last executing test programs:

18m15.412518867s ago: executing program 32 (id=449):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x58, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)

13m46.178948488s ago: executing program 1 (id=1351):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xf8c, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xf28, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}, @TCA_U32_ACT={0xf04, 0x7, [@m_ctinfo={0x50, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x21, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x7, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x88}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x1f, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd, [{0xb8, 0x3ff, 0x7bff, 0x7, 0x200, 0xc1}]}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf8c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13m45.507736934s ago: executing program 1 (id=1353):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

13m43.915591734s ago: executing program 1 (id=1356):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

13m41.249700099s ago: executing program 1 (id=1369):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x32f451, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

13m40.565339594s ago: executing program 1 (id=1372):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

13m38.380294719s ago: executing program 1 (id=1379):
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
syz_usb_connect(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0xb4, 0xf9, 0xe2, 0x8, 0xd46, 0x78, 0x7aeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xe0, 0xd, "", [{{0x9, 0x4, 0x76, 0x3, 0x2, 0xff, 0xff, 0xff, 0xfd, [], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x3, 0x66, 0x9d}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

13m37.611927741s ago: executing program 33 (id=1379):
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
syz_usb_connect(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0xb4, 0xf9, 0xe2, 0x8, 0xd46, 0x78, 0x7aeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xe0, 0xd, "", [{{0x9, 0x4, 0x76, 0x3, 0x2, 0xff, 0xff, 0xff, 0xfd, [], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x3, 0x66, 0x9d}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1m28.963922316s ago: executing program 2 (id=4195):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}}, 0x14}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

1m28.799405129s ago: executing program 2 (id=4198):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x3bef650dfa3052e9}, 0x40000)

1m28.751507578s ago: executing program 2 (id=4201):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
write(r3, &(0x7f0000001580)="0bbf645ef63a077b4d93ba85e6533fbedbe0f89cba8ad64fc704d25f2c5b8bf2d98624461c7bc2a4283f06409c", 0x2d)

1m28.523222245s ago: executing program 2 (id=4203):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r0, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r1, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed510000000000", 0x44}], 0x1)

1m28.36568619s ago: executing program 2 (id=4207):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2b, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280)}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0)

1m27.860064699s ago: executing program 2 (id=4213):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socket$netlink(0x10, 0x3, 0x4)
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40)
close(r2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)

1m26.884482967s ago: executing program 5 (id=4226):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)

1m26.741581728s ago: executing program 5 (id=4228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0))
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4804)

1m26.593670524s ago: executing program 5 (id=4230):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r0, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r1, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5100000000000000", 0x46}], 0x1)

1m26.486787832s ago: executing program 5 (id=4231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201050001000000000013900d03"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000050000000000000010000008181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000100)=[0x3, 0x2], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000180), 0x0}, 0x20)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000000c0)={0x6, {0x6, 0x2, 0xf3b0, 0x2, 0x3}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f0000000180)='ip_vti0\x00', 0xc08c0, &(0x7f00000001c0)={@align=0x3ff, {0x4, 0x9, 0x3, 0x992}}, 0xdb6, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x80}, {[0x5, 0x6, 0x7, 0x3]}, 0x2, 0x64, &(0x7f00000002c0)=""/100})

1m26.401536909s ago: executing program 5 (id=4234):
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)

1m26.344920261s ago: executing program 6 (id=4235):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}}, 0x14}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0xf5}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)

1m26.21955533s ago: executing program 5 (id=4236):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd)

1m26.184575474s ago: executing program 6 (id=4237):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2b, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280)}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0)

1m25.875249232s ago: executing program 3 (id=4241):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r0, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r1, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5100000000000000", 0x46}], 0x1)

1m25.798119041s ago: executing program 6 (id=4243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

1m25.731985919s ago: executing program 3 (id=4244):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r0, 0x0, 0x0)
connect$netrom(r0, 0x0, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

1m25.681269488s ago: executing program 3 (id=4245):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003300), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf350300000108000100000000004c0007800c000180080001"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)

1m25.634247444s ago: executing program 3 (id=4246):
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)

1m25.475026815s ago: executing program 3 (id=4247):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0x1)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

1m25.406115497s ago: executing program 3 (id=4248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x2000005, 0xffffffff, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x5, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80002, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xb, 0xb}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m25.341230817s ago: executing program 6 (id=4249):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)

1m25.293123302s ago: executing program 6 (id=4250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}}, 0x40)

1m25.215059168s ago: executing program 6 (id=4251):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd4}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x54)

1m12.620877686s ago: executing program 34 (id=4213):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socket$netlink(0x10, 0x3, 0x4)
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40)
close(r2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)

1m11.084882254s ago: executing program 35 (id=4236):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd)

1m10.257087925s ago: executing program 36 (id=4248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x2000005, 0xffffffff, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x5, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80002, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xb, 0xb}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m10.17402267s ago: executing program 37 (id=4251):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd4}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x54)

19.28541133s ago: executing program 8 (id=4610):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020b07500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)

17.830680778s ago: executing program 8 (id=4620):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

17.627964671s ago: executing program 8 (id=4623):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

16.970771738s ago: executing program 8 (id=4626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

16.652675183s ago: executing program 8 (id=4629):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)
r2 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]})
socket$inet6(0xa, 0x80000, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

15.759082963s ago: executing program 8 (id=4639):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
syz_emit_ethernet(0x6a, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100))

14.429148638s ago: executing program 7 (id=4643):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setgroups(0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)

14.204994239s ago: executing program 9 (id=4644):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xe8, 0x2c, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [], "a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f"}}}}}}, 0x11e)

13.278537971s ago: executing program 7 (id=4646):
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d701020301090212"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

10.714596832s ago: executing program 9 (id=4649):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000)
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000103"], 0x1c}}, 0x4000000)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000005c0))
write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x12a8f, 0xf264, 0x40, 0x0, 0x0)

9.365881212s ago: executing program 7 (id=4652):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x94}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0)

9.104863942s ago: executing program 9 (id=4653):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0)

8.783099237s ago: executing program 9 (id=4655):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x0, @val=0x80}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

8.583294411s ago: executing program 9 (id=4657):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$unix(0x1, 0x2, 0x0)
pipe(&(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800)

8.438174543s ago: executing program 9 (id=4659):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="804001000000010008001b289300000008002e0000"], 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000010000020000020600074000"/25], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x0, 0x700001b, 0x148, 0x160, 0x148, 0x240, 0x206, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0xd8, 0x120, 0x0, {0x390, 0x8f00}, [@common=@unspec=@physdev={{0x68}, {'veth0_macvtap\x00', {0xff}, 'pimreg0\x00', {0xff}, 0x2, 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x8, 0x7, '\x00', {0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "190b"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000280)=""/29, 0x1d}], 0x3}, 0x41)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0x3, @none}, 0xe)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r11 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r11, 0x0, 0x0, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0x23}, 0x14)

8.16332275s ago: executing program 7 (id=4660):
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff020000000000220000000000000001e800c204"], 0x0)

7.965419533s ago: executing program 7 (id=4661):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/27, 0x1b}, 0x1}], 0x1, 0x2, 0x0)

7.109417242s ago: executing program 0 (id=4667):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x0, @val=0x80}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.930318033s ago: executing program 7 (id=4669):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$unix(0x1, 0x2, 0x0)
pipe(&(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800)

6.914002657s ago: executing program 0 (id=4670):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x94}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0)

5.861732458s ago: executing program 0 (id=4674):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="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", 0x0, 0x3800, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x7}, 0x24)

5.77663686s ago: executing program 0 (id=4675):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r0)

5.643623587s ago: executing program 0 (id=4676):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64, @ANYRES8=r0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x24044843}, 0x0)

5.447811799s ago: executing program 0 (id=4677):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

2.469503577s ago: executing program 4 (id=4687):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64, @ANYRES8=r0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x24044843}, 0x0)

2.282732878s ago: executing program 4 (id=4688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x8011}, 0x48810)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0141000000000000280012800b000100697036746e6c00001800028014000200fc0100"/48], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020b07500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfa, &(0x7f0000000f40)=""/250, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
close(r4)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r6], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
connect$qrtr(r3, &(0x7f0000000140)={0x2a, 0x1, 0x7fff}, 0xc)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
read$rfkill(r7, &(0x7f00000002c0), 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)

1.208076102s ago: executing program 4 (id=4689):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x0)

1.150701905s ago: executing program 4 (id=4690):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/27, 0x1b}, 0x1}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x5, 0x4)

200.979957ms ago: executing program 38 (id=4639):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
syz_emit_ethernet(0x6a, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100))

122.835703ms ago: executing program 4 (id=4692):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="248f895f1bdf90"], 0x1000f)

0s ago: executing program 4 (id=4693):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

