network mode
[ 1712.014926][T30693] tipc: Node identity aa3d25d57f28, cluster identity 4711
[ 1712.025737][T30693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1712.045915][T30693] device syzkaller0 entered promiscuous mode
[ 1712.877350][T30690] syz.1.7427 (30690): drop_caches: 2
[ 1712.912523][T30693] tipc: Resetting bearer <eth:syzkaller0>
[ 1712.946358][T30692] tipc: Resetting bearer <eth:syzkaller0>
[ 1713.113842][T30692] tipc: Disabling bearer <eth:syzkaller0>
[ 1713.222365][T30702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1713.277199][T30702] device syzkaller0 entered promiscuous mode
[ 1713.427717][T30702] tipc: Resetting bearer <eth:syzkaller0>
[ 1713.458076][T30701] tipc: Resetting bearer <eth:syzkaller0>
[ 1713.621156][T30701] tipc: Disabling bearer <eth:syzkaller0>
[ 1713.672939][T30713] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7435'.
[ 1713.691015][T30714] team0: No ports can be present during mode change
[ 1713.701600][T30716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7436'.
[ 1713.834337][T30719] device syzkaller0 entered promiscuous mode
[ 1713.858449][T30720] tipc: New replicast peer: 255.255.255.255
[ 1713.879332][T30720] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1719.427109][T30729] device syzkaller0 entered promiscuous mode
[ 1719.439978][T30736] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1719.500171][ T1176] tipc: Node number set to 3574932949
[ 1719.532722][T30752] device veth3 entered promiscuous mode
[ 1719.742028][T30762] device syzkaller0 entered promiscuous mode
[ 1720.356650][T30773] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7449'.
[ 1725.460993][T30773] netlink: 'syz.8.7449': attribute type 5 has an invalid length.
[ 1725.469140][T30775] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7450'.
[ 1725.478538][T30779] team0: No ports can be present during mode change
[ 1725.494932][T30777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7451'.
[ 1725.512154][T30784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1725.556654][T30784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1725.584709][T30784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1725.841644][T30798] device syzkaller0 entered promiscuous mode
[ 1729.679719][T30802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1729.691309][T30810] device syzkaller0 entered promiscuous mode
[ 1729.737696][T30818] tipc: Resetting bearer <eth:syzkaller0>
[ 1729.776216][T30801] tipc: Resetting bearer <eth:syzkaller0>
[ 1729.881875][T30801] tipc: Disabling bearer <eth:syzkaller0>
[ 1730.870501][T30833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7466'.
[ 1730.947624][T30838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7468'.
[ 1731.039003][T30836] device syzkaller0 entered promiscuous mode
[ 1731.130335][T30838] team0: Unable to change to the same mode the team is in
[ 1731.181900][T30847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7471'.
[ 1731.594655][T17592] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1731.803086][T17592] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1731.820723][T17592] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1731.847506][T17592] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1731.868130][T17592] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1731.888138][T17592] usb 10-1: Manufacturer: syz
[ 1731.901864][T17592] usb 10-1: config 0 descriptor??
[ 1732.070866][T17592] rc_core: IR keymap rc-hauppauge not found
[ 1732.077119][T17592] Registered IR keymap rc-empty
[ 1732.085800][T17592] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1732.098311][T17592] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input21
[ 1732.155200][    C0] igorplugusb 10-1:0.0: Error: urb status = -32
[ 1732.176667][T17592] usb 10-1: USB disconnect, device number 56
[ 1733.709470][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.699250][T30847] netlink: 'syz.2.7471': attribute type 5 has an invalid length.
[ 1735.709710][T30853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1735.719339][T30853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1735.727093][T30853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1735.757517][T30868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1735.771739][T30863] device syzkaller0 entered promiscuous mode
[ 1735.822112][T30876] tipc: Resetting bearer <eth:syzkaller0>
[ 1735.852549][T30890] device syzkaller0 entered promiscuous mode
[ 1735.900371][T30858] tipc: Resetting bearer <eth:syzkaller0>
[ 1735.912758][T30905] fuse: Bad value for 'rootmode'
[ 1735.948538][T30858] tipc: Disabling bearer <eth:syzkaller0>
[ 1735.957552][T30902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7480'.
