last executing test programs:

5m30.362654316s ago: executing program 4 (id=91):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0)

5m28.843240497s ago: executing program 4 (id=93):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x6, "b095594ef163"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

5m24.294087668s ago: executing program 4 (id=107):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0xffffffff8509852a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x441, 0x346)
symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
fstat(r1, 0x0)

5m23.073401827s ago: executing program 4 (id=111):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000001080)="c9", 0x1}], 0x2}}], 0x1, 0x4000000)

5m21.832939369s ago: executing program 4 (id=114):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e00000010000000000000000", @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002ffffff"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x40)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r6})
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

5m7.828396612s ago: executing program 4 (id=144):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r3)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400))
r5 = getpid()
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4})
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r11, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0)

4m52.617380425s ago: executing program 32 (id=144):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xfffffffe}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r3)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400))
r5 = getpid()
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4})
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r11, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0)

4m10.012311165s ago: executing program 3 (id=282):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0x3)
close(0x4)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

4m9.443886542s ago: executing program 3 (id=286):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0)

4m4.779887267s ago: executing program 3 (id=293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000)

4m3.571273972s ago: executing program 3 (id=300):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10000006)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}})
r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x9, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd})
ioctl$SIOCGSKNS(r4, 0x894c, 0x0)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = syz_usb_connect(0x5, 0x4a, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="b4a5af8840000000140012800b0001006261746164760000040002"], 0x3c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r6, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

3m52.582585613s ago: executing program 3 (id=333):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

3m52.081101997s ago: executing program 3 (id=335):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
connect$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

3m36.8986688s ago: executing program 33 (id=335):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
connect$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

3m23.3252363s ago: executing program 1 (id=391):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280))
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

3m14.874259463s ago: executing program 1 (id=407):
inotify_init1(0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

3m14.279184215s ago: executing program 1 (id=408):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016fbfbd7000fedbdf250900000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000)

3m13.786054312s ago: executing program 1 (id=412):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0x3)
close(0x4)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

3m13.196807899s ago: executing program 1 (id=413):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0xf1}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2633, 0x4727, 0x8, 0x0, 0x0)

3m12.518418755s ago: executing program 1 (id=416):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280))
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

2m56.910654967s ago: executing program 34 (id=416):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280))
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

8.632679521s ago: executing program 5 (id=875):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000000", 0x40}], 0x1}, 0x0)

7.323114665s ago: executing program 5 (id=879):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000240)='|w')
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4850)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0xb8, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0xa4, 0x1, [@m_simple={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x0, 0x3b604f5b}}, @TCA_DEF_DATA={0x7, 0x3, '*#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x81, 0x0, 0x7fffffff, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff4, 0x0, 0x4, 0x401, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.154019722s ago: executing program 2 (id=880):
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000, @mcast2, 0xf}, 0x1c)

6.357117409s ago: executing program 6 (id=885):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8)

6.045072356s ago: executing program 2 (id=886):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, &(0x7f0000000300))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456})
io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0)