 T5998] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  983.359253][ T5998] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  983.359281][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.359300][ T5998] usb 6-1: Product: syz
[  983.359313][ T5998] usb 6-1: Manufacturer: syz
[  983.359327][ T5998] usb 6-1: SerialNumber: syz
[  983.364657][ T5998] usb 6-1: config 0 descriptor??
[  984.503536][ T5998] hub 6-1:0.89: bad descriptor, ignoring hub
[  984.503633][ T5998] hub 6-1:0.89: probe with driver hub failed with error -5
[  984.504552][ T5998] option 6-1:0.89: GSM modem (1-port) converter detected
[  984.898125][ T9613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  984.898146][ T9613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  984.948355][ T5998] usb 6-1: USB disconnect, device number 18
[  984.965507][ T5998] option 6-1:0.89: device disconnected
[  985.096787][ T9613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  985.096809][ T9613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  985.745713][T14935] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  986.584258][T14937] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2928'.
[  986.828698][T14942] tipc: Failed to remove unknown binding: 66,0,0/0:619012840/619012842
[  986.828735][T14942] tipc: Failed to remove unknown binding: 66,0,0/0:619012840/619012841
[  986.829101][T14942] tipc: Failed to remove unknown binding: 66,0,0/0:619012840/619012842
[  986.829118][T14942] tipc: Failed to remove unknown binding: 66,0,0/0:619012840/619012841
[  987.900470][T14950] loop8: detected capacity change from 0 to 8
[  987.902302][T14950] Dev loop8: unable to read RDB block 8
[  987.902346][T14950]  loop8: unable to read partition table
[  987.902554][T14950] loop8: partition table beyond EOD, truncated
[  987.902570][T14950] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  990.711749][ T5901] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  990.730841][ T5901] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  991.644808][ T5901] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  991.799795][ T5901] usb 5-1: Using ep0 maxpacket: 32
[  991.801791][ T5901] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  991.801818][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  991.801837][ T5901] usb 5-1: config 0 has no interface number 0
[  991.801877][ T5901] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  991.851333][ T5901] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  991.851351][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.851361][ T5901] usb 5-1: Product: syz
[  991.851368][ T5901] usb 5-1: Manufacturer: syz
[  991.851375][ T5901] usb 5-1: SerialNumber: syz
[  991.863425][ T5901] usb 5-1: config 0 descriptor??
[  991.898592][ T5901] hub 5-1:0.89: bad descriptor, ignoring hub
[  991.898613][ T5901] hub 5-1:0.89: probe with driver hub failed with error -5
[  991.899487][ T5901] option 5-1:0.89: GSM modem (1-port) converter detected
[  993.085054][ T5998] usb 5-1: USB disconnect, device number 32
[  993.085807][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  993.085870][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  993.125963][ T5998] option 5-1:0.89: device disconnected
[  993.315126][ T5806] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  994.759309][T15005] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2949'.
[  994.888080][T15010] tipc: Failed to remove unknown binding: 66,0,0/0:3270264891/3270264893
[  994.888119][T15010] tipc: Failed to remove unknown binding: 66,0,0/0:3270264891/3270264892
[  994.889739][T15010] tipc: Failed to remove unknown binding: 66,0,0/0:3270264891/3270264893
[  994.889768][T15010] tipc: Failed to remove unknown binding: 66,0,0/0:3270264891/3270264892
[  994.964285][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'.
[  998.081997][ T5806] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  998.091471][T15030] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  998.091489][T15030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  998.093532][T15030] vhci_hcd vhci_hcd.0: Device attached
[  998.206654][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2957'.
[  999.174826][ T5879] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[ 1000.680498][T15038] vhci_hcd: connection reset by peer
[ 1000.708657][ T9612] vhci_hcd vhci_hcd.6: stop threads
[ 1000.708736][ T9612] vhci_hcd vhci_hcd.6: release socket
[ 1000.733390][ T9612] vhci_hcd vhci_hcd.6: disconnect device
[ 1001.636867][ T5880] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1001.932435][ T5880] usb 3-1: Using ep0 maxpacket: 32
[ 1002.188488][ T5880] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 1002.188517][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.188534][ T5880] usb 3-1: config 0 has no interface number 0
[ 1002.188575][ T5880] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1002.241023][ T5880] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1002.241041][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.241051][ T5880] usb 3-1: Product: syz
[ 1002.241058][ T5880] usb 3-1: Manufacturer: syz
[ 1002.241065][ T5880] usb 3-1: SerialNumber: syz
[ 1002.278981][ T5880] usb 3-1: config 0 descriptor??
[ 1002.707124][ T5880] usb 3-1: can't set config #0, error -71
[ 1002.730755][ T5880] usb 3-1: USB disconnect, device number 35
[ 1002.831576][T15073] loop8: detected capacity change from 0 to 8
[ 1002.836181][T15073] Dev loop8: unable to read RDB block 8
[ 1002.836222][T15073]  loop8: unable to read partition table
[ 1002.836420][T15073] loop8: partition table beyond EOD, truncated
[ 1002.836436][T15073] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1004.265498][ T5879] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1005.214819][ T5901] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1005.366884][ T5901] usb 3-1: Using ep0 maxpacket: 8
[ 1005.371011][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.371034][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1005.403934][ T5901] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1005.403951][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.403961][ T5901] usb 3-1: Product: syz
[ 1005.403969][ T5901] usb 3-1: Manufacturer: syz
[ 1005.403976][ T5901] usb 3-1: SerialNumber: syz
[ 1005.634870][T11370] Bluetooth: hci2: command 0x1003 tx timeout
[ 1005.635160][ T5806] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1006.614836][ T5998] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 1006.766499][ T5998] usb 4-1: not running at top speed; connect to a high speed hub
[ 1006.767763][ T5998] usb 4-1: config 45 has an invalid interface number: 2 but max is 0
[ 1006.767779][ T5998] usb 4-1: config 45 has no interface number 0
[ 1006.767795][ T5998] usb 4-1: config 45 interface 2 has no altsetting 0
[ 1006.770896][ T5998] usb 4-1: string descriptor 0 read error: -22
[ 1006.770973][ T5998] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1006.770985][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.909548][ T5998] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1006.910277][ T5998] dvb-usb: bulk message failed: -22 (3/0)
[ 1007.482396][ T5998] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1007.487379][ T5998] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1007.487543][ T5998] usb 4-1: media controller created
[ 1007.487666][ T5998] dvb-usb: bulk message failed: -22 (5/0)
[ 1007.487735][ T5998] dvb-usb: MAC address reading failed.
[ 1007.506716][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1007.954360][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2975'.
[ 1008.172783][ T5998] dvb-usb: bulk message failed: -22 (6/0)
[ 1008.173752][ T5998] dvb-usb: bulk message failed: -22 (6/0)
[ 1008.174063][ T5998] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1008.199661][ T5998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[ 1008.355623][ T5998] dvb-usb: schedule remote query interval to 100 msecs.
[ 1008.355645][ T5998] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1008.443968][ T5998] usb 4-1: USB disconnect, device number 32
[ 1008.486140][T14914] dvb-usb: bulk message failed: -22 (2/0)
[ 1008.486196][T14914] dvb-usb: error while querying for an remote control event.
[ 1009.299337][ T5998] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1010.016230][ T5806] Bluetooth: hci5: ISO packet for unknown connection handle 0
[ 1010.312354][T15119] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[ 1010.312373][T15119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1010.392024][T15119] vhci_hcd vhci_hcd.0: Device attached
[ 1010.623444][T15120] vhci_hcd: connection closed
[ 1010.634279][ T6458] vhci_hcd vhci_hcd.5: stop threads
[ 1010.634308][ T6458] vhci_hcd vhci_hcd.5: release socket
[ 1010.634381][ T6458] vhci_hcd vhci_hcd.5: disconnect device
[ 1010.665514][T15125] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2980'.
[ 1010.684876][T14914] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[ 1010.684927][T14914] usb 43-1: enqueue for inactive port 0
[ 1010.758039][T14914] vhci_hcd vhci_hcd.5: vhci_device speed not set
[ 1010.774142][ T5901] usb 3-1: USB disconnect, device number 36
[ 1010.797885][T15128] tipc: Failed to remove unknown binding: 66,0,0/0:2884924238/2884924240
[ 1010.797919][T15128] tipc: Failed to remove unknown binding: 66,0,0/0:2884924238/2884924239
[ 1010.798452][T15128] tipc: Failed to remove unknown binding: 66,0,0/0:2884924238/2884924240
[ 1010.798477][T15128] tipc: Failed to remove unknown binding: 66,0,0/0:2884924238/2884924239
[ 1011.121256][T15069] udevd[15069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1011.895229][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'.
[ 1012.423934][T15147] loop8: detected capacity change from 0 to 8
[ 1012.434976][T15147] Dev loop8: unable to read RDB block 8
[ 1012.435019][T15147]  loop8: unable to read partition table
[ 1012.435219][T15147] loop8: partition table beyond EOD, truncated
[ 1012.435237][T15147] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1014.911941][T15162] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1015.785775][T15167] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2992'.
[ 1015.886311][T15173] tipc: Failed to remove unknown binding: 66,0,0/0:1801460670/1801460672
[ 1015.886347][T15173] tipc: Failed to remove unknown binding: 66,0,0/0:1801460670/1801460671
[ 1015.886857][T15173] tipc: Failed to remove unknown binding: 66,0,0/0:1801460670/1801460672
[ 1015.886888][T15173] tipc: Failed to remove unknown binding: 66,0,0/0:1801460670/1801460671
[ 1016.710212][T15178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1017.115867][ T5879] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1017.117272][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1017.284881][ T5879] usb 3-1: device descriptor read/64, error -32
[ 1017.584366][ T5879] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1017.609388][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1017.937421][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.937448][    T9] usb 4-1: config 0 has no interfaces?
[ 1017.939680][    T9] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1017.939709][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.939728][    T9] usb 4-1: Product: syz
[ 1017.939741][    T9] usb 4-1: Manufacturer: syz
[ 1017.939749][    T9] usb 4-1: SerialNumber: syz
[ 1018.002881][    T9] usb 4-1: config 0 descriptor??
[ 1018.007450][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1018.007474][ T5879] usb 3-1: config 0 has no interfaces?
[ 1018.010790][ T5879] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1018.010818][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.010836][ T5879] usb 3-1: Product: syz
[ 1018.010849][ T5879] usb 3-1: Manufacturer: syz
[ 1018.010862][ T5879] usb 3-1: SerialNumber: syz
[ 1018.019918][ T5879] usb 3-1: config 0 descriptor??
[ 1020.591436][T14914] usb 4-1: USB disconnect, device number 33
[ 1021.025261][    T9] usb 3-1: USB disconnect, device number 38
[ 1021.710050][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3004'.
[ 1022.175534][    T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1022.369623][T11370] Bluetooth: hci2: command 0x1003 tx timeout
[ 1022.369883][ T5806] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1022.871807][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.871837][    T9] usb 3-1: config 0 has no interfaces?
[ 1022.902701][    T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1022.902732][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.902742][    T9] usb 3-1: Product: syz
[ 1022.902750][    T9] usb 3-1: Manufacturer: syz
[ 1022.902758][    T9] usb 3-1: SerialNumber: syz
[ 1022.974894][    T9] usb 3-1: config 0 descriptor??
[ 1024.374870][ T8821] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1024.527661][ T8821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1024.527713][ T8821] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1024.527736][ T8821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.696066][ T8821] usb 4-1: config 0 descriptor??
[ 1025.698490][T15231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1026.193044][ T8821] usbhid 4-1:0.0: can't add hid device: -71
[ 1026.193157][ T8821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1026.197936][ T5806] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1026.238291][ T8821] usb 4-1: USB disconnect, device number 34
[ 1026.406832][ T5859] usb 3-1: USB disconnect, device number 39
[ 1027.565992][ T5866] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1027.923779][    T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[ 1028.076315][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[ 1028.077594][    T9] usb 4-1: config 45 has an invalid interface number: 2 but max is 0
[ 1028.077620][    T9] usb 4-1: config 45 has no interface number 0
[ 1028.077650][    T9] usb 4-1: config 45 interface 2 has no altsetting 0
[ 1028.081085][    T9] usb 4-1: string descriptor 0 read error: -22
[ 1028.081218][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1028.081242][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.213619][    T9] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1028.213711][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 1029.110196][    T9] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1029.112820][    T9] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1029.112877][    T9] usb 4-1: media controller created
[ 1029.112946][    T9] dvb-usb: bulk message failed: -22 (5/0)
[ 1029.113192][    T9] dvb-usb: MAC address reading failed.
[ 1029.156328][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1029.205654][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 1029.205857][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 1029.205953][    T9] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1029.213236][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[ 1029.258605][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.258632][ T5866] usb 6-1: config 0 has no interfaces?
[ 1029.262776][ T5866] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1029.262795][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.262804][ T5866] usb 6-1: Product: syz
[ 1029.262811][ T5866] usb 6-1: Manufacturer: syz
[ 1029.262818][ T5866] usb 6-1: SerialNumber: syz
[ 1029.356207][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[ 1029.356229][    T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1029.446932][ T5866] usb 6-1: config 0 descriptor??
[ 1029.468110][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1029.468140][    T9] dvb-usb: error while querying for an remote control event.
[ 1029.555060][ T5806] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1029.724811][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1029.724845][    T9] dvb-usb: error while querying for an remote control event.
[ 1029.835634][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1029.839553][    T9] dvb-usb: error while querying for an remote control event.
[ 1029.995371][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1029.995393][    T9] dvb-usb: error while querying for an remote control event.
[ 1030.105140][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1030.105207][    T9] dvb-usb: error while querying for an remote control event.
[ 1030.106895][ T5880] usb 6-1: USB disconnect, device number 19
[ 1030.214938][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1030.214969][    T9] dvb-usb: error while querying for an remote control event.
[ 1030.332410][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 1030.332442][    T9] dvb-usb: error while querying for an remote control event.
[ 1030.431412][T14914] usb 4-1: USB disconnect, device number 35
[ 1031.394453][T14914] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1033.069400][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3026'.
[ 1036.956509][T15324] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3036'.
[ 1037.018395][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'.
[ 1037.024619][T11370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1037.045300][T11370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1037.048119][T11370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1037.051269][T11370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1037.051855][T11370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1038.245164][ T9088] bond0: (slave syz_tun): Releasing backup interface
[ 1039.848548][T11370] Bluetooth: hci2: command tx timeout
[ 1041.087292][T15357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3047'.
[ 1041.196011][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3048'.
[ 1041.689849][T15320] chnl_net:caif_netlink_parms(): no params data found
[ 1041.875137][ T5806] Bluetooth: hci2: command tx timeout
[ 1044.043324][ T5806] Bluetooth: hci2: command tx timeout
[ 1044.256910][T15320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1044.256976][T15320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1044.257169][T15320] bridge_slave_0: entered allmulticast mode
[ 1044.284615][T15320] bridge_slave_0: entered promiscuous mode
[ 1044.321209][T15320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1044.364904][T15320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.365164][T15320] bridge_slave_1: entered allmulticast mode
[ 1044.373160][T15320] bridge_slave_1: entered promiscuous mode