[ 1736.218607][T30914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7483'.
[ 1736.248526][T30914] team0: No ports can be present during mode change
[ 1736.343663][T30920] netlink: 'syz.0.7485': attribute type 1 has an invalid length.
[ 1736.355567][T30920] netlink: 'syz.0.7485': attribute type 2 has an invalid length.
[ 1736.474617][T13895] usb 2-1: new full-speed USB device number 83 using dummy_hcd
[ 1736.514491][T26674] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1736.591970][T30927] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1736.601879][T30927] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1736.613561][T30927] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1736.623312][T30927] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1736.650793][T30927] device geneve2 entered promiscuous mode
[ 1736.673228][T30927] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1736.687379][T13895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1736.703545][T13895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1736.719023][T26674] usb 9-1: Using ep0 maxpacket: 8
[ 1736.727754][T26674] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1736.739450][T30927] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1736.744505][T26674] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1736.761679][T30927] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1736.763133][T13895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1736.780220][T26674] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1736.790382][T13895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1736.799182][T26674] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1736.813182][T26674] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1736.827697][T26674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1736.854047][T30927] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1737.028841][T13895] usb 2-1: usb_control_msg returned -32
[ 1737.034706][T13895] usbtmc 2-1:16.0: can't read capabilities
[ 1737.041549][T26674] usb 9-1: GET_CAPABILITIES returned 0
[ 1737.047468][T26674] usbtmc 9-1:16.0: can't read capabilities
[ 1737.245414][T26674] usb 9-1: USB disconnect, device number 46
[ 1737.458025][T30935] device syzkaller0 entered promiscuous mode
[ 1739.277460][T13895] usb 2-1: USB disconnect, device number 83
[ 1742.189429][T30944] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7494'.
[ 1742.212846][T30957] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1742.244263][T30975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7499'.
[ 1742.520843][T30998] fuse: Bad value for 'rootmode'
[ 1742.532552][T31002] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1742.574741][T31004] fuse: Bad value for 'fd'
[ 1743.483436][T31021] device syzkaller0 entered promiscuous mode
[ 1743.530548][T31022] netlink: 136 bytes leftover after parsing attributes in process `syz.9.7511'.
[ 1743.627684][T31027] device syzkaller0 entered promiscuous mode
[ 1743.642981][T31021] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[ 1743.746149][T31026] team0: No ports can be present during mode change
[ 1743.998231][T31034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1744.024244][T31034] device syzkaller0 entered promiscuous mode
[ 1744.126644][T31037] tipc: Resetting bearer <eth:syzkaller0>
[ 1744.170823][T31033] tipc: Resetting bearer <eth:syzkaller0>
[ 1744.315811][T31049] fuse: Bad value for 'rootmode'
[ 1744.336504][T31033] tipc: Disabling bearer <eth:syzkaller0>
[ 1744.672812][T31057] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7524'.
[ 1744.848882][T31063] team0: Unable to change to the same mode the team is in
[ 1745.075097][T31067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7528'.
[ 1745.269158][T31067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7528'.
[ 1745.301488][T31074] device syzkaller0 entered promiscuous mode
[ 1745.354253][T31074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1745.576331][T31077] device syzkaller0 entered promiscuous mode
[ 1745.635437][T31082] tipc: Resetting bearer <eth:syzkaller0>
[ 1745.649845][T31067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7528'.
[ 1745.676329][T31072] tipc: Resetting bearer <eth:syzkaller0>
[ 1745.718412][T31072] tipc: Disabling bearer <eth:syzkaller0>
[ 1745.834510][ T1176] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1746.014515][ T4283] Bluetooth: hci1: command 0x0406 tx timeout
[ 1746.049403][ T1176] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1746.060573][ T1176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1746.103900][ T1176] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1746.120697][ T1176] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1746.129512][ T1176] usb 3-1: Manufacturer: syz
[ 1746.140804][ T1176] usb 3-1: config 0 descriptor??