5.709363241s ago: executing program 7 (id=887):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.660200801s ago: executing program 6 (id=888):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[], 0x1, 0x14de, &(0x7f0000002a40)="$eJzs3Hl0VUXWKPDaVXUgxBivERkCtWsfuGKAIiIiMoiIDCIiIiIiMomAgBEREQERAjKJGBCReYiIDAEBkSFCROZ5klnASCMiIiKTTAL1Fnb3x9dtf4t+r30ff2T/1qqV2jl377tPdlbuOXet3J+6DK3RqGbVBkQk/iPw1y+pQogYIcRAIcQtQohACFE2oWzC1eN5FKT+Z0/C/lxPZdzoDtiNxPPP2Xj+ORvPP2fj+edsPP+cjeefs/H8czaeP2M52dYZBW/llXMXv/+fk/Hrf87G88/ZeP45G88/Z+P552w8/5yN55+z8fxzNp4/YznZjX7/mdeNXTf6948xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWM5w3l+jhRB/39/ovhhjjDHGGGOMMfbn8blvdAeMMcYYY4wxxhj7/w+EFEpoEYhcIreIEXlErLhJxImbRby4RUTErSJB3CbyittFPpFfFBAFRaIoJAoLI1BYQSIURURRERV3iGLiTpEkiosSoqRwopRIFneJ0uJuUUbcI8qKe0U5cZ8oLyqIiqKSuF9UFg+IKuJBUVU8JKqJ6qKGqCkeFrXEI6K2eFTUEY+JuuJxUU88IeqLJ0UD8ZRoKJ4WjcQzorF4VjQRTUUz0Vy0+H/Kf0P0EG+KnqKXSBW9RR/xlugr+on+YoAYKN4Wg8Q7YrB4V6SJIWKoeE8ME++L4eIDMUKMFKPEaDFGjBXjxHgxQUwU6eJDMUl8JCaLj8UUMVVME9NFhpghZopPxCwxW8wRn4q54jMxT8wXC8RCkSk+F4vEYpElvhBLxJdiqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqv4SmwT28UOsVPsErvFHvG12Cv2if3iG5Etvv2/zD/3T/ldQYAACRI0aMgFuSAGYiAWYiEO4iAe4iECEUiABMgLeSEf5IMCUAASIREKQ2FAQCAgKAJFIApRKAbFIAmSoASUAAcOkiEZSsPdUAbKQFkoC+WgHJSHClABKkElqAyVoQpUgapQFapBNagBNeBheBgegdpQG+pAHagLdaEe1IP6UB8aQANoCA2hETSCxtAYmkATaAbNoAW0gJbQElpBK2gDbaAttIX20B5SIAU6QAdoBx2hE3SCztAZukAX6ArdoBu8AW/Am/Am9IJqsjf0gT7QF/pCfxgAA+BtGATvwDvwLqTBEBgK78F78D4Mh7MwAkbCKBgFleVYGAfjgeRESId0mASTYDJMhikwFabCdMiAGTATZsIsmA2z4VOYC5/BZzAf5sNCyIRMWASLIQuyYAmcg6WwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfAVfAWjYTvshJ2wG3bD1/A17IN9kAbZkA0H4AAchINwCA7BYTgMR+AIHIWjcAyOwXE4DifgJJyCk3AGzsBZOAfn4TxchItwCV5L/KHh7uLr0oS8Skstc8lcMkbGyFgZK+NknIyX8TIiIzJBJsi8Mq/MJ/PJArKATJSJsrAsLFGiJBnKIrKIjMqoLCaLySSZJEvIEtJJJ5NlsiwtS8sysowsK++V5eR9srysIFu7SrKSrCzbuCryQVlVVpXVZHVZQ9aUNWUtWUvWlrVlHVlH1pV1ZT35hKwve0N/eEpenUwjOQQay6HQRDaVzWRz+T48J1vK4dBKtpZt5AtyJIyA9rKlS5EvyQ5yHHSUr8jx8KrsLCdCF/m67Cq7ye7yDdlDtnI9ZS85BXrLPnI69JX9ZH85QM6C6vLqxGrId2WaHCKHyvfkQnhfDpcfyBFypBwlR8sxcqwcJ8fLCXKiTJcfyknyIzlZfiynyKlympwuM+QMOVN+ImfJ2XKO/FTOlZ/JeXK+XCAXykz5uVwkF8ss+YVcIr+US+UyuVyukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlV3Kb3C53yJ1yl9wt98iv5V65T+6X38hs+a08IP8iD8rv5CH5vTwsf5BH5I/yqPxJHpM/y+PyF3lCnpSn5Gl5Rv4qz8pz8ry8IC/K3+QleVlekV4KBUoqpbQKVC6VW8WoPCpW3aTi1M0qXt2iIupWlaBuU3nV7Sqfyq8KqIIqURVShZVRqKwiFaoiqqiKqjtUMXWnSlLFVQlVUjlVSiWru1Rpdbcqo+5RZdW9qpy6T5VXFVRFVUndryqrB1QV9aCqqh5S1VR1VUPVVA+rWuoRVVs9quqox1Rd9biqp55Q9dWTqoF6SjVUT6tG6hnVWD2rmqimqplqrlqo51RL9bxqpVqrNuoF1Va1U+3ViypFvaQ6qJdVR/WK6qReVZ3Va6qLel11Vd1Ud3VZXVFe9VS9VKrqrfqot1Rf1U/1VwPUQPW2GqTeUYPVuypNDVFD1XtqmHpfDVcfqBFqpBqlRqsxaqwap8arCWqiSlcfqknqIzVZfaymqKlqmpquMtQM1f9vleb8G/kf/Yv8wb8/+xa1VX2ltqntaofaqXap3WqP2qP2qr1qv9qvslW2OqAOqIPqoDqkDqnD6rA6oo6oo+qoOqaOqePquDqhTqoL6rQ6o35VZ9U5dU5dUBfVRXXpbz8DoUFLrbTWgc6lc+sYnUfH6pt0nL5Zx+tbdETfqhP0bTqvvl3n0/l1AV1QJ+pCurA2GrXVpENdRBfVUX2HLqbv1Em6uC6hS2qnS+lkfdd/nH+9/lroFrqlbqlb6Va6jW6j2+q2ur1ur1N0iu6gO+iOuqPupDvpzrqz7qK76K66q+6uu+seuofuqXvqVJ2q++i3dF/dT/fXA/RA/bYepAfpwXqwTtNpeqgeqofpYXq4Hq5H6BF6lB6lx+gxepwepyfoCTpdp+tJepKerCfrKXqKnqan6QydoWfqmXqWnqXn6Dl6rp6r5+l5eoFeoDN1pl6kF+ksnaWX6CV6qV6ml+kVeoVepVfpNXqNXqfX6Q16g96kN+mleqveqrfpbXqH3qF36V16j96j9+q9er/er7N1tj6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/oU/qUPqPP6LP6rD6vz+uL+qK+pC/pK/rK1cu+QAYy0IEOcgW5gpggJogNYoO4IC6ID+KDSBAJEoKEIG9we5AvyB8UCAoGiUGhoHBgAgxsQEEYFAmKBtHgjqBYcGeQFBQPSgQlAxeUCpKDu4LSwd1BmeCeoGxwb1AuuC8oH1QIKgaVgvuDysEDQZXgwaBq8FBQLage1AhqBg8HtYJHgtrBo0Gd4LGgbvB4UC94IqgfPBk0CJ4KGgZPB42CZ4LGwbNBk6Bp0CxoHrT4U+t7fzb/866n6WVSTW/Tx7xl+pp+pr8ZYAaat80g844ZbN41aWaIGWreM8PM+2a4+cCMMCPNKDPajDFjzTgz3kwwE026+dBMMh+ZyeZjM8VMNdPMdJNhZpiZ5hMzy8w2c8ynZq75zMwz880