[ 1045.264887][T14914] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1045.351009][T15320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1045.386183][T15320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1045.439628][T15320] team0: Port device team_slave_0 added
[ 1045.443079][T15320] team0: Port device team_slave_1 added
[ 1045.458308][T14914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.458340][T14914] usb 5-1: config 0 has no interfaces?
[ 1045.461049][T14914] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1045.461078][T14914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.461098][T14914] usb 5-1: Product: syz
[ 1045.461112][T14914] usb 5-1: Manufacturer: syz
[ 1045.461125][T14914] usb 5-1: SerialNumber: syz
[ 1045.538119][T14914] usb 5-1: config 0 descriptor??
[ 1045.587293][T15394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3058'.
[ 1045.630853][T15320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1045.630870][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.630894][T15320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1045.633176][T15320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1045.633190][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.633215][T15320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1046.114910][T11370] Bluetooth: hci2: command tx timeout
[ 1046.342742][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[ 1048.322784][T15320] hsr_slave_0: entered promiscuous mode
[ 1048.323715][T15320] hsr_slave_1: entered promiscuous mode
[ 1048.324340][T15320] debugfs: 'hsr0' already exists in 'hsr'
[ 1048.324355][T15320] Cannot create hsr debugfs directory
[ 1051.016482][ T8821] usb 5-1: USB disconnect, device number 33
[ 1053.373493][ T5859] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1054.355526][ T5859] usb 5-1: Using ep0 maxpacket: 32
[ 1055.037393][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.037488][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.164839][ T5859] usb 5-1: device descriptor read/all, error -71
[ 1055.550192][T15449] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1057.224839][T11316] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1057.377334][T11316] usb 5-1: Using ep0 maxpacket: 32
[ 1057.379365][T11316] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 1057.379390][T11316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1057.379408][T11316] usb 5-1: config 0 has no interface number 0
[ 1057.379444][T11316] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1057.383221][T11316] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1057.383246][T11316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.383264][T11316] usb 5-1: Product: syz
[ 1057.383275][T11316] usb 5-1: Manufacturer: syz
[ 1057.383288][T11316] usb 5-1: SerialNumber: syz
[ 1057.393955][T11316] usb 5-1: config 0 descriptor??
[ 1057.408406][T11316] hub 5-1:0.89: bad descriptor, ignoring hub
[ 1057.408440][T11316] hub 5-1:0.89: probe with driver hub failed with error -5
[ 1057.410004][T11316] option 5-1:0.89: GSM modem (1-port) converter detected
[ 1058.274843][T11370] Bluetooth: hci1: command 0x1003 tx timeout
[ 1058.276334][ T5806] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1058.378765][ T5859] usb 5-1: USB disconnect, device number 36
[ 1058.435623][ T5859] option 5-1:0.89: device disconnected
[ 1058.603333][T15320] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1058.724014][T15320] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1059.028076][T15320] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1059.945458][T15320] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1061.535221][T15320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1061.536298][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3085'.
[ 1062.889748][T15320] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.774413][T13929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.774495][T13929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1063.936834][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.941484][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1065.333751][T15320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1066.064972][T15320] veth0_vlan: entered promiscuous mode
[ 1066.118291][T15320] veth1_vlan: entered promiscuous mode
[ 1066.719576][T15320] veth0_macvtap: entered promiscuous mode
[ 1066.733259][T15320] veth1_macvtap: entered promiscuous mode
[ 1066.784810][ T5866] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[ 1067.220594][T15320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1067.236443][ T5866] usb 5-1: not running at top speed; connect to a high speed hub
[ 1067.241868][ T5866] usb 5-1: config 45 has an invalid interface number: 2 but max is 0
[ 1067.241894][ T5866] usb 5-1: config 45 has no interface number 0
[ 1067.241924][ T5866] usb 5-1: config 45 interface 2 has no altsetting 0
[ 1067.268000][T15320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1067.288352][ T5866] usb 5-1: string descriptor 0 read error: -22
[ 1067.288480][ T5866] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1067.288502][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.327766][T13929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.328199][T13929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.328279][T13929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.345036][T13929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.437272][ T5866] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1067.437345][ T5866] dvb-usb: bulk message failed: -22 (3/0)
[ 1067.488559][ T5866] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1067.490781][ T5866] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1067.490814][ T5866] usb 5-1: media controller created
[ 1067.490854][ T5866] dvb-usb: bulk message failed: -22 (5/0)
[ 1067.490888][ T5866] dvb-usb: MAC address reading failed.
[ 1067.519594][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1068.098783][ T5866] dvb-usb: bulk message failed: -22 (6/0)
[ 1068.098970][ T5866] dvb-usb: bulk message failed: -22 (6/0)
[ 1068.099068][ T5866] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1068.125060][ T5866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19
[ 1068.131872][ T5866] dvb-usb: schedule remote query interval to 100 msecs.
[ 1068.131892][ T5866] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1068.310598][ T5866] dvb-usb: bulk message failed: -22 (2/0)
[ 1068.310629][ T5866] dvb-usb: error while querying for an remote control event.
[ 1068.711130][ T5879] dvb-usb: bulk message failed: -22 (2/0)
[ 1068.713898][ T5879] dvb-usb: error while querying for an remote control event.
[ 1069.096345][ T5879] dvb-usb: bulk message failed: -22 (2/0)
[ 1069.096366][ T5879] dvb-usb: error while querying for an remote control event.
[ 1069.207869][ T5879] dvb-usb: bulk message failed: -22 (2/0)
[ 1069.207908][ T5879] dvb-usb: error while querying for an remote control event.
[ 1069.425109][ T5879] dvb-usb: bulk message failed: -22 (2/0)
[ 1069.425140][ T5879] dvb-usb: error while querying for an remote control event.
[ 1070.362095][ T5866] dvb-usb: bulk message failed: -22 (2/0)
[ 1070.362128][ T5866] dvb-usb: error while querying for an remote control event.
[ 1070.464971][ T5866] dvb-usb: bulk message failed: -22 (2/0)
[ 1070.465006][ T5866] dvb-usb: error while querying for an remote control event.
[ 1070.529001][ T5859] usb 5-1: USB disconnect, device number 37
[ 1070.588517][  T243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1070.588531][  T243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1070.674880][T11370] Bluetooth: hci1: command 0x1003 tx timeout
[ 1070.678489][ T5806] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1070.837117][ T5859] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1071.141432][ T9612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1071.141452][ T9612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1071.146905][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3101'.
[ 1071.248370][T15564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1076.777227][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3110'.
[ 1077.097642][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3110'.
[ 1077.224803][T15608] block nbd3: Cannot use ioctl interface on a netlink controlled device.
[ 1077.302740][ T5806] Bluetooth: hci2: unexpected cc 0x0402 length: 61 > 1
[ 1078.983222][T11370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1079.033764][T11370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1079.069418][T11370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1079.083274][T11370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1079.083951][T11370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1079.480151][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'.
[ 1080.246850][T15635] binder: BINDER_SET_CONTEXT_MGR already set
[ 1080.246865][T15635] binder: 15634:15635 ioctl 4018620d 200000004a80 returned -16
[ 1080.676406][ T5901] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[ 1080.767473][T15617] chnl_net:caif_netlink_parms(): no params data found
[ 1080.829544][ T5901] usb 6-1: not running at top speed; connect to a high speed hub
[ 1080.830776][ T5901] usb 6-1: config 45 has an invalid interface number: 2 but max is 0
[ 1080.830800][ T5901] usb 6-1: config 45 has no interface number 0
[ 1080.830836][ T5901] usb 6-1: config 45 interface 2 has no altsetting 0
[ 1080.881443][ T5901] usb 6-1: string descriptor 0 read error: -22
[ 1080.881582][ T5901] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1080.881606][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.962023][ T5901] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1080.962094][ T5901] dvb-usb: bulk message failed: -22 (3/0)
[ 1081.011923][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1081.014071][ T5901] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1081.034797][ T5901] usb 6-1: media controller created
[ 1081.034870][ T5901] dvb-usb: bulk message failed: -22 (5/0)
[ 1081.034934][ T5901] dvb-usb: MAC address reading failed.
[ 1081.037596][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1081.099688][ T5901] dvb-usb: bulk message failed: -22 (6/0)
[ 1081.099898][ T5901] dvb-usb: bulk message failed: -22 (6/0)
[ 1081.099996][ T5901] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1081.154855][ T5806] Bluetooth: hci1: command tx timeout
[ 1081.192974][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20
[ 1081.265684][ T5901] dvb-usb: schedule remote query interval to 100 msecs.
[ 1081.265706][ T5901] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1081.270978][ T5901] usb 6-1: USB disconnect, device number 20
[ 1081.352150][T15617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1081.370101][T15617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1081.370293][T15617] bridge_slave_0: entered allmulticast mode
[ 1081.374166][T15617] bridge_slave_0: entered promiscuous mode
[ 1081.396989][T15617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1081.406895][T15617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.407155][T15617] bridge_slave_1: entered allmulticast mode
[ 1081.485578][T15617] bridge_slave_1: entered promiscuous mode
[ 1081.544334][ T5901] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1083.240321][ T5806] Bluetooth: hci1: command tx timeout
[ 1083.326433][T15617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.359525][T15617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.453554][T15617] team0: Port device team_slave_0 added
[ 1084.486822][T15617] team0: Port device team_slave_1 added
[ 1084.555797][T15617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1084.555815][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.555839][T15617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1084.557931][T15617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.557944][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.557969][T15617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.705157][T15617] hsr_slave_0: entered promiscuous mode
[ 1084.706433][T15617] hsr_slave_1: entered promiscuous mode
[ 1084.707302][T15617] debugfs: 'hsr0' already exists in 'hsr'
[ 1084.707324][T15617] Cannot create hsr debugfs directory
[ 1085.692451][ T5806] Bluetooth: hci1: command tx timeout
[ 1086.984475][T15687] overlayfs: missing 'lowerdir'
[ 1087.022781][T15687] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1087.727193][T11370] Bluetooth: hci1: command tx timeout
[ 1087.728415][T13815] Bluetooth: hci3: command 0x0406 tx timeout
[ 1088.367602][T15696] binder: 15695:15696 ioctl c0306201 0 returned -14
[ 1089.575320][T15617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.512962][T15617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.067236][T15617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.988231][T15617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.516537][T15739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3147'.
[ 1092.522095][T15741] binder: 15740:15741 ioctl c0306201 0 returned -14
[ 1094.239975][T15617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1094.305145][T15617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1094.378426][T15617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1094.654982][T15617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1095.392085][   T12] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 1096.549692][T15617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1096.613371][T15617] 8021q: adding VLAN 0 to HW filter on device team0
[ 1096.651710][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1096.651997][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1096.687600][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1096.692095][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1097.174074][T13815] Bluetooth: hci4: command 0x1003 tx timeout
[ 1097.184366][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1098.635300][T15617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1098.897087][T15617] veth0_vlan: entered promiscuous mode
[ 1098.990794][T15617] veth1_vlan: entered promiscuous mode
[ 1099.740291][T15617] veth0_macvtap: entered promiscuous mode
[ 1099.759382][T15617] veth1_macvtap: entered promiscuous mode
[ 1099.815600][T15805] binder: 15804:15805 ioctl c0306201 0 returned -14
[ 1099.965752][T15617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1099.991019][T15617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1100.002090][T13929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.002315][T13929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.003028][T13929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.003243][T13929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.075045][T15811] input: syz0 as /devices/virtual/input/input21
[ 1101.597704][ T6458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1101.597724][ T6458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1101.732249][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1101.732271][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1104.215423][ T5914] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1104.369966][ T5914] usb 4-1: Using ep0 maxpacket: 32
[ 1104.373823][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1104.398230][ T5914] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1104.398259][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1104.398278][ T5914] usb 4-1: Product: syz
[ 1104.398291][ T5914] usb 4-1: Manufacturer: syz
[ 1104.398304][ T5914] usb 4-1: SerialNumber: syz
[ 1104.515556][ T5914] usb 4-1: config 0 descriptor??
[ 1104.516598][T15827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1104.553737][ T5914] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1104.553759][ T5914] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1104.826913][ T5914] usb 4-1: USB disconnect, device number 36
[ 1105.444822][ T5914] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1105.574840][ T5914] usb 4-1: device descriptor read/64, error -71
[ 1105.834873][ T5914] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1105.975181][ T5914] usb 4-1: device descriptor read/64, error -71
[ 1106.086265][ T5914] usb usb4-port1: attempt power cycle
[ 1107.862802][T15865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3179'.
[ 1108.689843][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3179'.
[ 1112.046469][T14914] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1112.554830][T14914] usb 6-1: Using ep0 maxpacket: 32
[ 1112.556520][T14914] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 1112.556547][T14914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.556569][T14914] usb 6-1: config 0 has no interface number 0
[ 1112.556598][T14914] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1112.558732][T14914] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1112.558759][T14914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.558770][T14914] usb 6-1: Product: syz
[ 1112.558777][T14914] usb 6-1: Manufacturer: syz
[ 1112.558784][T14914] usb 6-1: SerialNumber: syz
[ 1112.650798][T14914] usb 6-1: config 0 descriptor??
[ 1112.676231][T14914] hub 6-1:0.89: bad descriptor, ignoring hub
[ 1112.676253][T14914] hub 6-1:0.89: probe with driver hub failed with error -5
[ 1112.677125][T14914] option 6-1:0.89: GSM modem (1-port) converter detected
[ 1113.371061][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3194'.
[ 1113.551874][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3194'.
[ 1113.926067][T11316] usb 6-1: USB disconnect, device number 21
[ 1113.928495][T11316] option 6-1:0.89: device disconnected
[ 1115.146782][T15925] binder: BINDER_SET_CONTEXT_MGR already set
[ 1115.146793][T15925] binder: 15924:15925 ioctl 4018620d 200000004a80 returned -16
[ 1115.881514][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.881596][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.354887][T14914] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1116.827555][T14914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.827582][T14914] usb 5-1: config 0 has no interfaces?
[ 1116.831979][T14914] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1116.832008][T14914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.832026][T14914] usb 5-1: Product: syz
[ 1116.832040][T14914] usb 5-1: Manufacturer: syz
[ 1116.832054][T14914] usb 5-1: SerialNumber: syz
[ 1116.838173][T14914] usb 5-1: config 0 descriptor??
[ 1119.534483][ T5880] usb 5-1: USB disconnect, device number 38
[ 1125.121593][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3227'.
[ 1126.129068][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3227'.