[ 1746.374701][ T1176] rc_core: IR keymap rc-hauppauge not found
[ 1746.383023][ T1176] Registered IR keymap rc-empty
[ 1746.393398][ T1176] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1746.417697][ T1176] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[ 1746.456847][    C0] igorplugusb 3-1:0.0: Error: urb status = -32
[ 1746.473449][ T1176] usb 3-1: USB disconnect, device number 70
[ 1746.842284][   T27] audit: type=1326 audit(1772577653.355:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1746.988199][   T27] audit: type=1326 audit(1772577653.385:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.182482][   T27] audit: type=1326 audit(1772577653.405:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.276490][   T27] audit: type=1326 audit(1772577653.405:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.392370][   T27] audit: type=1326 audit(1772577653.405:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.562617][   T27] audit: type=1326 audit(1772577653.405:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.643282][   T27] audit: type=1326 audit(1772577653.405:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.707323][   T27] audit: type=1326 audit(1772577653.415:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.764477][T26674] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1747.764822][   T27] audit: type=1326 audit(1772577653.415:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1747.842314][   T27] audit: type=1326 audit(1772577653.415:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.8.7538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf479c799 code=0x7ffc0000
[ 1748.001067][T26674] usb 9-1: Using ep0 maxpacket: 32
[ 1748.074254][T26674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1748.091574][T26674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1748.112118][T26674] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1748.127815][T26674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.174968][T26674] usb 9-1: config 0 descriptor??
[ 1748.876694][T26674] ft260 0003:0403:6030.000A: item fetching failed at offset 0/2
[ 1748.890771][T26674] ft260 0003:0403:6030.000A: failed to parse HID
[ 1749.081992][T26674] ft260: probe of 0003:0403:6030.000A failed with error -22
[ 1751.101718][T17592] usb 9-1: USB disconnect, device number 47
[ 1751.810648][T31130] netlink: 'syz.8.7545': attribute type 10 has an invalid length.
[ 1751.897181][T31130] 8021q: adding VLAN 0 to HW filter on device team0
[ 1751.957812][T31130] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1752.085933][T31145] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7551'.
[ 1752.148205][T31145] netlink: 'syz.1.7551': attribute type 5 has an invalid length.
[ 1752.214540][T17592] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1752.229485][T31149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1752.277997][T31149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1752.293036][T31149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1752.425978][T17592] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1752.443036][T17592] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1752.518792][T17592] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1752.564038][T17592] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1752.612347][T17592] usb 10-1: Manufacturer: syz
[ 1752.739367][T17592] usb 10-1: config 0 descriptor??
[ 1753.114885][T31162] fuse: Bad value for 'fd'
[ 1754.901522][T13895] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1755.099728][T13895] usb 2-1: Using ep0 maxpacket: 8
[ 1755.104518][T17592] rc_core: IR keymap rc-hauppauge not found
[ 1755.108139][T13895] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1755.110682][T17592] Registered IR keymap rc-empty
[ 1755.130226][T17592] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1755.151668][T13895] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[ 1755.173207][T13895] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1755.192429][T17592] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input23
[ 1755.210409][T13895] usb 2-1: config 4 has no interface number 0
[ 1755.223781][T13895] usb 2-1: string descriptor 0 read error: -22
[ 1755.238088][T13895] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1755.238896][    C0] igorplugusb 10-1:0.0: Error: urb status = -32
[ 1755.248023][T13895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1755.256579][T17592] usb 10-1: USB disconnect, device number 57
[ 1755.305521][T13895] usb 2-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[ 1755.342470][T13895] usb 2-1: No valid video chain found.
[ 1755.599369][T17592] usb 2-1: USB disconnect, device number 84
[ 1755.930009][T31181] device syzkaller0 entered promiscuous mode
[ 1756.327882][T31194] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7566'.
[ 1756.634226][T31205] fuse: Bad value for 'rootmode'
[ 1757.947078][T31209] Set syz1 is full, maxelem 6117 reached
[ 1761.595185][T31194] netlink: 'syz.8.7566': attribute type 5 has an invalid length.