Cs9Bkms/NIrPYZJkvzBLzpVlqlpnlZoVZaVaZ1WaNWWvWmfVmg9loNpnNZovZar4y28x2s8PsNLvMbrPHfG32mn1mv/nGZJtvzQHzF3PQfGcOme/NYfODOWJ+NEfNT+aY+dkcN7+YE+akOWVOmzPmV3PWnDPnzQVz0fxmLpnL5orxVy/ur768o0aNuTAXxmAMxmIsxmEcxmM8RjCCCZiAeTEv5sN8WAALYCImYmEsjFcREhbBIhjFKBbDYpiESVgCS6BDh8mYjKWxNJbBMlgWy2I5LIflsTxWxIp4P96PD+AD+CA+iA/hQ1gdq2NNrIm1sBbWxtpYB+tgXayL9bAe1sf62AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsf2mIIp2AE7YEfsiJ2wE3bGztgFu2BX7IrdsTv2wB7YE3tiKqZiH+yDfbEv9sf+OBAH4iAchINxMKZhGg7FoTgMh+FwHI4jcCSOwtE4BsfiOByPE3AipmM6TsJJOBkn4xScgtNwGmZgBs7EmTgLZ+EcnINzcS7Ow3m4ABdgJmbiIlyEWZiFS3AJLsWluByX40pciatxNa7Ftbge1+NG3IibcTNuxa24DbfhDtyBu3AX7sE9uBf34n7cj9mYjQfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AEnsJTeAbP4Fk8i+fxPF7E3/ASXsYr6DHG5rGx9iYbZ2+28fYW+89xAVvQJtpCtrA1Np/N/w8xWmuTbHFbwpa0zpayyfauP8TlbQVb0Vay99vK9gFb5Q9xLfuIrW0ftXXsY7amffgf4rr2cVvPPmPr22dtA9vUNrTNbSP7jG1sn7VNbFPbzDa3bW07296+aFPsS7aDffkP8SK72K616+x6u8HutfvseXvBHrU/2Yv2N9vT9rID7dt2kH3HDrbv2jQ75A/xKDvajrFj7Tg73k6wE/8QT7PTbYadYWfaT+wsO/sPcab93M61WXaenW8X2IW/x1d7yrJf2CX2SxuNX2aX2xV2pV1lV9s1/9XrCrvJbrZb7B77td1mt9sddqfdZXf/Hl89j/32G5ttv7VH7I/2oP3OHrLH7GH7w+/x1fM7Zn+2x+0v9oQ9aU/Z0/aM/dWeted+P/+r537aXrZXrLeCgCQp0hRQLspNMZSHYukmiqObKZ5uoQjdSgl0G+Wl2ykf5acCVJASqRAVJkNIlohCKkJFKUp3UDG6k5KoOJWgkuSoFCXTXVSa7qYydA+VpXupHN1H5akCVaRKdD9VpgeoCj1IVekhqkbVqQbVpIepFj1CtelRqkOPUV16nOrRE1SfnqQG9BQ1pKepET1DjelZakJNqRk1pxb0HLWk56kVtaY29AK1pXbUnl6kFHqJOtDL1JFeoU70KnWm16gLvU5dqRt1pzeoB71JPakXpVJv6kNvUV/qR/1pAA2kt2kQvUOD6V1KoyE0lN6jYfQ+DacPaASNpFE0msbQWBpH42kCTaR0+pAm0Uc0mT6mKTSVptF0yqAZNJM+oVk0m+bQpzSXPqN5NJ8W0ELKpM9pES2mLPqCltCXtJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lb6ibbSddtBO2kW7aQ99TXtpH+2nbyibvqUD9Bc6SN/RIfqeDtMPdIR+pKP0Ex2jn+k4/UIn6CSdotN0hn6ls3SOztMFuki/0SW6TFfIkwghlKEKdRiEucLcYUyYJ4wNbwrjwpvD+PCWMBLeGiaEt4V5w9vDfGH+sEBYMEwMC4WFQxNiaEMKw7BIWDSMhneExcI7w6SweFgiLBm6sFSYHN4Vlg7vDsuE94Rlw3vDcuF9YfmwQvjMY5XC+8PK4QNhlfDBsGr4UFgtrB7WCGuGD4e1wkfC2uGjYZ3wsbBM+HhYL3wirB8+GTYInwobhk+HjcJnwsbhs2GTsGnYLGwetgifC1uGz4etwtZhm/CFsG3YLmwfvhimhC+FHcKXr3s8Newd9gnfCt8KvX9ULYgujGZGP48uii6OZkW/iC6JfhldGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEvW+Zm7hwEmnnHaBy+VyuxiXx8W6m1ycu9nFu1tcxN3qEtxtLq+73eVz+V0BV9AlukKusDMOnXXkQlfEFXVRd4cr5u50Sa64K+FKOudKuWTX3LVwLVxL97xr5Vq7Nu4F94Jr59q5F92L7iXXwb3sOrpXXCf3quvsXnOvudddV9fNdXdvuB7uTdfT9XKpLtX1cX1cX9fX9Xf93UA30A1yg9xgN9iluTQ31A11w9wwN9wNdyPcCDfKjXJj3Bg3zo1zE9wEl+7S3SQ3yU12k90UN8VNc9NchstwM91MN8vNcnPcHDc3aa6b5+a5BW6By3SZbpFb5LJcllvilrilbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+a2uR1uh9vldrk9bo/b6/a6/W6/y3bZ7oA74A66g+6Q+94ddj+4I+5Hd9T95I65n91x94s74U66U+60O+N+dWfdOXfeXXAX3W/ukrvsrjjv0iMfRiZFPopMjnwcmRKZGpkWmR7JiMyIzIx8EpkVmR2ZE/k0MjfyWWReZH5kQWRhJDPyeWRRZHEkK/JFZEnky8jSyLLI8siKyMrIqoj3hbaFvogv6qP+Dl/M3+mTfHFfwpf0zpfyyf4uX9rf7cv4e3xZf68v5+/z5X0FX9E/65v4pr6Zb+5b+Od8S/+8b+Vb+zb+Bd/Wt/Pt/Ys+xb/kO/iXfUf/iu/kX/Wd/Wu+i3/dd/XdfHf/hu/h3/Q9fS+f6nv7Pv4t39f38/39AD/Qv+0H+Xf8YP+uT/ND/FD/nh/m3/fD/Qd+hB/pR/nRfowf68f58X6Cn+jT/Yd+kv/IT/Yf+yl+qp/mp/sMP8PP9J/4WX62n+M/9XP9Z36en+8X+IU+03/uF/nFPst/4Zf4L/1Sv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+V3+a3+x1+p9/ld/s9/mu/1+/z+/03Ptt/6w/4v/iD/jt/yH/vD/sf/BH/oz/qf/LH/M/+uP/Fn/An/Sl/2p/xv/qz/pw/7y/4i/43f8lf9lf4f9YYY4wxxv4t6jrHe/+L78m/rav6CCFu3l7w8D/X3Jjvr/t+MrFtRAjxUq8uT/19VauWmpr6t8cuVSIoOl8IERG5/p7/+yby1/0y0Ua0EymitSj9L/vrJ7tdpOvUj94rROx/y4kR12Lf6+/17/4f6o+de93684VIKnotJ4+4Fl/rv8z/UD9/y+vUz/NduhCt/ltOnLgWX6ufLJ4XL4uUf3gkY4wxxhhjjDH2V/1kxU7Xu7+9en+eqK/l5BbX4uvdnzPGGGOMMcYYY+zGe7Vb9xefS0lp3Yk3vOENb/5rc6P/MjHGGGOMMcb+bNcu+m90J4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWM71v/FxYjf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEb7f8EAAD//xWWNrU=")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
sendfile(r0, r1, 0x0, 0x20fffe82)