[ 1128.498785][T16045] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3231'.
[ 1130.283886][T16052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3235'.
[ 1130.575125][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'.
[ 1133.487638][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1138.714841][T11316] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1138.871110][T11316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1138.871141][T11316] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1138.871153][T11316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.949415][T11316] usb 4-1: config 0 descriptor??
[ 1138.950019][T16162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1139.490104][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490142][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490169][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490195][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490219][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490245][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490271][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490296][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490320][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.490343][T11316] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0
[ 1139.599388][T11316] logitech-djreceiver 0003:046D:C71F.0012: collection stack underflow
[ 1139.599421][T11316] logitech-djreceiver 0003:046D:C71F.0012: item 0 1 0 12 parsing failed
[ 1139.600157][T11316] logitech-djreceiver 0003:046D:C71F.0012: logi_dj_probe: parse failed
[ 1139.636405][T11316] logitech-djreceiver 0003:046D:C71F.0012: probe with driver logitech-djreceiver failed with error -22
[ 1139.706407][T11316] usb 4-1: USB disconnect, device number 40
[ 1143.525852][T11316] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1143.736978][T16237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3266'.
[ 1143.840437][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3266'.
[ 1143.938140][T11316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1143.938189][T11316] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1143.938221][T11316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.981734][T11316] usb 5-1: config 0 descriptor??
[ 1143.982452][T16232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1145.568332][T11316] hid_parser_main: 357 callbacks suppressed
[ 1145.568356][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568388][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568414][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568440][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568467][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568491][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568515][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568541][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568568][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.568595][T11316] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0
[ 1145.825302][T16252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3269'.
[ 1146.273914][T11316] usb 5-1: USB disconnect, device number 39
[ 1161.767331][T16347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3294'.
[ 1162.112318][ T5879] hid_parser_main: 470 callbacks suppressed
[ 1162.112334][ T5879] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[ 1162.135138][ T5879] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1162.324967][ T5914] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1163.365079][ T5914] usb 5-1: Using ep0 maxpacket: 32
[ 1163.372347][ T5914] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 1163.372375][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1163.372394][ T5914] usb 5-1: config 0 has no interface number 0
[ 1163.372435][ T5914] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1163.382768][ T5914] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1163.382797][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.382817][ T5914] usb 5-1: Product: syz
[ 1163.382830][ T5914] usb 5-1: Manufacturer: syz
[ 1163.382845][ T5914] usb 5-1: SerialNumber: syz
[ 1163.469240][ T5914] usb 5-1: config 0 descriptor??
[ 1163.483990][ T5914] hub 5-1:0.89: bad descriptor, ignoring hub
[ 1163.484028][ T5914] hub 5-1:0.89: probe with driver hub failed with error -5
[ 1163.513378][ T5914] option 5-1:0.89: GSM modem (1-port) converter detected
[ 1164.064083][ T5806] Bluetooth: hci2: command 0x0406 tx timeout
[ 1164.200207][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3298'.
[ 1164.710292][ T8821] usb 5-1: USB disconnect, device number 40
[ 1164.712031][ T8821] option 5-1:0.89: device disconnected
[ 1164.752808][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'.
[ 1165.209631][T16373] input: syz0 as /devices/virtual/input/input22
[ 1166.877980][T16391] fuse: Bad value for 'fd'
[ 1167.170395][T16328] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1168.098682][T16328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1168.098712][T16328] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1168.098724][T16328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.302660][T16328] usb 6-1: config 0 descriptor??
[ 1168.317333][T16386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1168.369671][T16398] input: syz0 as /devices/virtual/input/input23
[ 1168.586734][T16328] usbhid 6-1:0.0: can't add hid device: -71
[ 1168.586830][T16328] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1168.632987][T16328] usb 6-1: USB disconnect, device number 22
[ 1172.598660][T13815] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1177.325907][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.325975][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.063533][  T134] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 1178.211549][  T134] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1180.035058][ T5806] Bluetooth: hci4: command 0x1003 tx timeout
[ 1180.035410][T13815] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1185.914833][ T8821] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 1186.079843][ T8821] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1187.710402][T16617] fuse: Bad value for 'fd'
[ 1196.931448][T16704] binder: 16703:16704 ioctl 4018620d 0 returned -22
[ 1201.326274][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1201.329399][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1201.329484][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1201.329564][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1201.329634][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1201.329703][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1201.879356][T13815] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1203.325115][ T5806] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1204.631045][T16777] binder: 16775:16777 ioctl 4018620d 0 returned -22
[ 1204.735654][T16779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3411'.
[ 1205.158652][T13815] Bluetooth: hci1: command 0x0406 tx timeout
[ 1208.441130][T16812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3422'.
[ 1210.065476][ T8821] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1210.959288][T13815] Bluetooth: hci4: command 0x1003 tx timeout
[ 1210.967973][T11370] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1211.030753][ T8821] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1211.030784][ T8821] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1211.030802][ T8821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1211.030850][ T8821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1211.030876][ T8821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1211.032831][ T8821] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1211.032858][ T8821] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1211.032887][ T8821] usb 3-1: Product: syz
[ 1211.032901][ T8821] usb 3-1: Manufacturer: syz
[ 1211.254564][ T8821] cdc_wdm 3-1:1.0: skipping garbage
[ 1211.256965][ T8821] cdc_wdm 3-1:1.0: skipping garbage
[ 1211.306780][ T8821] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1211.306890][ T8821] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1212.542733][T14914] usb 3-1: USB disconnect, device number 40
[ 1212.933577][T16848] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3433'.
[ 1212.970385][T16850] loop8: detected capacity change from 0 to 8
[ 1212.971728][T16850] Dev loop8: unable to read RDB block 8
[ 1212.971772][T16850]  loop8: unable to read partition table
[ 1212.972077][T16850] loop8: partition table beyond EOD, truncated
[ 1212.972113][T16850] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1213.715309][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'.
[ 1215.621840][T16880] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3445'.
[ 1215.801030][T16884] loop8: detected capacity change from 0 to 8
[ 1215.808772][T16884] Dev loop8: unable to read RDB block 8
[ 1215.808818][T16884]  loop8: unable to read partition table
[ 1215.809016][T16884] loop8: partition table beyond EOD, truncated
[ 1215.809034][T16884] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1217.671377][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3449'.
[ 1217.979587][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3449'.
[ 1220.594890][ T5901] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1221.215477][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1221.215506][ T5901] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1221.215526][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1221.215575][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1221.215600][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1221.282355][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1221.282384][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1221.282404][ T5901] usb 3-1: Product: syz
[ 1221.282416][ T5901] usb 3-1: Manufacturer: syz
[ 1221.362804][ T5901] cdc_wdm 3-1:1.0: skipping garbage
[ 1221.362824][ T5901] cdc_wdm 3-1:1.0: skipping garbage
[ 1221.799777][ T5901] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1221.799797][ T5901] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1221.947926][T16948] netlink: 192 bytes leftover after parsing attributes in process `syz.5.3464'.
[ 1221.998001][ T5880] usb 3-1: USB disconnect, device number 41
[ 1223.853015][T16972] input: syz0 as /devices/virtual/input/input25
[ 1225.687937][T16998] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3483'.
[ 1225.909537][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3486'.
[ 1226.596205][T17013] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1227.230719][ T8821] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[ 1227.261855][ T8821] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1227.584711][ T8821] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1227.734711][ T8821] usb 6-1: Using ep0 maxpacket: 32
[ 1227.736872][ T8821] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 1227.736900][ T8821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1227.736918][ T8821] usb 6-1: config 0 has no interface number 0
[ 1227.736958][ T8821] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1227.739522][ T8821] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1227.739551][ T8821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.739570][ T8821] usb 6-1: Product: syz
[ 1227.739583][ T8821] usb 6-1: Manufacturer: syz
[ 1227.739596][ T8821] usb 6-1: SerialNumber: syz
[ 1227.753534][ T8821] usb 6-1: config 0 descriptor??
[ 1227.830852][ T8821] hub 6-1:0.89: bad descriptor, ignoring hub
[ 1227.830889][ T8821] hub 6-1:0.89: probe with driver hub failed with error -5
[ 1227.832521][ T8821] option 6-1:0.89: GSM modem (1-port) converter detected
[ 1228.153719][ T5879] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[ 1228.367007][ T5880] usb 6-1: USB disconnect, device number 23
[ 1228.368304][ T5880] option 6-1:0.89: device disconnected
[ 1228.416489][ T8821] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1228.564786][ T8821] usb 5-1: Using ep0 maxpacket: 32
[ 1228.568737][ T8821] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 1228.568753][ T8821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.568762][ T8821] usb 5-1: config 0 has no interface number 0
[ 1228.568784][ T8821] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1228.605423][ T8821] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1228.605454][ T8821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.605472][ T8821] usb 5-1: Product: syz
[ 1228.605485][ T8821] usb 5-1: Manufacturer: syz
[ 1228.605498][ T8821] usb 5-1: SerialNumber: syz
[ 1228.636864][ T8821] usb 5-1: config 0 descriptor??
[ 1228.707762][ T8821] hub 5-1:0.89: bad descriptor, ignoring hub
[ 1228.707812][ T8821] hub 5-1:0.89: probe with driver hub failed with error -5
[ 1229.105254][ T5880] usb 5-1: USB disconnect, device number 41
[ 1230.626474][ T5879] hid-generic 0000:0000:0000.0017: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1231.932449][T11370] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1234.124754][T14914] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[ 1234.507981][T11370] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1234.656316][T14914] usb 4-1: not running at top speed; connect to a high speed hub
[ 1234.658493][T14914] usb 4-1: config 45 has an invalid interface number: 2 but max is 0
[ 1234.658527][T14914] usb 4-1: config 45 has no interface number 0
[ 1234.658557][T14914] usb 4-1: config 45 interface 2 has no altsetting 0
[ 1234.786194][T14914] usb 4-1: string descriptor 0 read error: -22
[ 1234.786332][T14914] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1234.786355][T14914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.847878][T14914] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1234.847954][T14914] dvb-usb: bulk message failed: -22 (3/0)
[ 1234.874375][T14914] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1234.885604][T14914] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1234.885667][T14914] usb 4-1: media controller created
[ 1234.885735][T14914] dvb-usb: bulk message failed: -22 (5/0)
[ 1234.885801][T14914] dvb-usb: MAC address reading failed.
[ 1234.935594][T14914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1234.969213][T14914] dvb-usb: bulk message failed: -22 (6/0)
[ 1234.969412][T14914] dvb-usb: bulk message failed: -22 (6/0)
[ 1234.969510][T14914] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1235.392887][T14914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26
[ 1235.778766][T14914] dvb-usb: schedule remote query interval to 100 msecs.
[ 1235.778781][T14914] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1235.884781][T14914] dvb-usb: bulk message failed: -22 (2/0)
[ 1235.884803][T14914] dvb-usb: error while querying for an remote control event.
[ 1236.030587][T14914] dvb-usb: bulk message failed: -22 (2/0)
[ 1236.030614][T14914] dvb-usb: error while querying for an remote control event.
[ 1236.107605][T14914] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 1236.119419][T14914] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1236.135248][T14914] dvb-usb: bulk message failed: -22 (2/0)
[ 1236.135268][T14914] dvb-usb: error while querying for an remote control event.
[ 1236.219277][T14914] usb 4-1: USB disconnect, device number 41
[ 1236.346459][T14914] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1236.487149][ T8821] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1236.634818][ T8821] usb 3-1: Using ep0 maxpacket: 32
[ 1236.636606][ T8821] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[ 1236.636621][ T8821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1236.636632][ T8821] usb 3-1: config 0 has no interface number 0
[ 1236.636654][ T8821] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1236.646387][ T8821] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1236.646415][ T8821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.646434][ T8821] usb 3-1: Product: syz
[ 1236.646447][ T8821] usb 3-1: Manufacturer: syz
[ 1236.646461][ T8821] usb 3-1: SerialNumber: syz
[ 1236.669364][ T8821] usb 3-1: config 0 descriptor??
[ 1236.681959][ T8821] hub 3-1:0.89: bad descriptor, ignoring hub
[ 1236.681994][ T8821] hub 3-1:0.89: probe with driver hub failed with error -5
[ 1236.695138][ T8821] option 3-1:0.89: GSM modem (1-port) converter detected
[ 1238.022029][T16328] usb 3-1: USB disconnect, device number 42
[ 1238.024206][T16328] option 3-1:0.89: device disconnected
[ 1238.498727][T17101] input: syz0 as /devices/virtual/input/input27
[ 1238.760136][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.760201][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.225171][ T5901] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[ 1239.396180][ T5901] usb 3-1: not running at top speed; connect to a high speed hub
[ 1239.397466][ T5901] usb 3-1: config 45 has an invalid interface number: 2 but max is 0
[ 1239.397490][ T5901] usb 3-1: config 45 has no interface number 0
[ 1239.397520][ T5901] usb 3-1: config 45 interface 2 has no altsetting 0
[ 1239.401008][ T5901] usb 3-1: string descriptor 0 read error: -22
[ 1239.401142][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1239.401164][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.641650][ T5901] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1240.641699][ T5901] dvb-usb: bulk message failed: -22 (3/0)
[ 1240.717792][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1240.719048][ T5901] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1240.719110][ T5901] usb 3-1: media controller created
[ 1240.719179][ T5901] dvb-usb: bulk message failed: -22 (5/0)
[ 1240.719242][ T5901] dvb-usb: MAC address reading failed.
[ 1240.721978][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1240.837435][ T5901] dvb-usb: bulk message failed: -22 (6/0)
[ 1240.837556][ T5901] dvb-usb: bulk message failed: -22 (6/0)
[ 1240.837608][ T5901] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1240.842630][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28
[ 1241.232287][ T5901] dvb-usb: schedule remote query interval to 100 msecs.
[ 1241.232308][ T5901] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1241.334816][ T5880] dvb-usb: bulk message failed: -22 (2/0)
[ 1241.334837][ T5880] dvb-usb: error while querying for an remote control event.
[ 1241.836088][T16328] dvb-usb: bulk message failed: -22 (2/0)
[ 1241.844842][T16328] dvb-usb: error while querying for an remote control event.