[ 1761.606080][T31204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1761.615465][T31204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1761.623119][T31204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1761.668534][T31214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1761.688873][T31217] device syzkaller0 entered promiscuous mode
[ 1761.754306][T31224] tipc: Resetting bearer <eth:syzkaller0>
[ 1761.812301][T31212] tipc: Resetting bearer <eth:syzkaller0>
[ 1761.905459][T31212] tipc: Disabling bearer <eth:syzkaller0>
[ 1762.037441][T31241] netlink: 'syz.8.7578': attribute type 10 has an invalid length.
[ 1762.081615][T31238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7577'.
[ 1762.317889][T31249] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7583'.
[ 1762.400417][T31252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7584'.
[ 1762.427252][T31249] team0: No ports can be present during mode change
[ 1762.774641][T31256] fuse: Unknown parameter 'use00000000000000000000'
[ 1764.791862][T31254] device syzkaller0 entered promiscuous mode
[ 1764.820543][T31255] netlink: 'syz.2.7584': attribute type 5 has an invalid length.
[ 1765.245989][T13895] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1765.430002][T13895] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1765.460085][T13895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1765.496381][T13895] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1765.544653][T13895] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1765.553994][T13895] usb 9-1: Manufacturer: syz
[ 1765.587346][T13895] usb 9-1: config 0 descriptor??
[ 1765.875762][T13895] rc_core: IR keymap rc-hauppauge not found
[ 1765.888671][T13895] Registered IR keymap rc-empty
[ 1765.906003][T13895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1765.918368][T13895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input24
[ 1765.976259][T13895] usb 9-1: USB disconnect, device number 48
[ 1770.430069][T31252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1770.439722][T31252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1770.448562][T31252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1770.479129][T31295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1770.520997][T31307] netlink: 'syz.1.7595': attribute type 10 has an invalid length.
[ 1770.585976][T31307] 8021q: adding VLAN 0 to HW filter on device team0
[ 1770.607937][T31307] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1770.647989][T31298] device syzkaller0 entered promiscuous mode
[ 1770.689254][T31309] tipc: Resetting bearer <eth:syzkaller0>
[ 1770.715740][T31291] tipc: Resetting bearer <eth:syzkaller0>
[ 1770.796216][T31291] tipc: Disabling bearer <eth:syzkaller0>
[ 1770.813811][T31316] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7597'.
[ 1770.855395][T31322] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7599'.
[ 1770.869875][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7601'.
[ 1770.884492][T31325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7601'.
[ 1770.930157][T31325] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1770.939128][T31325] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1770.948165][T31325] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1770.956951][T31325] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1771.009560][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7601'.
[ 1771.023383][T31325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7601'.
[ 1771.054622][T23198] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1771.073845][T31329] tipc: New replicast peer: 255.255.255.255
[ 1771.096397][T31329] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1771.116041][T31332] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1771.245721][T23198] usb 2-1: Using ep0 maxpacket: 32
[ 1771.264668][    T7] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 1772.069345][T23198] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 1772.078530][T23198] usb 2-1: config 0 has no interface number 0
[ 1772.085057][T23198] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1772.095198][T23198] usb 2-1: config 0 interface 89 has no altsetting 0
[ 1772.099447][T31338] device syzkaller0 entered promiscuous mode
[ 1772.107134][T23198] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1772.121931][T23198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.130487][T23198] usb 2-1: Product: syz
[ 1772.135040][T23198] usb 2-1: Manufacturer: syz
[ 1772.139896][T23198] usb 2-1: SerialNumber: syz
[ 1772.146823][T23198] usb 2-1: config 0 descriptor??