5.46382374s ago: executing program 0 (id=889):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000000", 0x40}], 0x1}, 0x0)

5.236685625s ago: executing program 5 (id=890):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.55646878s ago: executing program 2 (id=891):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x104, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0xff}, {@in=@local, 0x4d4, 0x3c}, @in=@loopback, {0x0, 0x81, 0x6, 0xffff, 0x82520, 0x2, 0xffbffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xffffffffffffffde}, {0x2, 0xfffffffc, 0x40}, 0x70bd28, 0x3504, 0x2, 0x1, 0x0, 0x42}, [@coaddr={0x14, 0xe, @in=@rand_addr=0x64010101}]}, 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

4.417390264s ago: executing program 7 (id=892):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r3=>r0, 0x0, 0x1, 0x7fdd01b6})
r4 = accept$unix(r3, &(0x7f0000000300), &(0x7f0000000040)=0x6e)
recvfrom$unix(r4, &(0x7f0000000240)=""/129, 0x81, 0x2141, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001900010000000000ffdbdf250a01090008000980c32d540400ce8004001280"], 0x20}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300)
read(r6, &(0x7f0000000080)=""/38, 0x26)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x1f, 0x42401837745673e4, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e1e, @local}})

4.350349475s ago: executing program 5 (id=893):
syz_open_procfs(0x0, 0x0)
unshare(0x6020400)
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x3c, r2, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806)
bind$tipc(r0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000001000)={0x77359400})
getpid()
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x80}, [@IFLA_MASTER={0x8, 0x3, r8}, @IFLA_VF_PORTS={0x4}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xff00}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x58}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xad, 0x6c, 0x86, 0x20, 0x72f, 0x2200, 0x3fbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xaf, 0xd7, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0)

4.136584237s ago: executing program 0 (id=894):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)

4.033626809s ago: executing program 6 (id=895):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217", 0x58, 0x440dc, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000200)="184cbb4872cd7c19f8eabb1e8b1925204fda59f540e5c81f769b094a63077cc251012d314d2342669e45d8714c5d0ac8b61296ccd48a720e0dcf762194d296e2c659010071ce5b55e8c960e2f05345f074d75f", 0x53, 0x410c1, 0x0, 0x0)

3.41317077s ago: executing program 0 (id=896):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x48}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.393197798s ago: executing program 6 (id=897):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
readv(r0, &(0x7f0000000200), 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

3.355825605s ago: executing program 7 (id=898):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8)

3.005091427s ago: executing program 2 (id=899):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x2c, 0x2, 0x5c)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="23000300010006", 0x7)
connect$inet(r1, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
socket$netlink(0x10, 0x3, 0xe)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffe, 0xf44, 0x4e24, 0x800, 0x2}, {0x3, 0xe072, 0x26f49972, 0xfffffffffffffefe, 0x80, 0x7ff, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x2, 0x1}, 0xa, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xda, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0xfffffffb, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x1}}, 0xe8)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, 0x0, 0x0)