[ 1241.930322][T14914] usb 3-1: USB disconnect, device number 43
[ 1242.053341][T14914] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1242.739726][T17137] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3523'.
[ 1243.029617][T17152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1243.029634][T17152] IPv6: NLM_F_CREATE should be set when creating new route
[ 1243.056225][T17152] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3529'.
[ 1243.845669][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'.
[ 1244.095524][T17188] ieee802154 phy0 wpan0: encryption failed: -22
[ 1245.088651][T17233] veth1: entered promiscuous mode
[ 1245.091687][T17233] veth1: left promiscuous mode
[ 1245.177434][T17242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3564'.
[ 1245.265610][T17242] syz_tun: entered allmulticast mode
[ 1245.387235][T17235] syz_tun: left allmulticast mode
[ 1245.643811][T17249] Illegal XDP return value 68 on prog  (id 259) dev syz_tun, expect packet loss!
[ 1246.034193][T11370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1246.054288][T11370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1246.059290][T11370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1246.070364][T11370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1246.072206][T11370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1246.099615][T17269] netlink: 'syz.3.3577': attribute type 1 has an invalid length.
[ 1246.099637][T17269] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3577'.
[ 1246.686583][T17281] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3578'.
[ 1246.775143][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3578'.
[ 1246.858253][ T7468] bond0: (slave syz_tun): Releasing backup interface
[ 1247.054359][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'.
[ 1247.976291][T17323] batadv_slave_0: entered promiscuous mode
[ 1248.115085][T11370] Bluetooth: hci4: command tx timeout
[ 1248.903625][T17322] batadv_slave_0: left promiscuous mode
[ 1249.068980][T17266] chnl_net:caif_netlink_parms(): no params data found
[ 1249.447025][T17266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1249.453907][T17266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1249.454177][T17266] bridge_slave_0: entered allmulticast mode
[ 1249.477453][T17266] bridge_slave_0: entered promiscuous mode
[ 1249.481109][T17266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1249.481297][T17266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1249.481543][T17266] bridge_slave_1: entered allmulticast mode
[ 1249.484126][T17266] bridge_slave_1: entered promiscuous mode
[ 1249.569131][T17266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1249.573149][T17266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1249.638178][T17363] ieee802154 phy0 wpan0: encryption failed: -22
[ 1249.670232][T17266] team0: Port device team_slave_0 added
[ 1249.673891][T17266] team0: Port device team_slave_1 added
[ 1249.888419][T17371] netlink: 'syz.4.3604': attribute type 4 has an invalid length.
[ 1249.888440][T17371] netlink: 'syz.4.3604': attribute type 1 has an invalid length.
[ 1249.888452][T17371] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3604'.
[ 1249.967109][T17266] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1249.967127][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1249.967164][T17266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1250.048122][T17266] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1250.048139][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1250.048161][T17266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1250.170814][T17266] hsr_slave_0: entered promiscuous mode
[ 1250.172180][T17266] hsr_slave_1: entered promiscuous mode
[ 1250.173095][T17266] debugfs: 'hsr0' already exists in 'hsr'
[ 1250.173118][T17266] Cannot create hsr debugfs directory
[ 1250.198458][T11370] Bluetooth: hci4: command tx timeout
[ 1251.406249][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'.
[ 1251.507256][T11370] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1251.572961][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3623'.
[ 1251.598301][T17266] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1251.661027][T17411] hsr0: entered promiscuous mode
[ 1251.661328][T17413] syzkaller0: entered promiscuous mode
[ 1251.661347][T17413] syzkaller0: entered allmulticast mode
[ 1252.275046][T11370] Bluetooth: hci4: command tx timeout
[ 1252.438873][T17266] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.540560][T17444] syzkaller0: entered promiscuous mode
[ 1252.540586][T17444] syzkaller0: entered allmulticast mode
[ 1252.543069][T17448] syzkaller1: entered promiscuous mode
[ 1252.543093][T17448] syzkaller1: entered allmulticast mode
[ 1252.567876][T17452] tipc: Started in network mode
[ 1252.567906][T17452] tipc: Node identity b2f23a34f4ec, cluster identity 4711
[ 1252.568275][T17452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1252.609165][T17435] tipc: Resetting bearer <eth:syzkaller0>
[ 1253.203903][T17435] tipc: Disabling bearer <eth:syzkaller0>
[ 1253.943812][T17266] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1254.010334][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'.
[ 1254.354742][T11370] Bluetooth: hci4: command tx timeout
[ 1254.844790][T17510] nbd18: detected capacity change from 0 to 63
[ 1255.070411][T17266] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1255.177246][T11370] block nbd18: Receive control failed (result -104)
[ 1255.291030][T17519] team_slave_0: entered promiscuous mode
[ 1255.291083][T17519] team_slave_1: entered promiscuous mode
[ 1255.291285][T17519] vlan2: entered promiscuous mode
[ 1255.291299][T17519] team0: entered promiscuous mode
[ 1255.859679][T17543] tipc: Started in network mode
[ 1255.859713][T17543] tipc: Node identity 364b979c1dc9, cluster identity 4711
[ 1255.859891][T17543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1255.878592][T17543] syzkaller0: entered promiscuous mode
[ 1255.878618][T17543] syzkaller0: entered allmulticast mode
[ 1256.182880][T17543] tipc: Resetting bearer <eth:syzkaller0>
[ 1256.256265][T17558] netlink: 'syz.6.3674': attribute type 1 has an invalid length.
[ 1256.256288][T17558] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3674'.
[ 1256.264170][T17550] : entered promiscuous mode
[ 1256.367151][T17542] tipc: Resetting bearer <eth:syzkaller0>
[ 1256.525982][T17542] tipc: Disabling bearer <eth:syzkaller0>
[ 1257.493571][T17266] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1257.583041][T17266] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1257.630188][T17266] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1257.673976][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'.
[ 1257.692450][T17266] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1257.720514][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'.
[ 1257.721487][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'.
[ 1257.722888][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'.
[ 1257.946435][T17266] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1257.950211][    C0] vcan0: j1939_tp_rxtimer: 0xffff888061274800: rx timeout, send abort
[ 1257.954248][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061274800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1258.017584][T17266] 8021q: adding VLAN 0 to HW filter on device team0
[ 1258.041936][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1258.042135][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1258.084810][T16120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1258.084932][T16120] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1258.141302][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'.
[ 1258.141326][T17614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3697'.
[ 1258.747988][T17638] syzkaller0: entered promiscuous mode
[ 1258.748013][T17638] syzkaller0: entered allmulticast mode
[ 1259.209236][T17266] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1260.043202][T17691] bond0: entered promiscuous mode
[ 1260.043218][T17691] bond_slave_0: entered promiscuous mode
[ 1260.043356][T17691] bond_slave_1: entered promiscuous mode
[ 1260.055313][T17691] batadv0: entered promiscuous mode
[ 1260.056435][T17691] debugfs: 'hsr0' already exists in 'hsr'
[ 1260.056459][T17691] Cannot create hsr debugfs directory
[ 1260.058560][T17691] 8021q: adding VLAN 0 to HW filter on device hsr0
[ 1260.179408][T17266] veth0_vlan: entered promiscuous mode
[ 1260.188258][T17266] veth1_vlan: entered promiscuous mode
[ 1260.247003][T17266] veth0_macvtap: entered promiscuous mode
[ 1260.250927][T17266] veth1_macvtap: entered promiscuous mode
[ 1260.270685][T17266] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1260.283576][T17266] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1260.309136][ T3553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1260.309464][ T3553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1260.309502][ T3553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1260.309532][ T3553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1260.734064][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1260.734083][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1260.881401][ T6458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1260.881421][ T6458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.277900][T17722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3734'.
[ 1261.478766][T17735] ieee802154 phy1 wpan1: encryption failed: -22
[ 1261.941949][T17748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1262.234125][T17764] sctp: [Deprecated]: syz.3.3751 (pid 17764) Use of int in max_burst socket option.
[ 1262.234125][T17764] Use struct sctp_assoc_value instead
[ 1262.707345][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'.
[ 1262.709098][T17774] syzkaller0: entered promiscuous mode
[ 1262.709121][T17774] syzkaller0: entered allmulticast mode
[ 1262.982371][T17788] ieee802154 phy1 wpan1: encryption failed: -22
[ 1263.170502][T17793] netlink: 'syz.6.3764': attribute type 4 has an invalid length.
[ 1263.170524][T17793] netlink: 'syz.6.3764': attribute type 1 has an invalid length.
[ 1263.170538][T17793] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3764'.
[ 1264.157412][T17819] ieee802154 phy1 wpan1: encryption failed: -22
[ 1264.522903][T17841] netlink: 'syz.4.3783': attribute type 3 has an invalid length.
[ 1264.522926][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3783'.
[ 1264.825670][T17853] ieee802154 phy1 wpan1: encryption failed: -22
[ 1265.586674][T17881] nbd19: detected capacity change from 0 to 63
[ 1265.655036][T17895] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3805'.
[ 1266.022299][T11370] block nbd19: Receive control failed (result -104)
[ 1266.117693][T17919] ip6gre1: entered promiscuous mode
[ 1266.225146][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3818'.
[ 1266.225201][T17924] bond0: Unable to set up delay as MII monitoring is disabled
[ 1266.463169][T17935] netlink: 'syz.3.3822': attribute type 1 has an invalid length.
[ 1266.463192][T17935] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3822'.
[ 1266.710099][T17939] netlink: 'syz.6.3813': attribute type 3 has an invalid length.
[ 1266.756230][T17912] netlink: 'syz.6.3813': attribute type 5 has an invalid length.
[ 1266.817860][T17949] netlink: 'syz.2.3828': attribute type 4 has an invalid length.
[ 1266.817881][T17949] netlink: 'syz.2.3828': attribute type 1 has an invalid length.
[ 1266.817893][T17949] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3828'.
[ 1267.207333][T17954] nbd20: detected capacity change from 0 to 63
[ 1267.222930][T11370] block nbd20: Receive control failed (result -104)
[ 1267.337618][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3837'.
[ 1267.965002][T17991] nbd21: detected capacity change from 0 to 63
[ 1267.970445][T18004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3853'.
[ 1267.983958][T11370] block nbd21: Receive control failed (result -104)
[ 1268.217700][T18018] netlink: 'syz.3.3858': attribute type 4 has an invalid length.
[ 1268.217721][T18018] netlink: 'syz.3.3858': attribute type 1 has an invalid length.
[ 1268.217739][T18018] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3858'.
[ 1268.732376][T18040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3868'.
[ 1269.305120][T18071] syzkaller0: entered promiscuous mode
[ 1269.305146][T18071] syzkaller0: entered allmulticast mode
[ 1269.741045][T18085] netlink: 'syz.4.3888': attribute type 11 has an invalid length.
[ 1269.741068][T18085] netlink: 'syz.4.3888': attribute type 23 has an invalid length.
[ 1269.741081][T18085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3888'.
[ 1271.484821][T18165] netlink: 'syz.5.3925': attribute type 4 has an invalid length.
[ 1271.484843][T18165] netlink: 'syz.5.3925': attribute type 1 has an invalid length.
[ 1271.484863][T18165] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3925'.
[ 1273.459912][T18245] netlink: 'syz.4.3958': attribute type 4 has an invalid length.
[ 1273.459934][T18245] netlink: 'syz.4.3958': attribute type 1 has an invalid length.
[ 1273.459946][T18245] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3958'.
[ 1274.970670][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3978'.
[ 1275.641728][T18314] netlink: 'syz.5.3987': attribute type 4 has an invalid length.
[ 1275.642443][T18314] netlink: 'syz.5.3987': attribute type 1 has an invalid length.
[ 1275.642459][T18314] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3987'.
[ 1276.248516][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3991'.
[ 1276.434851][T13815] Bluetooth: hci4: command 0x0405 tx timeout
[ 1277.019007][T18356] syzkaller1: entered promiscuous mode
[ 1277.019033][T18356] syzkaller1: entered allmulticast mode
[ 1277.433300][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4007'.
[ 1277.484531][T18368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1277.542891][T18360] tipc: Resetting bearer <eth:syzkaller0>
[ 1277.569009][T18372] syzkaller0: entered promiscuous mode
[ 1277.569036][T18372] syzkaller0: entered allmulticast mode
[ 1277.700680][T18389] netlink: 'syz.6.4013': attribute type 4 has an invalid length.
[ 1277.700704][T18389] netlink: 'syz.6.4013': attribute type 1 has an invalid length.
[ 1277.700717][T18389] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4013'.
[ 1277.787258][T18359] tipc: Resetting bearer <eth:syzkaller0>
[ 1277.965535][T18359] tipc: Disabling bearer <eth:syzkaller0>
[ 1278.759823][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4023'.
[ 1278.866607][T18423] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4025'.
[ 1279.290731][T18436] tipc: Started in network mode
[ 1279.290759][T18436] tipc: Node identity a6ff6ff0208d, cluster identity 4711
[ 1279.290923][T18436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1279.292975][T18436] syzkaller0: entered promiscuous mode
[ 1279.292995][T18436] syzkaller0: entered allmulticast mode
[ 1279.512369][T18441] tipc: Resetting bearer <eth:syzkaller0>
[ 1279.581900][T18434] tipc: Resetting bearer <eth:syzkaller0>
[ 1279.624045][T18448] netlink: 'syz.3.4036': attribute type 4 has an invalid length.
[ 1279.624060][T18448] netlink: 'syz.3.4036': attribute type 1 has an invalid length.
[ 1279.624067][T18448] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4036'.
[ 1279.692426][T18451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4037'.
[ 1279.863350][T18434] tipc: Disabling bearer <eth:syzkaller0>
[ 1280.987775][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4054'.
[ 1281.255119][T18504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1281.256087][T18504] syzkaller0: entered promiscuous mode
[ 1281.256110][T18504] syzkaller0: entered allmulticast mode
[ 1281.511511][T18512] tipc: Resetting bearer <eth:syzkaller0>
[ 1281.616005][T18503] tipc: Resetting bearer <eth:syzkaller0>
[ 1281.785553][T18503] tipc: Disabling bearer <eth:syzkaller0>
[ 1281.934390][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4072'.
[ 1285.524868][ T8733] block nbd18: Possible stuck request ffff88803de37000: control (read@0,1024B). Runtime 30 seconds
[ 1285.528076][ T8733] block nbd18: Possible stuck request ffff88803de371c0: control (read@1024,1024B). Runtime 30 seconds
[ 1285.528116][ T8733] block nbd18: Possible stuck request ffff88803de37380: control (read@2048,1024B). Runtime 30 seconds
[ 1285.528142][ T8733] block nbd18: Possible stuck request ffff88803de37540: control (read@3072,1024B). Runtime 30 seconds
[ 1286.821256][T18704] netlink: 'syz.6.4140': attribute type 4 has an invalid length.
[ 1286.821277][T18704] netlink: 'syz.6.4140': attribute type 1 has an invalid length.
[ 1286.821290][T18704] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4140'.
[ 1287.705925][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4153'.
[ 1288.039574][T18738] tipc: Started in network mode
[ 1288.039605][T18738] tipc: Node identity 728fac3840c5, cluster identity 4711
[ 1288.039774][T18738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1288.126968][T18736] tipc: Resetting bearer <eth:syzkaller0>
[ 1288.343356][T18740] syzkaller0: entered promiscuous mode
[ 1288.343378][T18740] syzkaller0: entered allmulticast mode
[ 1288.406739][T18735] tipc: Resetting bearer <eth:syzkaller0>
[ 1288.626566][T18735] tipc: Disabling bearer <eth:syzkaller0>
[ 1288.905955][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4168'.
[ 1289.904969][T18814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1290.165951][T18814] tipc: Resetting bearer <eth:syzkaller0>
[ 1290.166501][T18817] syzkaller0: entered promiscuous mode
[ 1290.166524][T18817] syzkaller0: entered allmulticast mode
[ 1290.263810][T18805] tipc: Resetting bearer <eth:syzkaller0>
[ 1290.415858][T18805] tipc: Disabling bearer <eth:syzkaller0>
[ 1290.581088][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'.
[ 1291.289561][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'.
[ 1291.289587][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'.
[ 1291.291983][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4202'.
[ 1292.347824][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4216'.
[ 1293.033177][T18927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1293.048907][T18923] tipc: Resetting bearer <eth:syzkaller0>
[ 1293.365346][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4229'.
[ 1293.430033][T18928] syzkaller0: entered promiscuous mode
[ 1293.430059][T18928] syzkaller0: entered allmulticast mode
[ 1293.550525][T18922] tipc: Resetting bearer <eth:syzkaller0>