[ 1772.162867][T23198] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1772.189740][T23198] em28xx 2-1:0.89: Video interface 89 found:
[ 1772.257854][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1772.276041][    T7] usb 1-1: not running at top speed; connect to a high speed hub
[ 1772.293068][    T7] usb 1-1: config 16 has an invalid interface number: 36 but max is 0
[ 1772.301677][    T7] usb 1-1: config 16 has no interface number 0
[ 1772.315107][    T7] usb 1-1: config 16 interface 36 altsetting 1 has an invalid endpoint with address 0x0, skipping
[ 1772.331493][    T7] usb 1-1: config 16 interface 36 altsetting 1 has an invalid endpoint descriptor of length 5, skipping
[ 1772.349348][    T7] usb 1-1: config 16 interface 36 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1772.369783][    T7] usb 1-1: config 16 interface 36 has no altsetting 0
[ 1772.382770][    T7] usb 1-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d
[ 1772.392541][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.401067][    T7] usb 1-1: Product: syz
[ 1772.405870][    T7] usb 1-1: Manufacturer: syz
[ 1772.410535][    T7] usb 1-1: SerialNumber: syz
[ 1772.445475][T31328] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1772.579094][T31323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1772.605960][T31323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1772.669173][    T7] hub 1-1:16.36: bad descriptor, ignoring hub
[ 1772.702484][    T7] hub: probe of 1-1:16.36 failed with error -5
[ 1772.721581][    T7] option 1-1:16.36: GSM modem (1-port) converter detected
[ 1772.775606][    T7] usb 1-1: USB disconnect, device number 72
[ 1772.789984][    T7] option 1-1:16.36: device disconnected
[ 1772.819968][T23198] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 1773.684869][T23198] em28xx 2-1:0.89: writing to i2c device at 0xa0 failed (error=-5)
[ 1773.715026][T23198] em28xx 2-1:0.89: failed to read eeprom (err=-5)
[ 1773.760288][T23198] em28xx 2-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[ 1773.924615][T23198] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 1773.933999][T23198] em28xx 2-1:0.89: analog set to bulk mode.
[ 1773.982528][T23198] usb 2-1: USB disconnect, device number 85
[ 1774.043874][T23198] em28xx 2-1:0.89: Disconnecting em28xx
[ 1774.084127][ T4271] em28xx 2-1:0.89: Registering V4L2 extension
[ 1774.244294][ T4271] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 1774.254212][ T4271] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 1774.293408][ T4271] em28xx 2-1:0.89: No AC97 audio processor
[ 1774.496390][ T4271] usb 2-1: Decoder not found
[ 1774.552930][ T4271] em28xx 2-1:0.89: failed to create media graph
[ 1774.583342][ T4271] em28xx 2-1:0.89: V4L2 device video103 deregistered
[ 1774.612009][ T4271] em28xx 2-1:0.89: Registering snapshot button...
[ 1774.612399][T31385] ==================================================================
[ 1774.626568][T31385] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430
[ 1774.633722][T31385] Read of size 8 at addr ffff88807a694738 by task v4l_id/31385
[ 1774.641421][T31385] 
[ 1774.643882][T31385] CPU: 1 PID: 31385 Comm: v4l_id Not tainted syzkaller #0
[ 1774.651173][T31385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1774.661258][T31385] Call Trace:
[ 1774.664557][T31385]  <TASK>
[ 1774.667554][T31385]  dump_stack_lvl+0x188/0x24e
[ 1774.672336][T31385]  ? __lock_acquire+0x7d10/0x7d10
[ 1774.677570][T31385]  ? show_regs_print_info+0x12/0x12
[ 1774.682797][T31385]  ? load_image+0x400/0x400