2.29272487s ago: executing program 0 (id=900):
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@mcast2, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0xd, 0x0, 0x0, 0xffffffff, 0x80006})
sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701fc"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "03e08b113c0af5000000000000008000", '\x00', "b08068ebce17ab00"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0xe526, 0x7, 0x9, {0x5, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x0, 0x1000, 0x7f, r2, r3, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone3(&(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, {0x1d}, &(0x7f0000003f00), 0x0, 0x0, 0x0}, 0x58)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00')
copy_file_range(r7, 0x0, r4, &(0x7f0000000140)=0xd3e2, 0x2, 0x0)
preadv(r7, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x2f, 0x7ff)

2.213399955s ago: executing program 7 (id=901):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, &(0x7f0000000300))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456})
io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0)

2.124781902s ago: executing program 6 (id=902):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000380), 0x0)

1.620973618s ago: executing program 0 (id=903):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.59543626s ago: executing program 5 (id=904):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000000", 0x40}], 0x1}, 0x0)

1.37842074s ago: executing program 6 (id=905):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3ctqFEscx/Ff9UySycmQ07kcDriMBnQjMW7EzQSZhxAXomZGCA4RTQR1YxQXIqJ7976CryC4UXwBXbnyAUYQWqq65pqe7jhkujP4/YChp7uq61/pS9V/wJQA/LWu1L++u/jd/jNSSSXp5WUpkPRCKkv6T/9XHuzu7+y3mo2U87QjRxXJKK5pDhXa3m0m1a3I1/BC+6msav8+TEYURVvfJO0VHQgK5Z7+BIE0559Od7ySe2Tpno5Z7+CY45g2pq22Hmqx6DgAAMXy43/gx/mqn78HgbTuh/0TOf6Pq110ABMXpR7tG/9dlhUZe33/dYd6+Z5L4ezxoJMlHqXlmaHPs4rvrIEJpsnKKl0swfztnVbz/PbdViPQM9W8vmKr7mcjvnU7MqJdS8hNUxyh7yZ5Rrng+jBj+7A5Iv6VMVscm/loPpvrJtRbNbrzv3Jk7GVyVyoculJx/Bujz+h6GdpS8q+NWq0WDBRZco2c8i14Gb2sJGck6txRSxr8giDMitPVWh6qFffuQkatlbjW1vxArc3OpxG1Vgfasr3p3s2j25s089pcNWv6ofeq983/AxvfulKfzN5TY9bjocD9xuP+zCY3V3bnDA+NHAe6Vh3c0/0tzo0K/Wf6Ow1DnqQce6VbuqTFvUeP75RareZ9u3EzYeNetbtn5rmUWKaAjUC9PTroHZpT/EXkoVqdQSnPUM8d6wnt+yOzsH3KcungibkTitiof8r3RipiI6d3FArVu+iZRT/kEhDy5uZdcf7Xl69suMme/RGmzNMzJ2T+jJGdY3czoMpA/WW39c8fZXALozO4o+Zcp89KZ7q7fkUZLYY+zukQpU39LFPXF93g+38AAAAAAAAAAAAAAAAAAIBpk8d/Jyi6jwAAAAAAAAAAAAAAAAAAAAAATLvu+r/qrP8rv/5vJX393+G//F2KV3g5lvV/3+yK9X+ByfsdAAD//y0Iis0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[], 0x1, 0x14de, &(0x7f0000002a40)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
sendfile(r0, r1, 0x0, 0x20fffe82)

1.353479105s ago: executing program 7 (id=906):
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = gettid()
syz_pidfd_open(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = gettid()
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0xfffffffe, 0xb0002a, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50)

1.316834943s ago: executing program 2 (id=907):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217", 0x58, 0x440dc, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000200)="184cbb4872cd7c19f8eabb1e8b1925204fda59f540e5c81f769b094a63077cc251012d314d2342669e45d8714c5d0ac8b61296ccd48a720e0dcf762194d296e2c659010071ce5b55e8c960e2f05345f074d75fdc5b99", 0x56, 0x410c1, 0x0, 0x0)

950.098158ms ago: executing program 0 (id=908):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r3=>r0, 0x0, 0x1, 0x7fdd01b6})
r4 = accept$unix(r3, &(0x7f0000000300), &(0x7f0000000040)=0x6e)
recvfrom$unix(r4, &(0x7f0000000240)=""/129, 0x81, 0x2141, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001900010000000000ffdbdf250a01090008000980c32d540400ce8004001280"], 0x20}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300)
read(r6, &(0x7f0000000080)=""/38, 0x26)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x1f, 0x42401837745673e4, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e1e, @local}})

532.09031ms ago: executing program 5 (id=909):
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0xc8601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"})
syz_io_uring_setup(0x5680, 0x0, 0x0, &(0x7f0000000140))
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)

400.096502ms ago: executing program 7 (id=910):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xffe0}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xe, 0xfff2}, {0x0, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r7)

0s ago: executing program 2 (id=911):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7, 0x2, [0x7, 0x2]}, 0xc)

kernel console output (not intermixed with test programs):

altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  286.596305][ T5441] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.606851][ T5441] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.622671][ T5441] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  286.632864][ T5441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.641743][  T795] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  286.752416][ T6539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.771931][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.772584][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  286.772649][   T30] audit: type=1326 audit(1770456141.670:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  286.779729][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.863909][ T6491] bridge_slave_1: entered allmulticast mode
[  286.899441][  T795] usb 2-1: Using ep0 maxpacket: 16
[  287.019833][  T795] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  287.031641][  T795] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  287.043064][  T795] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  287.052729][  T795] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice= 0.00
[  287.062208][  T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.093116][   T30] audit: type=1326 audit(1770456141.680:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  287.113620][ T6491] bridge_slave_1: entered promiscuous mode
[  287.268377][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'.
[  287.621665][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.775249][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.824253][ T1099] bridge_slave_1: left allmulticast mode
[  287.830377][ T1099] bridge_slave_1: left promiscuous mode
[  287.836912][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.904310][ T1099] bridge_slave_0: left allmulticast mode
[  287.910865][ T1099] bridge_slave_0: left promiscuous mode
[  287.917654][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.601055][   T50] Bluetooth: hci5: command tx timeout
[  289.020836][ T5850] usb 2-1: USB disconnect, device number 5
[  289.178521][ T5441] usb 4-1: USB disconnect, device number 7
[  289.225595][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.392453][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.452167][ T1099] bond0 (unregistering): Released all slaves
[  289.833186][ T6491] team0: Port device team_slave_0 added
[  290.127751][ T6491] team0: Port device team_slave_1 added
[  290.285908][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'.
[  290.365456][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.376378][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.405253][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.880872][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.887994][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.916840][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.923386][ T6581] libceph: resolve '0..' (ret=-3): failed
[  291.174482][ T1099] hsr_slave_0: left promiscuous mode
[  291.309678][ T1099] hsr_slave_1: left promiscuous mode
[  291.316658][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.326974][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.521872][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.532780][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.669891][ T1099] veth1_macvtap: left promiscuous mode
[  291.684893][ T1099] veth0_macvtap: left promiscuous mode
[  291.707057][ T1099] veth1_vlan: left promiscuous mode
[  291.731114][ T1099] veth0_vlan: left promiscuous mode
[  293.800753][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  293.871614][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  295.273369][ T6491] hsr_slave_0: entered promiscuous mode
[  295.311247][ T6491] hsr_slave_1: entered promiscuous mode
[  297.435144][ T6491] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  297.494182][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[  297.578381][ T6609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.205'.
[  297.632608][ T6491] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  297.780942][ T6491] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  297.906082][ T6491] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  297.920543][  T795] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  298.132181][  T795] usb 1-1: Using ep0 maxpacket: 32
[  298.171326][  T795] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  298.199757][ T5078] Bluetooth: hci3: command 0x0406 tx timeout
[  298.200095][ T5793] Bluetooth: hci4: command 0x0406 tx timeout
[  298.205934][ T5078] Bluetooth: hci2: command 0x0406 tx timeout
[  298.206032][ T5078] Bluetooth: hci1: command 0x0406 tx timeout
[  298.280984][  T795] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  298.295327][  T795] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  298.307591][  T795] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  298.377797][  T795] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  298.390430][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.401415][  T795] usb 1-1: Product: syz
[  298.405779][  T795] usb 1-1: Manufacturer: syz
[  298.411013][  T795] usb 1-1: SerialNumber: syz
[  298.644636][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  298.683474][  T795] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input9
[  298.879445][  T795] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  298.888126][  T795]  (id 0x00)
[  299.307218][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.389253][  T795] rc_core: IR keymap rc-imon-pad not found
[  299.395393][  T795] Registered IR keymap rc-empty
[  299.436987][  T795] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  299.447792][  T795] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  299.554389][ T6491] 8021q: adding VLAN 0 to HW filter on device team0
[  299.585914][  T795] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[  299.643797][  T795] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input10
[  299.685028][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.692659][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.756951][  T795] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:5> initialized
[  299.766403][ T5844] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  299.806831][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.814484][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.936266][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  299.948113][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.958499][ T5844] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  299.968063][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.217437][ T5850] usb 1-1: USB disconnect, device number 5
[  300.224096][ T6609] imon:send_packet: packet tx failed (-71)
[  300.238371][ T5844] usb 4-1: config 0 descriptor??
[  300.276151][ T6609] imon:vfd_write: send packet #2 failed
[  300.874696][ T5844] elan 0003:04F3:0755.0002: failed to start in urb: -90
[  300.936319][ T5844] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  301.100743][ T5844] usb 4-1: USB disconnect, device number 8
[  301.603937][  T795] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  301.849239][  T795] usb 3-1: Using ep0 maxpacket: 16