[ 1293.725997][T18922] tipc: Disabling bearer <eth:syzkaller0>
[ 1294.149445][T18967] syzkaller0: entered promiscuous mode
[ 1294.149470][T18967] syzkaller0: entered allmulticast mode
[ 1294.405310][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'.
[ 1295.764876][ T8733] block nbd19: Possible stuck request ffff8880894f0000: control (read@0,1024B). Runtime 30 seconds
[ 1295.764916][ T8733] block nbd19: Possible stuck request ffff8880894f01c0: control (read@1024,1024B). Runtime 30 seconds
[ 1295.764931][ T8733] block nbd19: Possible stuck request ffff8880894f0380: control (read@2048,1024B). Runtime 30 seconds
[ 1295.764946][ T8733] block nbd19: Possible stuck request ffff8880894f0540: control (read@3072,1024B). Runtime 30 seconds
[ 1297.682977][ T8733] block nbd20: Possible stuck request ffff888057645080: control (read@0,1024B). Runtime 30 seconds
[ 1297.683013][ T8733] block nbd20: Possible stuck request ffff888057645240: control (read@1024,1024B). Runtime 30 seconds
[ 1297.683028][ T8733] block nbd20: Possible stuck request ffff888057645400: control (read@2048,1024B). Runtime 30 seconds
[ 1297.683043][ T8733] block nbd20: Possible stuck request ffff8880576455c0: control (read@3072,1024B). Runtime 30 seconds
[ 1298.328091][   T32] block nbd21: Possible stuck request ffff888059597000: control (read@0,1024B). Runtime 30 seconds
[ 1298.328136][   T32] block nbd21: Possible stuck request ffff8880595971c0: control (read@1024,1024B). Runtime 30 seconds
[ 1298.328161][   T32] block nbd21: Possible stuck request ffff888059597380: control (read@2048,1024B). Runtime 30 seconds
[ 1298.328185][   T32] block nbd21: Possible stuck request ffff888059597540: control (read@3072,1024B). Runtime 30 seconds
[ 1300.213723][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1307.538998][T13815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1307.542149][T13815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1307.543391][T13815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1307.544341][T13815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1307.553813][T13815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1308.777338][T19000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1308.800260][T19008] syzkaller0: entered promiscuous mode
[ 1308.800286][T19008] syzkaller0: entered allmulticast mode
[ 1308.818033][T19014] tipc: Resetting bearer <eth:syzkaller0>
[ 1308.845041][T18999] tipc: Resetting bearer <eth:syzkaller0>
[ 1309.050041][T18999] tipc: Disabling bearer <eth:syzkaller0>
[ 1309.253428][T13815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1309.271801][T13815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1309.274469][T13815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1309.299551][T13815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1309.300215][T13815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1309.634959][T11370] Bluetooth: hci5: command tx timeout
[ 1310.079959][T13815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1310.083664][T13815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1310.094991][T13815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1310.100432][T13815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1310.105272][T13815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1310.386454][T13815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1310.415564][T13815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1310.420811][T13815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1310.446428][T13815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1310.447111][T13815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1311.307491][T10331] bond0: (slave syz_tun): Releasing backup interface
[ 1311.338799][T11370] Bluetooth: hci6: command tx timeout
[ 1311.728390][T11370] Bluetooth: hci5: command tx timeout
[ 1312.125612][ T6458] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.205021][T11370] Bluetooth: hci4: command tx timeout
[ 1312.468061][ T6458] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.514848][T11370] Bluetooth: hci7: command tx timeout
[ 1312.828863][ T6458] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.177843][ T6458] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.288308][T19017] chnl_net:caif_netlink_parms(): no params data found
[ 1313.394717][T11370] Bluetooth: hci6: command tx timeout
[ 1313.397826][T19104] netlink: 'syz.4.4287': attribute type 1 has an invalid length.
[ 1313.397844][T19104] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4287'.
[ 1313.430885][T19030] chnl_net:caif_netlink_parms(): no params data found
[ 1313.768822][T19040] chnl_net:caif_netlink_parms(): no params data found
[ 1313.794933][T11370] Bluetooth: hci5: command tx timeout
[ 1313.835105][T19017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1313.836149][T19017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.836717][T19017] bridge_slave_0: entered allmulticast mode
[ 1313.839322][T19017] bridge_slave_0: entered promiscuous mode
[ 1313.950640][T19017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1313.950751][T19017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1313.951261][T19017] bridge_slave_1: entered allmulticast mode
[ 1313.953812][T19017] bridge_slave_1: entered promiscuous mode
[ 1314.159516][T19030] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1314.159634][T19030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.159878][T19030] bridge_slave_0: entered allmulticast mode
[ 1314.162854][T19030] bridge_slave_0: entered promiscuous mode
[ 1314.193656][T19044] chnl_net:caif_netlink_parms(): no params data found
[ 1314.227868][T19017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1314.254872][T19030] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1314.254993][T19030] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.255262][T19030] bridge_slave_1: entered allmulticast mode
[ 1314.257993][T19030] bridge_slave_1: entered promiscuous mode
[ 1314.283447][T11370] Bluetooth: hci4: command tx timeout
[ 1314.322732][T19017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1314.426547][ T6458] bridge_slave_1: left allmulticast mode
[ 1314.426574][ T6458] bridge_slave_1: left promiscuous mode
[ 1314.426798][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.487860][ T6458] bridge_slave_0: left allmulticast mode
[ 1314.487893][ T6458] bridge_slave_0: left promiscuous mode
[ 1314.492162][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.594858][T11370] Bluetooth: hci7: command tx timeout
[ 1315.326778][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1315.406967][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1315.447153][ T6458] bond0 (unregistering): Released all slaves
[ 1315.474758][T11370] Bluetooth: hci6: command tx timeout
[ 1315.653662][T19030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1315.654466][ T8733] block nbd18: Possible stuck request ffff88803de37000: control (read@0,1024B). Runtime 60 seconds
[ 1315.654505][ T8733] block nbd18: Possible stuck request ffff88803de371c0: control (read@1024,1024B). Runtime 60 seconds
[ 1315.654529][ T8733] block nbd18: Possible stuck request ffff88803de37380: control (read@2048,1024B). Runtime 60 seconds
[ 1315.657559][ T8733] block nbd18: Possible stuck request ffff88803de37540: control (read@3072,1024B). Runtime 60 seconds
[ 1315.727014][ T6458] tipc: Left network mode
[ 1315.731632][T19017] team0: Port device team_slave_0 added
[ 1315.736195][T19030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1315.737062][T19040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1315.737242][T19040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1315.737487][T19040] bridge_slave_0: entered allmulticast mode
[ 1315.746154][T19040] bridge_slave_0: entered promiscuous mode
[ 1315.793772][T19017] team0: Port device team_slave_1 added
[ 1315.793983][T19040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1315.794339][T19040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1315.797716][T19040] bridge_slave_1: entered allmulticast mode
[ 1315.801025][T19040] bridge_slave_1: entered promiscuous mode
[ 1315.875409][T11370] Bluetooth: hci5: command tx timeout
[ 1315.974326][T19030] team0: Port device team_slave_0 added
[ 1316.232309][T19030] team0: Port device team_slave_1 added
[ 1316.233171][T19017] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1316.233182][T19017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.233201][T19017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1316.290385][T19040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1316.293870][T19044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1316.293990][T19044] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1316.294249][T19044] bridge_slave_0: entered allmulticast mode
[ 1316.302751][T19044] bridge_slave_0: entered promiscuous mode
[ 1316.329252][T19017] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1316.329278][T19017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.329302][T19017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1316.355900][T11370] Bluetooth: hci4: command tx timeout
[ 1316.440124][T19040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1316.460766][T19044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1316.460891][T19044] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.461180][T19044] bridge_slave_1: entered allmulticast mode
[ 1316.462663][T19044] bridge_slave_1: entered promiscuous mode
[ 1316.674927][T11370] Bluetooth: hci7: command tx timeout
[ 1316.792235][T19156] netlink: 'syz.4.4303': attribute type 1 has an invalid length.
[ 1316.792249][T19156] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4303'.
[ 1316.818138][T19030] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1316.818149][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.818162][T19030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1317.018161][T19030] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1317.018173][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1317.018187][T19030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1317.020170][T19040] team0: Port device team_slave_0 added
[ 1317.022817][T19044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1317.228466][T19040] team0: Port device team_slave_1 added
[ 1317.232137][T19044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1317.345016][T19017] hsr_slave_0: entered promiscuous mode
[ 1317.346451][T19017] hsr_slave_1: entered promiscuous mode
[ 1317.347470][T19017] debugfs: 'hsr0' already exists in 'hsr'
[ 1317.347493][T19017] Cannot create hsr debugfs directory
[ 1317.504841][ T6458] hsr_slave_0: left promiscuous mode
[ 1317.527371][ T6458] hsr_slave_1: left promiscuous mode
[ 1317.528179][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1317.528195][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1317.554999][T11370] Bluetooth: hci6: command tx timeout
[ 1317.559293][T19173] netlink: 'syz.4.4310': attribute type 1 has an invalid length.
[ 1317.559306][T19173] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4310'.
[ 1317.595754][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1317.595771][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1317.692967][ T6458] veth1_macvtap: left promiscuous mode
[ 1317.693028][ T6458] veth0_macvtap: left promiscuous mode
[ 1317.693159][ T6458] veth1_vlan: left promiscuous mode
[ 1317.693248][ T6458] veth0_vlan: left promiscuous mode
[ 1318.415907][ T6458] team0 (unregistering): Port device team_slave_1 removed
[ 1318.435025][T11370] Bluetooth: hci4: command tx timeout
[ 1318.455657][ T6458] team0 (unregistering): Port device team_slave_0 removed
[ 1318.640612][T19040] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1318.640630][T19040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.640653][T19040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1318.740600][T19044] team0: Port device team_slave_0 added
[ 1318.743657][T19040] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1318.743671][T19040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.743695][T19040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1318.760027][T19030] hsr_slave_0: entered promiscuous mode
[ 1318.761375][T19030] hsr_slave_1: entered promiscuous mode
[ 1318.762428][T19030] debugfs: 'hsr0' already exists in 'hsr'
[ 1318.762449][T19030] Cannot create hsr debugfs directory
[ 1318.764658][T11370] Bluetooth: hci7: command tx timeout
[ 1318.767036][T19044] team0: Port device team_slave_1 added
[ 1318.873214][T19044] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1318.873227][T19044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.873240][T19044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1318.939389][T19044] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1318.939406][T19044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.939432][T19044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1319.124270][T19040] hsr_slave_0: entered promiscuous mode
[ 1319.125713][T19040] hsr_slave_1: entered promiscuous mode
[ 1319.126584][T19040] debugfs: 'hsr0' already exists in 'hsr'
[ 1319.126606][T19040] Cannot create hsr debugfs directory
[ 1319.726981][T19044] hsr_slave_0: entered promiscuous mode
[ 1319.728374][T19044] hsr_slave_1: entered promiscuous mode
[ 1319.729264][T19044] debugfs: 'hsr0' already exists in 'hsr'
[ 1319.729285][T19044] Cannot create hsr debugfs directory
[ 1320.203121][ T5167] udevd[5167]: worker [17513] /devices/virtual/block/nbd18 is taking a long time
[ 1321.306054][ T6458] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1321.380859][T19017] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1321.439839][T19017] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1321.554024][T19211] netlink: 'syz.4.4317': attribute type 1 has an invalid length.
[ 1321.554038][T19211] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'.
[ 1321.652835][ T6458] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1321.693563][T19017] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1321.761300][T19017] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1321.936840][ T6458] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1322.210110][ T6458] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1322.248957][T19030] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1322.297655][T19030] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1322.367327][T19030] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1322.477806][T19030] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1322.954239][T19040] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1323.040066][T19040] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1323.360981][T19040] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1323.459034][T19249] net_ratelimit: 10 callbacks suppressed
[ 1323.459041][T19249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1323.490505][T19040] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1323.670171][ T6458] bridge_slave_1: left allmulticast mode
[ 1323.670199][ T6458] bridge_slave_1: left promiscuous mode
[ 1323.670410][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1323.739579][ T6458] bridge_slave_0: left allmulticast mode
[ 1323.739598][ T6458] bridge_slave_0: left promiscuous mode
[ 1323.739740][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1324.045005][ T6458] bond_slave_0: left promiscuous mode
[ 1324.645543][ T6458] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[ 1324.653524][ T6458] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[ 1324.765430][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1324.845352][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1324.885703][ T6458] bond0 (unregistering): Released all slaves
[ 1324.891110][ T6458] bond1 (unregistering): Released all slaves
[ 1325.834747][ T8733] block nbd19: Possible stuck request ffff8880894f0000: control (read@0,1024B). Runtime 60 seconds
[ 1325.834779][ T8733] block nbd19: Possible stuck request ffff8880894f01c0: control (read@1024,1024B). Runtime 60 seconds
[ 1325.834795][ T8733] block nbd19: Possible stuck request ffff8880894f0380: control (read@2048,1024B). Runtime 60 seconds
[ 1325.834868][ T8733] block nbd19: Possible stuck request ffff8880894f0540: control (read@3072,1024B). Runtime 60 seconds
[ 1326.092051][T19270] netlink: 'syz.4.4324': attribute type 1 has an invalid length.
[ 1326.092065][T19270] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4324'.
[ 1326.263698][T19017] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1326.869728][T19017] 8021q: adding VLAN 0 to HW filter on device team0
[ 1327.097185][ T6458] hsr_slave_0: left promiscuous mode
[ 1327.137148][ T6458] hsr_slave_1: left promiscuous mode
[ 1327.138477][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1327.138495][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1327.180759][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1327.180786][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1327.256212][ T6458] veth1_macvtap: left promiscuous mode
[ 1327.256283][ T6458] veth0_macvtap: left promiscuous mode
[ 1327.256468][ T6458] veth1_vlan: left promiscuous mode
[ 1327.256565][ T6458] veth0_vlan: left promiscuous mode
[ 1327.754811][ T8733] block nbd20: Possible stuck request ffff888057645080: control (read@0,1024B). Runtime 60 seconds
[ 1327.754849][ T8733] block nbd20: Possible stuck request ffff888057645240: control (read@1024,1024B). Runtime 60 seconds
[ 1327.754869][ T8733] block nbd20: Possible stuck request ffff888057645400: control (read@2048,1024B). Runtime 60 seconds
[ 1327.754888][ T8733] block nbd20: Possible stuck request ffff8880576455c0: control (read@3072,1024B). Runtime 60 seconds
[ 1328.058953][T19289] netlink: 'syz.4.4331': attribute type 1 has an invalid length.
[ 1328.058975][T19289] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4331'.
[ 1328.091135][ T6458] team_slave_1 (unregistering): left promiscuous mode
[ 1328.116780][ T6458] team0 (unregistering): Port device team_slave_1 removed
[ 1328.135835][ T6458] team_slave_0 (unregistering): left promiscuous mode
[ 1328.172042][ T6458] team0 (unregistering): Port device team_slave_0 removed
[ 1328.348887][T19030] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1328.398633][   T32] block nbd21: Possible stuck request ffff888059597000: control (read@0,1024B). Runtime 60 seconds
[ 1328.398680][   T32] block nbd21: Possible stuck request ffff8880595971c0: control (read@1024,1024B). Runtime 60 seconds
[ 1328.398709][   T32] block nbd21: Possible stuck request ffff888059597380: control (read@2048,1024B). Runtime 60 seconds