[ 1774.687296][T31385]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1774.692823][T31385]  ? __virt_addr_valid+0x188/0x540
[ 1774.698232][T31385]  ? __virt_addr_valid+0x465/0x540
[ 1774.703364][T31385]  ? v4l2_fh_open+0xc6/0x430
[ 1774.707957][T31385]  print_report+0xa8/0x210
[ 1774.712447][T31385]  kasan_report+0x10b/0x140
[ 1774.717050][T31385]  ? v4l2_fh_open+0xc6/0x430
[ 1774.721635][T31385]  v4l2_fh_open+0xc6/0x430
[ 1774.726041][T31385]  em28xx_v4l2_open+0x152/0x990
[ 1774.730979][T31385]  ? __lock_acquire+0x7d10/0x7d10
[ 1774.736009][T31385]  v4l2_open+0x20b/0x360
[ 1774.740273][T31385]  chrdev_open+0x5c5/0x6a0
[ 1774.745138][T31385]  ? cd_forget+0x160/0x160
[ 1774.749620][T31385]  ? fsnotify_perm+0x39b/0x550
[ 1774.754516][T31385]  ? cd_forget+0x160/0x160
[ 1774.758986][T31385]  do_dentry_open+0x7e9/0x10d0
[ 1774.763862][T31385]  path_openat+0x2635/0x2ee0
[ 1774.768475][T31385]  ? verify_lock_unused+0x140/0x140
[ 1774.773764][T31385]  ? do_syscall_64+0x4c/0xa0
[ 1774.778491][T31385]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1774.784571][T31385]  ? do_filp_open+0x430/0x430
[ 1774.789274][T31385]  do_filp_open+0x1f1/0x430
[ 1774.793861][T31385]  ? vfs_tmpfile+0x480/0x480
[ 1774.798443][T31385]  ? _raw_spin_unlock+0x24/0x40
[ 1774.803304][T31385]  ? alloc_fd+0x58f/0x630
[ 1774.807707][T31385]  do_sys_openat2+0x150/0x4b0
[ 1774.812408][T31385]  ? up_read+0x20/0x20
[ 1774.816513][T31385]  ? do_sys_open+0xe0/0xe0
[ 1774.821010][T31385]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1774.827036][T31385]  ? lock_chain_count+0x20/0x20
[ 1774.831892][T31385]  __x64_sys_openat+0x135/0x160
[ 1774.836776][T31385]  do_syscall_64+0x4c/0xa0
[ 1774.841190][T31385]  ? clear_bhb_loop+0x60/0xb0
[ 1774.845870][T31385]  ? clear_bhb_loop+0x60/0xb0
[ 1774.850570][T31385]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1774.856566][T31385] RIP: 0033:0x7f54978a7407
[ 1774.861072][T31385] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1774.881065][T31385] RSP: 002b:00007ffc19d79350 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1774.889819][T31385] RAX: ffffffffffffffda RBX: 00007f5497f5d880 RCX: 00007f54978a7407
[ 1774.897795][T31385] RDX: 0000000000000000 RSI: 00007ffc19d7af1b RDI: ffffffffffffff9c
[ 1774.905774][T31385] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1774.913813][T31385] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1774.921787][T31385] R13: 00007ffc19d795a0 R14: 00007f54980bc000 R15: 0000563e296164d8
[ 1774.929767][T31385]  </TASK>
[ 1774.932793][T31385] 
[ 1774.935175][T31385] Allocated by task 4271:
[ 1774.939506][T31385]  kasan_set_track+0x4b/0x70
[ 1774.944095][T31385]  __kasan_kmalloc+0x8e/0xa0
[ 1774.948680][T31385]  em28xx_v4l2_init+0x107/0x2e70
[ 1774.953606][T31385]  em28xx_init_extension+0x118/0x1b0
[ 1774.958976][T31385]  process_one_work+0x8a2/0x1160
[ 1774.963980][T31385]  worker_thread+0xd83/0x1270
[ 1774.968652][T31385]  kthread+0x29d/0x330
[ 1774.972774][T31385]  ret_from_fork+0x1f/0x30
[ 1774.977305][T31385] 
[ 1774.979649][T31385] Freed by task 4271:
[ 1774.983617][T31385]  kasan_set_track+0x4b/0x70
[ 1774.988216][T31385]  kasan_save_free_info+0x2d/0x50
[ 1774.993376][T31385]  ____kasan_slab_free+0x126/0x1e0
[ 1774.998508][T31385]  slab_free_freelist_hook+0x131/0x1a0
[ 1775.003980][T31385]  __kmem_cache_free+0xb6/0x1f0
[ 1775.008845][T31385]  em28xx_v4l2_init+0x166c/0x2e70
[ 1775.013872][T31385]  em28xx_init_extension+0x118/0x1b0
[ 1775.019184][T31385]  process_one_work+0x8a2/0x1160