[  301.899170][  T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.910626][  T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.923627][  T795] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  301.937130][  T795] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  301.946595][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.036612][ T6641] fido_id[6641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  302.214780][  T795] usb 3-1: config 0 descriptor??
[  302.521079][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.535550][ T6658] netlink: 216 bytes leftover after parsing attributes in process `syz.3.215'.
[  302.717361][ T6660] veth1_macvtap: left promiscuous mode
[  302.751526][ T6645] random: crng reseeded on system resumption
[  302.830795][ T6660] macsec0: entered promiscuous mode
[  303.033379][  T795] usbhid 3-1:0.0: can't add hid device: -71
[  303.039976][  T795] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  303.131088][  T795] usb 3-1: USB disconnect, device number 4
[  303.206790][ T6665] veth1_macvtap: entered promiscuous mode
[  303.237559][ T6665] macsec0: left promiscuous mode
[  304.110562][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[  304.981736][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[  305.380588][ T6491] veth0_vlan: entered promiscuous mode
[  305.552786][ T6491] veth1_vlan: entered promiscuous mode
[  306.039111][ T6703] syzkaller0: entered promiscuous mode
[  306.044853][ T6703] syzkaller0: entered allmulticast mode
[  306.250323][   T30] audit: type=1326 audit(1770456161.140:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  306.344984][   T30] audit: type=1326 audit(1770456161.240:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  306.474474][   T30] audit: type=1326 audit(1770456161.290:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  306.703900][   T30] audit: type=1326 audit(1770456161.600:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  306.931236][ T6491] veth0_macvtap: entered promiscuous mode
[  306.976611][ T6491] veth1_macvtap: entered promiscuous mode
[  307.353449][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.496981][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.692999][ T1085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.719811][ T5844] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  307.771095][ T1085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.830267][ T1085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.864073][ T1085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.911922][ T5844] usb 3-1: Using ep0 maxpacket: 16
[  307.950155][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.961897][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.974453][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  307.987783][ T5844] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  307.997166][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.191393][ T5844] usb 3-1: config 0 descriptor??
[  308.561663][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[  308.746357][ T6716] random: crng reseeded on system resumption
[  308.931227][ T5844] usbhid 3-1:0.0: can't add hid device: -71
[  308.941137][ T5844] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  309.097047][ T5844] usb 3-1: USB disconnect, device number 5
[  311.389220][ T5850] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  311.435378][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'.
[  311.563171][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'.
[  311.565052][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'.
[  311.610568][ T5850] usb 4-1: config 160 has an invalid interface number: 200 but max is 0
[  311.619362][ T5850] usb 4-1: config 160 has no interface number 0
[  311.636896][ T5850] usb 4-1: config 160 interface 200 has no altsetting 0
[  311.689553][ T5850] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  311.701627][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.711635][ T5850] usb 4-1: Product: syz
[  311.715989][ T5850] usb 4-1: Manufacturer: syz
[  311.721804][ T5850] usb 4-1: SerialNumber: syz
[  312.107434][ T5850] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  312.148684][ T5850] usb 4-1: MIDIStreaming interface descriptor not found
[  312.352509][ T5850] usb 4-1: USB disconnect, device number 9
[  312.816196][   T30] audit: type=1326 audit(1770456167.700:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  312.841194][   T30] audit: type=1326 audit(1770456167.710:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21ec75b78e code=0x7ffc0000
[  313.109116][ T6795] schedule_timeout: wrong timeout value fffffffffffffff8
[  313.116485][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: vivid-004-sdr-c Not tainted syzkaller #0 PREEMPT(voluntary) 
[  313.116616][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  313.116696][ T6795] Call Trace:
[  313.116744][ T6795]  <TASK>
[  313.116789][ T6795]  __dump_stack+0x26/0x30
[  313.116939][ T6795]  dump_stack_lvl+0x14c/0x1c0
[  313.117088][ T6795]  dump_stack+0x1e/0x25
[  313.117216][ T6795]  schedule_timeout+0x1d2/0x240
[  313.117349][ T6795]  ? kthread_should_stop+0xd7/0x140
[  313.117525][ T6795]  vivid_thread_sdr_cap+0x12af/0x1720
[  313.117677][ T6795]  ? __pfx_autoremove_wake_function+0x10/0x10
[  313.117909][ T6795]  kthread+0xd5a/0xf00
[  313.118031][ T6795]  ? __pfx_vivid_thread_sdr_cap+0x10/0x10
[  313.118205][ T6795]  ? __pfx_kthread+0x10/0x10
[  313.118330][ T6795]  ret_from_fork+0x207/0x6f0
[  313.118493][ T6795]  ? __switch_to+0x521/0x750
[  313.118636][ T6795]  ? __pfx_kthread+0x10/0x10
[  313.118764][ T6795]  ret_from_fork_asm+0x1a/0x30
[  313.118951][ T6795]  </TASK>
[  313.128921][   T30] audit: type=1326 audit(1770456167.710:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.247610][   T30] audit: type=1326 audit(1770456167.710:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.270941][   T30] audit: type=1326 audit(1770456167.710:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.293253][   T30] audit: type=1326 audit(1770456167.900:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.315906][   T30] audit: type=1326 audit(1770456167.900:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.339920][   T30] audit: type=1326 audit(1770456167.950:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.364638][   T30] audit: type=1326 audit(1770456167.950:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.375164][ T6795] schedule_timeout: wrong timeout value fffffffffffffffa
[  313.387820][   T30] audit: type=1326 audit(1770456167.950:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec79aeb9 code=0x7ffc0000
[  313.394331][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: vivid-004-sdr-c Not tainted syzkaller #0 PREEMPT(voluntary) 
[  313.394460][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  313.394534][ T6795] Call Trace:
[  313.394580][ T6795]  <TASK>
[  313.394627][ T6795]  __dump_stack+0x26/0x30
[  313.394781][ T6795]  dump_stack_lvl+0x14c/0x1c0
[  313.394933][ T6795]  dump_stack+0x1e/0x25
[  313.395069][ T6795]  schedule_timeout+0x1d2/0x240
[  313.395196][ T6795]  ? kthread_should_stop+0xd7/0x140
[  313.395381][ T6795]  vivid_thread_sdr_cap+0x12af/0x1720
[  313.395542][ T6795]  ? __pfx_autoremove_wake_function+0x10/0x10
[  313.395781][ T6795]  kthread+0xd5a/0xf00