[ 1328.398735][   T32] block nbd21: Possible stuck request ffff888059597540: control (read@3072,1024B). Runtime 60 seconds
[ 1328.666465][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1328.666590][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1328.737457][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1328.737586][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1328.827343][T19030] 8021q: adding VLAN 0 to HW filter on device team0
[ 1328.827586][T19044] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1328.887768][T19044] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1328.967420][T19044] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1329.023478][T19044] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1329.104386][T13929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1329.105405][T13929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1329.112086][T19040] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1329.191906][T13929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1329.192076][T13929] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1329.295719][T19302] syzkaller0: entered promiscuous mode
[ 1329.295744][T19302] syzkaller0: entered allmulticast mode
[ 1329.452010][T19040] 8021q: adding VLAN 0 to HW filter on device team0
[ 1329.854229][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1329.865929][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1329.938402][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1329.938514][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1330.394257][T19044] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1330.451765][T19017] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1330.516307][T19044] 8021q: adding VLAN 0 to HW filter on device team0
[ 1330.570312][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1330.570584][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1330.638434][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1330.638507][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1330.939672][T19030] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1331.216709][T19040] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1331.566736][T19017] veth0_vlan: entered promiscuous mode
[ 1331.587412][T19017] veth1_vlan: entered promiscuous mode
[ 1331.833594][T19017] veth0_macvtap: entered promiscuous mode
[ 1331.863552][T19044] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1331.893880][T19017] veth1_macvtap: entered promiscuous mode
[ 1332.011146][T19017] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1332.061017][T19030] veth0_vlan: entered promiscuous mode
[ 1332.067241][T19017] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1332.113152][ T3310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.131198][T19030] veth1_vlan: entered promiscuous mode
[ 1332.132306][ T3310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.143212][ T3310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.162828][ T3310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.193407][T19044] veth0_vlan: entered promiscuous mode
[ 1332.372776][T19040] veth0_vlan: entered promiscuous mode
[ 1332.464163][T19044] veth1_vlan: entered promiscuous mode
[ 1332.568979][T19040] veth1_vlan: entered promiscuous mode
[ 1332.647778][T19030] veth0_macvtap: entered promiscuous mode
[ 1332.651328][ T4497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.651347][ T4497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1332.698837][T19030] veth1_macvtap: entered promiscuous mode
[ 1332.848534][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.848554][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1332.875031][T19044] veth0_macvtap: entered promiscuous mode
[ 1332.901401][T19030] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1332.957246][T19040] veth0_macvtap: entered promiscuous mode
[ 1332.968594][T19044] veth1_macvtap: entered promiscuous mode
[ 1332.977822][T19030] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1333.019407][T19040] veth1_macvtap: entered promiscuous mode
[ 1333.030062][ T3310] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.041288][ T3310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.070553][ T3310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.090310][ T3310] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.187135][T19044] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1333.231271][T19040] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1333.320192][T19044] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1333.346867][T19040] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1333.408208][T19414] netlink: 'syz.4.4347': attribute type 2 has an invalid length.
[ 1333.488497][T19414] !��9: entered promiscuous mode
[ 1333.488697][T19416] netlink: 'syz.4.4347': attribute type 1 has an invalid length.
[ 1333.488762][T19416] netlink: 'syz.4.4347': attribute type 2 has an invalid length.
[ 1333.488775][T19416] netlink: 'syz.4.4347': attribute type 1 has an invalid length.
[ 1333.488787][T19416] netlink: 'syz.4.4347': attribute type 3 has an invalid length.
[ 1333.530552][ T6458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.531123][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4346'.
[ 1333.550971][ T6458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.629981][ T6458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.675337][ T6458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.690598][ T6458] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.710438][ T6458] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.717571][ T6458] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.776234][ T6458] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.802197][ T6458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1333.802216][ T6458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1334.365710][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1334.365731][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1334.547428][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1334.547448][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1334.782082][T13929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1334.782101][T13929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1335.046858][ T6458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1335.046878][ T6458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1335.221932][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1335.221951][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1336.952952][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4373'.
[ 1337.297371][T19525] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4378'.
[ 1337.297394][T19525] nbd: must specify a size in bytes for the device
[ 1338.032552][T19548] netlink: 'syz.7.4386': attribute type 1 has an invalid length.
[ 1338.032572][T19548] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4386'.
[ 1338.174783][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4388'.
[ 1338.442006][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4389'.
[ 1339.357559][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4402'.
[ 1339.385987][T19600] netlink: 'syz.7.4405': attribute type 1 has an invalid length.
[ 1339.386008][T19600] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4405'.
[ 1339.847550][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4411'.
[ 1339.996368][T19625] tipc: Started in network mode
[ 1339.996396][T19625] tipc: Node identity d2cc5637ed33, cluster identity 4711
[ 1340.011963][T19625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1340.037502][T19621] syzkaller0: entered promiscuous mode
[ 1340.037530][T19621] syzkaller0: entered allmulticast mode
[ 1340.293023][T19625] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4412'.
[ 1340.400491][T19635] tipc: Resetting bearer <eth:syzkaller0>
[ 1340.527453][T19618] tipc: Resetting bearer <eth:syzkaller0>
[ 1340.772630][T19618] tipc: Disabling bearer <eth:syzkaller0>
[ 1340.973703][T19642] syzkaller1: entered promiscuous mode
[ 1340.973728][T19642] syzkaller1: entered allmulticast mode
[ 1341.195867][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4422'.
[ 1341.697231][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'.
[ 1342.284122][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4433'.
[ 1342.805420][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4441'.
[ 1344.091891][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4449'.
[ 1345.608481][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4462'.
[ 1345.908470][T19821] netlink: 'syz.7.4466': attribute type 3 has an invalid length.
[ 1345.908492][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4466'.
[ 1346.130504][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4470'.
[ 1346.145494][T19833] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4470'.
[ 1346.277415][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4468'.
[ 1346.324795][ T8733] block nbd18: Possible stuck request ffff88803de37000: control (read@0,1024B). Runtime 90 seconds
[ 1346.324837][ T8733] block nbd18: Possible stuck request ffff88803de371c0: control (read@1024,1024B). Runtime 90 seconds
[ 1346.324863][ T8733] block nbd18: Possible stuck request ffff88803de37380: control (read@2048,1024B). Runtime 90 seconds
[ 1346.324890][ T8733] block nbd18: Possible stuck request ffff88803de37540: control (read@3072,1024B). Runtime 90 seconds
[ 1346.388727][T19841] netlink: 'syz.4.4473': attribute type 1 has an invalid length.
[ 1346.390112][T19841] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4473'.
[ 1346.951554][T19863] netlink: 'syz.0.4480': attribute type 3 has an invalid length.
[ 1346.951575][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1347.475224][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4477'.
[ 1347.629610][T19883] netlink: 'syz.0.4484': attribute type 1 has an invalid length.
[ 1347.629670][T19883] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4484'.
[ 1347.709727][T19887] netlink: 'syz.4.4486': attribute type 4 has an invalid length.
[ 1347.709746][T19887] netlink: 'syz.4.4486': attribute type 1 has an invalid length.
[ 1347.709756][T19887] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4486'.
[ 1347.881681][T19868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1348.370558][T19910] netlink: 'syz.8.4492': attribute type 3 has an invalid length.
[ 1348.671202][T19916] syzkaller0: entered promiscuous mode
[ 1348.671228][T19916] syzkaller0: entered allmulticast mode
[ 1348.722252][T19922] netlink: 'syz.9.4497': attribute type 1 has an invalid length.
[ 1348.735659][T19916] 0: reclassify loop, rule prio 0, protocol 800
[ 1350.663489][T19968] netlink: 'syz.9.4511': attribute type 4 has an invalid length.
[ 1350.663512][T19968] netlink: 'syz.9.4511': attribute type 1 has an invalid length.
[ 1350.663524][T19968] __nla_validate_parse: 3 callbacks suppressed
[ 1350.663534][T19968] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4511'.
[ 1353.818661][T20061] netlink: 'syz.0.4539': attribute type 1 has an invalid length.
[ 1355.926847][ T8733] block nbd19: Possible stuck request ffff8880894f0000: control (read@0,1024B). Runtime 90 seconds
[ 1355.926897][ T8733] block nbd19: Possible stuck request ffff8880894f01c0: control (read@1024,1024B). Runtime 90 seconds
[ 1355.926925][ T8733] block nbd19: Possible stuck request ffff8880894f0380: control (read@2048,1024B). Runtime 90 seconds
[ 1355.926950][ T8733] block nbd19: Possible stuck request ffff8880894f0540: control (read@3072,1024B). Runtime 90 seconds
[ 1356.055174][T20122] tipc: Started in network mode
[ 1356.055202][T20122] tipc: Node identity 5e4600abcd3f, cluster identity 4711
[ 1356.055376][T20122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1356.155535][T20123] syzkaller0: entered promiscuous mode
[ 1356.155562][T20123] syzkaller0: entered allmulticast mode
[ 1356.159905][T20118] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4557'.
[ 1356.169498][T20120] tipc: Resetting bearer <eth:syzkaller0>
[ 1356.218943][T20117] tipc: Resetting bearer <eth:syzkaller0>
[ 1356.448156][T20117] tipc: Disabling bearer <eth:syzkaller0>
[ 1356.636041][T20128] syzkaller0: entered promiscuous mode
[ 1356.636066][T20128] syzkaller0: entered allmulticast mode
[ 1357.844691][ T8733] block nbd20: Possible stuck request ffff888057645080: control (read@0,1024B). Runtime 90 seconds
[ 1357.844736][ T8733] block nbd20: Possible stuck request ffff888057645240: control (read@1024,1024B). Runtime 90 seconds
[ 1357.844762][ T8733] block nbd20: Possible stuck request ffff888057645400: control (read@2048,1024B). Runtime 90 seconds
[ 1357.844788][ T8733] block nbd20: Possible stuck request ffff8880576455c0: control (read@3072,1024B). Runtime 90 seconds
[ 1358.475370][   T32] block nbd21: Possible stuck request ffff888059597000: control (read@0,1024B). Runtime 90 seconds
[ 1358.475415][   T32] block nbd21: Possible stuck request ffff8880595971c0: control (read@1024,1024B). Runtime 90 seconds
[ 1358.475443][   T32] block nbd21: Possible stuck request ffff888059597380: control (read@2048,1024B). Runtime 90 seconds
[ 1358.475481][   T32] block nbd21: Possible stuck request ffff888059597540: control (read@3072,1024B). Runtime 90 seconds
[ 1358.794936][T20224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4586'.
[ 1359.929607][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4598'.
[ 1360.322468][T20275] netlink: 'syz.4.4604': attribute type 4 has an invalid length.
[ 1360.322488][T20275] netlink: 'syz.4.4604': attribute type 1 has an invalid length.
[ 1360.322501][T20275] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4604'.
[ 1360.620582][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4608'.
[ 1361.128234][T20299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4612'.
[ 1361.649519][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.240334][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4620'.
[ 1362.577480][T20343] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4624'.
[ 1362.688864][T13815] block nbd22: Receive control failed (result -32)
[ 1362.691527][T11370] block nbd22: Receive control failed (result -32)
[ 1362.691555][ T5806] block nbd22: Receive control failed (result -32)
[ 1362.811616][T20306] nbd22: detected capacity change from 0 to 63
[ 1362.820686][T18043] block nbd22: Dead connection, failed to find a fallback
[ 1362.821969][T18043] block nbd22: shutting down sockets
[ 1362.822256][T18043] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.822397][T18043] Buffer I/O error on dev nbd22, logical block 0, async page read
[ 1362.931156][T18043] I/O error, dev nbd22, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931191][T18043] Buffer I/O error on dev nbd22, logical block 1, async page read
[ 1362.931269][T18043] I/O error, dev nbd22, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931290][T18043] Buffer I/O error on dev nbd22, logical block 2, async page read
[ 1362.931333][T18043] I/O error, dev nbd22, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931353][T18043] Buffer I/O error on dev nbd22, logical block 3, async page read
[ 1362.931411][T18043] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931432][T18043] Buffer I/O error on dev nbd22, logical block 0, async page read
[ 1362.931474][T18043] I/O error, dev nbd22, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931494][T18043] Buffer I/O error on dev nbd22, logical block 1, async page read
[ 1362.931536][T18043] I/O error, dev nbd22, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931556][T18043] Buffer I/O error on dev nbd22, logical block 2, async page read
[ 1362.931599][T18043] I/O error, dev nbd22, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931619][T18043] Buffer I/O error on dev nbd22, logical block 3, async page read
[ 1362.931670][T18043] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931691][T18043] Buffer I/O error on dev nbd22, logical block 0, async page read
[ 1362.931736][T18043] I/O error, dev nbd22, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1362.931753][T18043] Buffer I/O error on dev nbd22, logical block 1, async page read
[ 1362.932566][T18043] ldm_validate_partition_table(): Disk read failed.
[ 1362.933536][T18043] Dev nbd22: unable to read RDB block 0
[ 1362.934300][T18043]  nbd22: unable to read partition table
[ 1363.156805][T18043] ldm_validate_partition_table(): Disk read failed.
[ 1363.157368][T18043] Dev nbd22: unable to read RDB block 0
[ 1363.191662][T18043]  nbd22: unable to read partition table
[ 1363.914825][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4633'.
[ 1363.993654][T20383] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4635'.
[ 1367.594691][ T5901] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1367.780241][ T5901] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.780268][ T5901] usb 8-1: config 0 has no interfaces?
[ 1367.785244][ T5901] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1367.785273][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1367.785291][ T5901] usb 8-1: Product: syz
[ 1367.785304][ T5901] usb 8-1: Manufacturer: syz
[ 1367.785318][ T5901] usb 8-1: SerialNumber: syz
[ 1367.822054][ T5901] usb 8-1: config 0 descriptor??
[ 1369.727130][T20441] netlink: 'syz.0.4651': attribute type 4 has an invalid length.
[ 1369.727144][T20441] netlink: 'syz.0.4651': attribute type 1 has an invalid length.
[ 1369.727151][T20441] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4651'.
[ 1370.649828][T16284] usb 8-1: USB disconnect, device number 2
[ 1371.760896][T20466] syzkaller0: entered promiscuous mode
[ 1371.760923][T20466] syzkaller0: entered allmulticast mode
[ 1373.602647][T20506] netlink: 'syz.4.4673': attribute type 4 has an invalid length.
[ 1373.602667][T20506] netlink: 'syz.4.4673': attribute type 1 has an invalid length.
[ 1373.602676][T20506] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4673'.
[ 1374.629224][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'.
[ 1376.404811][ T8733] block nbd18: Possible stuck request ffff88803de37000: control (read@0,1024B). Runtime 120 seconds
[ 1376.404854][ T8733] block nbd18: Possible stuck request ffff88803de371c0: control (read@1024,1024B). Runtime 120 seconds
[ 1376.404881][ T8733] block nbd18: Possible stuck request ffff88803de37380: control (read@2048,1024B). Runtime 120 seconds
[ 1376.404908][ T8733] block nbd18: Possible stuck request ffff88803de37540: control (read@3072,1024B). Runtime 120 seconds
[ 1377.546963][ T5167] udevd[5167]: worker [17579] /devices/virtual/block/nbd19 is taking a long time