[ 1775.024110][T31385]  worker_thread+0xd83/0x1270
[ 1775.028811][T31385]  kthread+0x29d/0x330
[ 1775.032977][T31385]  ret_from_fork+0x1f/0x30
[ 1775.037390][T31385] 
[ 1775.039706][T31385] The buggy address belongs to the object at ffff88807a694000
[ 1775.039706][T31385]  which belongs to the cache kmalloc-8k of size 8192
[ 1775.053872][T31385] The buggy address is located 1848 bytes inside of
[ 1775.053872][T31385]  8192-byte region [ffff88807a694000, ffff88807a696000)
[ 1775.067315][T31385] 
[ 1775.069631][T31385] The buggy address belongs to the physical page:
[ 1775.076113][T31385] page:ffffea0001e9a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a690
[ 1775.086297][T31385] head:ffffea0001e9a400 order:3 compound_mapcount:0 compound_pincount:0
[ 1775.094612][T31385] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1775.102797][T31385] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442280
[ 1775.111420][T31385] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[ 1775.120090][T31385] page dumped because: kasan: bad access detected
[ 1775.126670][T31385] page_owner tracks the page as allocated
[ 1775.132404][T31385] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 17339, tgid 17339 (syz-executor), ts 813721762065, free_ts 813652891922
[ 1775.155552][T31385]  post_alloc_hook+0x173/0x1a0
[ 1775.160369][T31385]  get_page_from_freelist+0x1a1e/0x1ab0
[ 1775.165916][T31385]  __alloc_pages+0x1ec/0x4f0
[ 1775.170497][T31385]  alloc_slab_page+0x5d/0x160
[ 1775.175249][T31385]  new_slab+0x87/0x2c0
[ 1775.179301][T31385]  ___slab_alloc+0xbc6/0x1240
[ 1775.184043][T31385]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1775.189574][T31385]  __kmalloc_node+0xa0/0x240
[ 1775.194275][T31385]  kvmalloc_node+0x6c/0x180
[ 1775.198831][T31385]  wg_packet_queue_init+0x8f/0x2f0
[ 1775.204115][T31385]  wg_newlink+0x3fd/0x730
[ 1775.208446][T31385]  rtnl_newlink+0x1542/0x2080
[ 1775.213330][T31385]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1775.218350][T31385]  netlink_rcv_skb+0x1fb/0x450
[ 1775.223220][T31385]  netlink_unicast+0x74d/0x8d0
[ 1775.227972][T31385]  netlink_sendmsg+0x8ad/0xbd0
[ 1775.232722][T31385] page last free stack trace:
[ 1775.237374][T31385]  free_unref_page_prepare+0x8b4/0x9a0
[ 1775.242824][T31385]  free_unref_page+0x2e/0x3f0
[ 1775.247664][T31385]  __unfreeze_partials+0x1a5/0x200
[ 1775.252855][T31385]  put_cpu_partial+0x17c/0x250
[ 1775.257613][T31385]  qlist_free_all+0x76/0xe0
[ 1775.262099][T31385]  kasan_quarantine_reduce+0x144/0x160
[ 1775.267537][T31385]  __kasan_slab_alloc+0x1e/0x80
[ 1775.272382][T31385]  slab_post_alloc_hook+0x4b/0x480
[ 1775.277691][T31385]  __kmem_cache_alloc_node+0x140/0x260
[ 1775.283236][T31385]  __kmalloc_node+0xa0/0x240
[ 1775.287822][T31385]  kvmalloc_node+0x6c/0x180
[ 1775.292365][T31385]  xt_replace_table+0x177/0x790
[ 1775.297413][T31385]  __do_replace+0x160/0x980
[ 1775.302087][T31385]  do_ip6t_set_ctl+0xb44/0xe10
[ 1775.306847][T31385]  nf_setsockopt+0x25f/0x280
[ 1775.311568][T31385]  __sys_setsockopt+0x2bf/0x3d0
[ 1775.316435][T31385] 
[ 1775.318755][T31385] Memory state around the buggy address:
[ 1775.324479][T31385]  ffff88807a694600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1775.332526][T31385]  ffff88807a694680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1775.340575][T31385] >ffff88807a694700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1775.348635][T31385]                                         ^
[ 1775.354673][T31385]  ffff88807a694780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1775.362726][T31385]  ffff88807a694800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1775.370792][T31385] ==================================================================
[ 1775.439920][T31385] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1775.442578][ T4271] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input25
[ 1775.457934][T31385] CPU: 1 PID: 31385 Comm: v4l_id Not tainted syzkaller #0
[ 1775.465039][T31385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1775.475092][T31385] Call Trace:
[ 1775.478362][T31385]  <TASK>
[ 1775.481282][T31385]  dump_stack_lvl+0x188/0x24e
[ 1775.485979][T31385]  ? memcpy+0x3c/0x60
[ 1775.490236][T31385]  ? show_regs_print_info+0x12/0x12
[ 1775.495692][T31385]  ? load_image+0x400/0x400
[ 1775.500216][T31385]  panic+0x2e5/0x730
[ 1775.504123][T31385]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1775.510282][T31385]  ? bpf_jit_dump+0xd0/0xd0
[ 1775.514781][T31385]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1775.520759][T31385]  ? _raw_spin_unlock+0x40/0x40
[ 1775.525603][T31385]  check_panic_on_warn+0x80/0xa0
[ 1775.530606][T31385]  ? v4l2_fh_open+0xc6/0x430
[ 1775.535191][T31385]  end_report+0x66/0x110
[ 1775.539424][T31385]  kasan_report+0x118/0x140
[ 1775.543925][T31385]  ? v4l2_fh_open+0xc6/0x430
[ 1775.548546][T31385]  v4l2_fh_open+0xc6/0x430
[ 1775.552992][T31385]  em28xx_v4l2_open+0x152/0x990
[ 1775.557854][T31385]  ? __lock_acquire+0x7d10/0x7d10
[ 1775.562893][T31385]  v4l2_open+0x20b/0x360
[ 1775.567148][T31385]  chrdev_open+0x5c5/0x6a0
[ 1775.571825][T31385]  ? cd_forget+0x160/0x160
[ 1775.576252][T31385]  ? fsnotify_perm+0x39b/0x550
[ 1775.581016][T31385]  ? cd_forget+0x160/0x160
[ 1775.585428][T31385]  do_dentry_open+0x7e9/0x10d0
[ 1775.590177][T31385]  path_openat+0x2635/0x2ee0
[ 1775.594765][T31385]  ? verify_lock_unused+0x140/0x140
[ 1775.600040][T31385]  ? do_syscall_64+0x4c/0xa0
[ 1775.604621][T31385]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1775.610677][T31385]  ? do_filp_open+0x430/0x430
[ 1775.615354][T31385]  do_filp_open+0x1f1/0x430
[ 1775.619880][T31385]  ? vfs_tmpfile+0x480/0x480
[ 1775.624472][T31385]  ? _raw_spin_unlock+0x24/0x40
[ 1775.629348][T31385]  ? alloc_fd+0x58f/0x630
[ 1775.633706][T31385]  do_sys_openat2+0x150/0x4b0
[ 1775.638425][T31385]  ? up_read+0x20/0x20
[ 1775.642496][T31385]  ? do_sys_open+0xe0/0xe0
[ 1775.646902][T31385]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1775.652866][T31385]  ? lock_chain_count+0x20/0x20
[ 1775.657812][T31385]  __x64_sys_openat+0x135/0x160
[ 1775.662676][T31385]  do_syscall_64+0x4c/0xa0
[ 1775.667125][T31385]  ? clear_bhb_loop+0x60/0xb0
[ 1775.671983][T31385]  ? clear_bhb_loop+0x60/0xb0
[ 1775.676674][T31385]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1775.682566][T31385] RIP: 0033:0x7f54978a7407
[ 1775.686996][T31385] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1775.707131][T31385] RSP: 002b:00007ffc19d79350 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1775.715833][T31385] RAX: ffffffffffffffda RBX: 00007f5497f5d880 RCX: 00007f54978a7407
[ 1775.723894][T31385] RDX: 0000000000000000 RSI: 00007ffc19d7af1b RDI: ffffffffffffff9c
[ 1775.732044][T31385] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1775.740216][T31385] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1775.748523][T31385] R13: 00007ffc19d795a0 R14: 00007f54980bc000 R15: 0000563e296164d8
[ 1775.756572][T31385]  </TASK>
[ 1775.760497][T31385] Kernel Offset: disabled
[ 1775.765051][T31385] Rebooting in 86400 seconds..