[ 1377.547017][ T5167] udevd[5167]: worker [18006] /devices/virtual/block/nbd21 is taking a long time
[ 1377.547056][ T5167] udevd[5167]: worker [17531] /devices/virtual/block/nbd20 is taking a long time
[ 1377.751439][T20540] netlink: 'syz.4.4688': attribute type 4 has an invalid length.
[ 1377.751461][T20540] netlink: 'syz.4.4688': attribute type 1 has an invalid length.
[ 1377.751473][T20540] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4688'.
[ 1380.071849][T13815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1380.084180][T13815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1380.096748][T13815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1380.113847][T13815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1380.122031][T13815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1380.192217][T11370] 
[ 1380.192230][T11370] ======================================================
[ 1380.192238][T11370] WARNING: possible circular locking dependency detected
[ 1380.192259][T11370] syzkaller #0 Tainted: G             L     
[ 1380.192270][T11370] ------------------------------------------------------
[ 1380.192278][T11370] kworker/u9:1/11370 is trying to acquire lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1380.192288][T11370] ffff888019c4f2c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540
[ 1380.192505][T11370] 
[ 1380.192505][T11370] but task is already holding lock:
[ 1380.192512][T11370] ffff888019c4f238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[ 1380.192556][T11370] 
[ 1380.192556][T11370] which lock already depends on the new lock.
[ 1380.192556][T11370] 
[ 1380.192563][T11370] 
[ 1380.192563][T11370] the existing dependency chain (in reverse order) is:
[ 1380.192570][T11370] 
[ 1380.192570][T11370] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1380.192594][T11370]        down_write+0x3a/0x50
[ 1380.192680][T11370]        kernfs_add_one+0x41/0x5c0
[ 1380.192699][T11370]        kernfs_create_dir_ns+0xde/0x130
[ 1380.192722][T11370]        internal_create_group+0x425/0x1180
[ 1380.192748][T11370]        cpuhp_invoke_callback+0x445/0x860
[ 1380.192795][T11370]        cpuhp_issue_call+0x430/0x7a0
[ 1380.192817][T11370]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[ 1380.192842][T11370]        __cpuhp_setup_state+0x3f/0x60
[ 1380.192865][T11370]        do_one_initcall+0x250/0x8d0
[ 1380.192910][T11370]        do_initcall_level+0x104/0x190
[ 1380.193040][T11370]        do_initcalls+0x59/0xa0
[ 1380.193057][T11370]        kernel_init_freeable+0x2a6/0x3e0
[ 1380.193074][T11370]        kernel_init+0x1d/0x1d0
[ 1380.193134][T11370]        ret_from_fork+0x51e/0xb90
[ 1380.193168][T11370]        ret_from_fork_asm+0x1a/0x30
[ 1380.193184][T11370] 
[ 1380.193184][T11370] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[ 1380.193210][T11370] 
[ 1380.193210][T11370] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[ 1380.193235][T11370]        cpus_read_lock+0x42/0x160
[ 1380.193256][T11370]        static_key_slow_inc+0x12/0x30
[ 1380.193318][T11370]        tcp_md5_do_add+0x1d4/0x390
[ 1380.193391][T11370]        tcp_v6_parse_md5_keys+0x562/0x680
[ 1380.193479][T11370]        do_tcp_setsockopt+0x12ee/0x2060
[ 1380.193522][T11370]        do_sock_setsockopt+0x17c/0x1b0
[ 1380.193617][T11370]        __x64_sys_setsockopt+0x143/0x1b0
[ 1380.193644][T11370]        do_syscall_64+0x14d/0xf80
[ 1380.193694][T11370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.193730][T11370] 
[ 1380.193730][T11370] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1380.193757][T11370]        lock_sock_nested+0x3e/0x130
[ 1380.193807][T11370]        inet_shutdown+0x6a/0x390
[ 1380.193888][T11370]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1380.193970][T11370]        recv_work+0x1c9d/0x1dc0
[ 1380.193987][T11370]        process_scheduled_works+0xb6e/0x18c0
[ 1380.194025][T11370]        worker_thread+0xa53/0xfc0
[ 1380.194048][T11370]        kthread+0x388/0x470
[ 1380.194064][T11370]        ret_from_fork+0x51e/0xb90
[ 1380.194087][T11370]        ret_from_fork_asm+0x1a/0x30
[ 1380.194103][T11370] 
[ 1380.194103][T11370] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1380.194129][T11370]        mutex_lock_nested+0x5a/0x1d0
[ 1380.194150][T11370]        nbd_queue_rq+0x37b/0x1100
[ 1380.194165][T11370]        blk_mq_dispatch_rq_list+0xa77/0x1910
[ 1380.194267][T11370]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[ 1380.194311][T11370]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[ 1380.194331][T11370]        blk_mq_run_hw_queue+0x368/0x520
[ 1380.194347][T11370]        blk_mq_dispatch_list+0xd1f/0xe20
[ 1380.194365][T11370]        blk_mq_flush_plug_list+0x48d/0x570
[ 1380.194384][T11370]        __blk_flush_plug+0x3ed/0x4d0
[ 1380.194427][T11370]        __submit_bio+0x28d/0x580
[ 1380.194448][T11370]        submit_bio_noacct_nocheck+0x2f4/0xa70
[ 1380.194466][T11370]        block_read_full_folio+0x599/0x830
[ 1380.194528][T11370]        filemap_read_folio+0x137/0x3b0
[ 1380.194609][T11370]        do_read_cache_folio+0x2bf/0x560
[ 1380.194623][T11370]        read_part_sector+0xb8/0x2b0
[ 1380.194665][T11370]        adfspart_check_ICS+0xa5/0xa40
[ 1380.194682][T11370]        bdev_disk_changed+0x7ba/0x1550
[ 1380.194698][T11370]        blkdev_get_whole+0x2e5/0x480
[ 1380.194738][T11370]        bdev_open+0x31e/0xcc0
[ 1380.194755][T11370]        blkdev_open+0x485/0x620
[ 1380.194776][T11370]        do_dentry_open+0x83d/0x13e0
[ 1380.194826][T11370]        vfs_open+0x3b/0x350
[ 1380.194845][T11370]        path_openat+0x2e43/0x38a0
[ 1380.194914][T11370]        do_file_open+0x23e/0x4a0
[ 1380.194990][T11370]        do_sys_openat2+0x113/0x200
[ 1380.195008][T11370]        __x64_sys_openat+0x138/0x170
[ 1380.195024][T11370]        do_syscall_64+0x14d/0xf80
[ 1380.195049][T11370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.195066][T11370] 
[ 1380.195066][T11370] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1380.195091][T11370]        mutex_lock_nested+0x5a/0x1d0
[ 1380.195110][T11370]        nbd_queue_rq+0xc6/0x1100
[ 1380.195127][T11370]        blk_mq_dispatch_rq_list+0xa77/0x1910
[ 1380.195143][T11370]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[ 1380.195165][T11370]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[ 1380.195182][T11370]        blk_mq_run_hw_queue+0x368/0x520
[ 1380.195200][T11370]        blk_mq_dispatch_list+0xd1f/0xe20
[ 1380.195222][T11370]        blk_mq_flush_plug_list+0x48d/0x570
[ 1380.195244][T11370]        __blk_flush_plug+0x3ed/0x4d0
[ 1380.195265][T11370]        __submit_bio+0x28d/0x580
[ 1380.195289][T11370]        submit_bio_noacct_nocheck+0x2f4/0xa70
[ 1380.195309][T11370]        block_read_full_folio+0x599/0x830
[ 1380.195328][T11370]        filemap_read_folio+0x137/0x3b0
[ 1380.195356][T11370]        do_read_cache_folio+0x2bf/0x560
[ 1380.195372][T11370]        read_part_sector+0xb8/0x2b0
[ 1380.195391][T11370]        adfspart_check_ICS+0xa5/0xa40
[ 1380.195411][T11370]        bdev_disk_changed+0x7ba/0x1550
[ 1380.195429][T11370]        blkdev_get_whole+0x2e5/0x480
[ 1380.195540][T11370]        bdev_open+0x31e/0xcc0
[ 1380.195559][T11370]        blkdev_open+0x485/0x620
[ 1380.195580][T11370]        do_dentry_open+0x83d/0x13e0
[ 1380.195603][T11370]        vfs_open+0x3b/0x350
[ 1380.195622][T11370]        path_openat+0x2e43/0x38a0
[ 1380.195648][T11370]        do_file_open+0x23e/0x4a0
[ 1380.195674][T11370]        do_sys_openat2+0x113/0x200
[ 1380.195694][T11370]        __x64_sys_openat+0x138/0x170
[ 1380.195715][T11370]        do_syscall_64+0x14d/0xf80
[ 1380.195743][T11370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.195761][T11370] 
[ 1380.195761][T11370] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1380.195790][T11370]        __synchronize_srcu+0xca/0x3e0
[ 1380.195849][T11370]        elevator_switch+0x1e8/0x7a0
[ 1380.195918][T11370]        elevator_change+0x2cc/0x450
[ 1380.195938][T11370]        elevator_set_default+0x36c/0x430
[ 1380.195958][T11370]        blk_register_queue+0x366/0x430
[ 1380.195982][T11370]        __add_disk+0x677/0xd50
[ 1380.196007][T11370]        add_disk_fwnode+0xfb/0x480
[ 1380.196032][T11370]        nbd_dev_add+0x72c/0xb50
[ 1380.196112][T11370]        nbd_init+0x168/0x1f0
[ 1380.196180][T11370]        do_one_initcall+0x250/0x8d0
[ 1380.196208][T11370]        do_initcall_level+0x104/0x190
[ 1380.196234][T11370]        do_initcalls+0x59/0xa0
[ 1380.196251][T11370]        kernel_init_freeable+0x2a6/0x3e0
[ 1380.196272][T11370]        kernel_init+0x1d/0x1d0
[ 1380.196291][T11370]        ret_from_fork+0x51e/0xb90
[ 1380.196312][T11370]        ret_from_fork_asm+0x1a/0x30
[ 1380.196326][T11370] 
[ 1380.196326][T11370] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1380.196351][T11370]        mutex_lock_nested+0x5a/0x1d0
[ 1380.196372][T11370]        elevator_change+0x1b3/0x450
[ 1380.196393][T11370]        elevator_set_none+0xb5/0x140
[ 1380.196413][T11370]        blk_mq_update_nr_hw_queues+0x607/0x1a80
[ 1380.196439][T11370]        nbd_start_device+0x17f/0xb20
[ 1380.196468][T11370]        nbd_genl_connect+0x1651/0x1c80
[ 1380.196495][T11370]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1380.196562][T11370]        genl_rcv_msg+0x61c/0x7a0
[ 1380.196577][T11370]        netlink_rcv_skb+0x232/0x4b0
[ 1380.196627][T11370]        genl_rcv+0x28/0x40
[ 1380.196642][T11370]        netlink_unicast+0x831/0x9f0
[ 1380.196662][T11370]        netlink_sendmsg+0x813/0xb40
[ 1380.196686][T11370]        ____sys_sendmsg+0x94c/0x9c0
[ 1380.196704][T11370]        ___sys_sendmsg+0x2a5/0x360
[ 1380.196719][T11370]        __x64_sys_sendmsg+0x1c3/0x2a0
[ 1380.196734][T11370]        do_syscall_64+0x14d/0xf80
[ 1380.196760][T11370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.196778][T11370] 
[ 1380.196778][T11370] -> #2 (&q->q_usage_counter(io)#75){++++}-{0:0}:
[ 1380.196811][T11370]        blk_alloc_queue+0x54e/0x690
[ 1380.196829][T11370]        __blk_mq_alloc_disk+0x197/0x390
[ 1380.196852][T11370]        nbd_dev_add+0x499/0xb50
[ 1380.196879][T11370]        nbd_genl_connect+0x965/0x1c80
[ 1380.196906][T11370]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1380.196925][T11370]        genl_rcv_msg+0x61c/0x7a0
[ 1380.196942][T11370]        netlink_rcv_skb+0x232/0x4b0
[ 1380.196965][T11370]        genl_rcv+0x28/0x40
[ 1380.196979][T11370]        netlink_unicast+0x831/0x9f0
[ 1380.196999][T11370]        netlink_sendmsg+0x813/0xb40
[ 1380.197022][T11370]        ____sys_sendmsg+0x94c/0x9c0
[ 1380.197038][T11370]        ___sys_sendmsg+0x2a5/0x360
[ 1380.197054][T11370]        __x64_sys_sendmsg+0x1c3/0x2a0
[ 1380.197071][T11370]        do_syscall_64+0x14d/0xf80
[ 1380.197107][T11370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.197125][T11370] 
[ 1380.197125][T11370] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1380.197152][T11370]        fs_reclaim_acquire+0x71/0x100
[ 1380.197212][T11370]        kmem_cache_alloc_noprof+0x44/0x680
[ 1380.197287][T11370]        __kernfs_iattrs+0xdf/0x340
[ 1380.197308][T11370]        kernfs_iop_setattr+0xea/0x3f0
[ 1380.197327][T11370]        notify_change+0xc18/0xf60
[ 1380.197377][T11370]        do_truncate+0x1c2/0x250
[ 1380.197433][T11370]        path_openat+0x2fc4/0x38a0
[ 1380.197459][T11370]        do_file_open+0x23e/0x4a0
[ 1380.197481][T11370]        do_sys_openat2+0x113/0x200
[ 1380.197501][T11370]        __x64_sys_openat+0x138/0x170
[ 1380.197522][T11370]        do_syscall_64+0x14d/0xf80
[ 1380.197549][T11370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.197566][T11370] 
[ 1380.197566][T11370] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1380.197593][T11370]        __lock_acquire+0x15a5/0x2cf0
[ 1380.197609][T11370]        lock_acquire+0xf0/0x2e0
[ 1380.197624][T11370]        down_write+0x3a/0x50
[ 1380.197640][T11370]        kernfs_link_sibling+0x46c/0x540
[ 1380.197662][T11370]        kernfs_add_one+0x1ca/0x5c0
[ 1380.197684][T11370]        kernfs_create_dir_ns+0xde/0x130
[ 1380.197708][T11370]        sysfs_create_dir_ns+0x12f/0x2a0
[ 1380.197728][T11370]        kobject_add_internal+0x631/0xd10
[ 1380.197784][T11370]        kobject_add+0x163/0x240
[ 1380.197800][T11370]        device_add+0x408/0xb80
[ 1380.197862][T11370]        hci_conn_add_sysfs+0xd5/0x210
[ 1380.197936][T11370]        hci_conn_complete_evt+0x77a/0x11d0
[ 1380.198011][T11370]        hci_event_packet+0x805/0x12c0
[ 1380.198035][T11370]        hci_rx_work+0x3ee/0x1030
[ 1380.198091][T11370]        process_scheduled_works+0xb6e/0x18c0
[ 1380.198117][T11370]        worker_thread+0xa53/0xfc0
[ 1380.198140][T11370]        kthread+0x388/0x470
[ 1380.198156][T11370]        ret_from_fork+0x51e/0xb90
[ 1380.198179][T11370]        ret_from_fork_asm+0x1a/0x30
[ 1380.198192][T11370] 
[ 1380.198192][T11370] other info that might help us debug this:
[ 1380.198192][T11370] 
[ 1380.198199][T11370] Chain exists of:
[ 1380.198199][T11370]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[ 1380.198199][T11370] 
[ 1380.198233][T11370]  Possible unsafe locking scenario:
[ 1380.198233][T11370] 
[ 1380.198239][T11370]        CPU0                    CPU1
[ 1380.198246][T11370]        ----                    ----
[ 1380.198252][T11370]   lock(&root->kernfs_rwsem);
[ 1380.198265][T11370]                                lock(cpuhp_state_mutex);
[ 1380.198280][T11370]                                lock(&root->kernfs_rwsem);
[ 1380.198294][T11370]   lock(&root->kernfs_iattr_rwsem);
[ 1380.198307][T11370] 
[ 1380.198307][T11370]  *** DEADLOCK ***
[ 1380.198307][T11370] 
[ 1380.198313][T11370] 4 locks held by kworker/u9:1/11370:
[ 1380.198325][T11370]  #0: ffff888033cf8938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[ 1380.198384][T11370]  #1: ffffc90005fefc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[ 1380.198436][T11370]  #2: ffff8880392140b0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xbb/0x11d0
[ 1380.198488][T11370]  #3: ffff888019c4f238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[ 1380.198535][T11370] 
[ 1380.198535][T11370] stack backtrace:
[ 1380.198558][T11370] CPU: 0 UID: 0 PID: 11370 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1380.198587][T11370] Tainted: [L]=SOFTLOCKUP
[ 1380.198593][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1380.198608][T11370] Workqueue: hci0 hci_rx_work
[ 1380.198646][T11370] Call Trace:
[ 1380.198653][T11370]  <TASK>
[ 1380.198664][T11370]  dump_stack_lvl+0xe8/0x150
[ 1380.198693][T11370]  print_circular_bug+0x2e1/0x300
[ 1380.198719][T11370]  check_noncircular+0x12e/0x150
[ 1380.198746][T11370]  __lock_acquire+0x15a5/0x2cf0
[ 1380.198768][T11370]  ? __lock_acquire+0x6b5/0x2cf0
[ 1380.198793][T11370]  lock_acquire+0xf0/0x2e0
[ 1380.198809][T11370]  ? kernfs_link_sibling+0x46c/0x540
[ 1380.198838][T11370]  down_write+0x3a/0x50
[ 1380.198855][T11370]  ? kernfs_link_sibling+0x46c/0x540
[ 1380.198877][T11370]  kernfs_link_sibling+0x46c/0x540
[ 1380.198904][T11370]  kernfs_add_one+0x1ca/0x5c0
[ 1380.198927][T11370]  kernfs_create_dir_ns+0xde/0x130
[ 1380.198954][T11370]  sysfs_create_dir_ns+0x12f/0x2a0
[ 1380.198975][T11370]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1380.198999][T11370]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1380.199022][T11370]  ? rt_spin_unlock+0x160/0x200
[ 1380.199046][T11370]  kobject_add_internal+0x631/0xd10
[ 1380.199071][T11370]  kobject_add+0x163/0x240
[ 1380.199099][T11370]  ? __pfx_kobject_add+0x10/0x10
[ 1380.199121][T11370]  ? get_device_parent+0x370/0x3a0
[ 1380.199144][T11370]  device_add+0x408/0xb80
[ 1380.199165][T11370]  hci_conn_add_sysfs+0xd5/0x210
[ 1380.199192][T11370]  hci_conn_complete_evt+0x77a/0x11d0
[ 1380.199221][T11370]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1380.199289][T11370]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[ 1380.199322][T11370]  hci_event_packet+0x805/0x12c0
[ 1380.199351][T11370]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[ 1380.199379][T11370]  ? __pfx_hci_event_packet+0x10/0x10
[ 1380.199403][T11370]  ? rt_spin_unlock+0x14f/0x200
[ 1380.199430][T11370]  ? hci_send_to_monitor+0xe2/0x590
[ 1380.199454][T11370]  hci_rx_work+0x3ee/0x1030
[ 1380.199483][T11370]  ? process_scheduled_works+0xa8d/0x18c0
[ 1380.199510][T11370]  process_scheduled_works+0xb6e/0x18c0
[ 1380.199550][T11370]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1380.199577][T11370]  ? assign_work+0x3d5/0x5e0
[ 1380.199602][T11370]  worker_thread+0xa53/0xfc0
[ 1380.199638][T11370]  kthread+0x388/0x470
[ 1380.199658][T11370]  ? __pfx_worker_thread+0x10/0x10
[ 1380.199682][T11370]  ? __pfx_kthread+0x10/0x10
[ 1380.199702][T11370]  ret_from_fork+0x51e/0xb90
[ 1380.199730][T11370]  ? __pfx_ret_from_fork+0x10/0x10
[ 1380.199756][T11370]  ? __switch_to+0xc7d/0x1450
[ 1380.199797][T11370]  ? __pfx_kthread+0x10/0x10
[ 1380.199817][T11370]  ret_from_fork_asm+0x1a/0x30
[ 1380.199843][T11370]  </TASK>
[ 1382.284743][T13815] Bluetooth: hci0: command tx timeout
[ 1384.354986][T13815] Bluetooth: hci0: command tx timeout
[ 1385.994742][ T8733] block nbd19: Possible stuck request ffff8880894f0000: control (read@0,1024B). Runtime 120 seconds
[ 1385.994780][ T8733] block nbd19: Possible stuck request ffff8880894f01c0: control (read@1024,1024B). Runtime 120 seconds
[ 1385.994802][ T8733] block nbd19: Possible stuck request ffff8880894f0380: control (read@2048,1024B). Runtime 120 seconds
[ 1385.994823][ T8733] block nbd19: Possible stuck request ffff8880894f0540: control (read@3072,1024B). Runtime 120 seconds
[ 1386.444491][T13815] Bluetooth: hci0: command tx timeout
[ 1387.914807][ T8733] block nbd20: Possible stuck request ffff888057645080: control (read@0,1024B). Runtime 120 seconds
[ 1387.914846][ T8733] block nbd20: Possible stuck request ffff888057645240: control (read@1024,1024B). Runtime 120 seconds
[ 1387.914869][ T8733] block nbd20: Possible stuck request ffff888057645400: control (read@2048,1024B). Runtime 120 seconds
[ 1387.914890][ T8733] block nbd20: Possible stuck request ffff8880576455c0: control (read@3072,1024B). Runtime 120 seconds
[ 1388.525181][T13815] Bluetooth: hci0: command tx timeout
[ 1388.626545][   T32] block nbd21: Possible stuck request ffff888059597000: control (read@0,1024B). Runtime 120 seconds
[ 1388.626583][   T32] block nbd21: Possible stuck request ffff8880595971c0: control (read@1024,1024B). Runtime 120 seconds
[ 1388.626606][   T32] block nbd21: Possible stuck request ffff888059597380: control (read@2048,1024B). Runtime 120 seconds
[ 1388.626631][   T32] block nbd21: Possible stuck request ffff888059597540: control (read@3072,1024B). Runtime 120 seconds