[  313.395902][ T6795]  ? __pfx_vivid_thread_sdr_cap+0x10/0x10
[  313.396077][ T6795]  ? __pfx_kthread+0x10/0x10
[  313.396201][ T6795]  ret_from_fork+0x207/0x6f0
[  313.396373][ T6795]  ? __switch_to+0x521/0x750
[  313.396518][ T6795]  ? __pfx_kthread+0x10/0x10
[  313.396647][ T6795]  ret_from_fork_asm+0x1a/0x30
[  313.396840][ T6795]  </TASK>
[  313.536730][ T6794] udevd[6794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.140702][ T5850] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  314.359592][ T5850] usb 1-1: Using ep0 maxpacket: 16
[  314.438493][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  314.489820][ T5850] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  314.499464][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.507798][ T5850] usb 1-1: Product: syz
[  314.512333][ T5850] usb 1-1: Manufacturer: syz
[  314.517180][ T5850] usb 1-1: SerialNumber: syz
[  314.633640][ T5850] usb 1-1: config 0 descriptor??
[  314.634538][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'.
[  314.695435][ T5850] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  314.710675][ T5850] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  314.993707][ T6824] xt_CT: You must specify a L4 protocol and not use inversions on it
[  315.311334][ T6828] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[  315.393482][ T5850] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  315.492736][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.501459][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.803526][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.812064][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.877239][ T5850] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  315.886420][ T5850] em28xx 1-1:0.0: board has no eeprom
[  317.091788][ T6805] em28xx 1-1:0.0: reading from i2c device at 0xfe00 failed (error=-5)
[  317.155394][ T5850] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  317.165062][ T5850] em28xx 1-1:0.0: dvb set to bulk mode.
[  317.171169][ T5842] em28xx 1-1:0.0: Binding DVB extension
[  317.310222][ T5850] usb 1-1: USB disconnect, device number 6
[  317.361164][ T5850] em28xx 1-1:0.0: Disconnecting em28xx
[  317.595367][ T5842] em28xx 1-1:0.0: Registering input extension
[  317.670074][ T5850] em28xx 1-1:0.0: Closing input extension
[  317.775168][ T5850] em28xx 1-1:0.0: Freeing device
[  318.087382][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'.
[  318.489026][ T5842] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  318.645257][ T6877] netlink: 'syz.3.268': attribute type 1 has an invalid length.
[  318.708998][ T5842] usb 6-1: Using ep0 maxpacket: 16
[  318.725429][ T6877] bond2: (slave syz_tun): Releasing active interface
[  318.740591][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.752073][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.763710][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  318.780111][ T5842] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  318.790543][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.865415][ T5842] usb 6-1: config 0 descriptor??
[  319.423399][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  319.423468][   T30] audit: type=1326 audit(1770456174.310:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.454144][ T6866] random: crng reseeded on system resumption
[  319.639000][   T30] audit: type=1326 audit(1770456174.390:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.662500][   T30] audit: type=1326 audit(1770456174.400:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd02575b78e code=0x7ffc0000
[  319.685216][   T30] audit: type=1326 audit(1770456174.400:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.710558][   T30] audit: type=1326 audit(1770456174.400:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.726750][ T5842] usbhid 6-1:0.0: can't add hid device: -71
[  319.735028][   T30] audit: type=1326 audit(1770456174.420:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.740038][ T5842] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  319.761826][   T30] audit: type=1326 audit(1770456174.430:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.794829][   T30] audit: type=1326 audit(1770456174.470:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.820825][   T30] audit: type=1326 audit(1770456174.470:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.845472][   T30] audit: type=1326 audit(1770456174.470:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd02579aeb9 code=0x7ffc0000
[  319.891471][ T5842] usb 6-1: USB disconnect, device number 2
[  320.245150][ T6898] fuse: Bad value for 'fd'
[  321.089128][ T5844] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  321.299352][ T5844] usb 2-1: Using ep0 maxpacket: 16
[  321.363765][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  321.469346][ T5844] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  321.480197][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.488392][ T5844] usb 2-1: Product: syz
[  321.493663][ T5844] usb 2-1: Manufacturer: syz
[  321.498534][ T5844] usb 2-1: SerialNumber: syz
[  321.581683][ T5844] usb 2-1: config 0 descriptor??
[  321.646625][ T5844] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  321.656365][ T5844] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  322.305677][ T5844] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  322.319348][ T5850] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  322.529829][ T5842] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  322.569631][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  322.581237][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.591384][ T5850] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  322.600842][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.897859][ T5844] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  322.906469][ T5844] em28xx 2-1:0.0: board has no eeprom
[  323.222784][ T5850] usb 4-1: config 0 descriptor??
[  323.229358][ T5842] usb 1-1: Using ep0 maxpacket: 16
[  323.241577][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.252723][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.263396][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  323.278922][ T5842] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  323.288176][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.326315][ T6938] zonefs (nullb0) ERROR: Not a zoned block device
[  325.133649][ T5842] usb 1-1: config 0 descriptor??
[  325.195279][ T5850] elan 0003:04F3:0755.0003: failed to start in urb: -90
[  325.341817][ T5850] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  325.437708][ T5844] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  325.446102][ T5844] em28xx 2-1:0.0: dvb set to bulk mode.
[  325.468635][ T5441] em28xx 2-1:0.0: Binding DVB extension
[  325.507189][ T5850] usb 4-1: USB disconnect, device number 10
[  325.574056][ T5842] usbhid 1-1:0.0: can't add hid device: -71
[  325.580814][ T5842] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  325.644149][ T5842] usb 1-1: USB disconnect, device number 7
[  325.713290][ T5844] usb 2-1: USB disconnect, device number 6
[  325.761162][ T5844] em28xx 2-1:0.0: Disconnecting em28xx
[  325.871365][ T6943] fuse: Unknown parameter '00000000000000000000003'
[  326.012365][ T5441] em28xx 2-1:0.0: Registering input extension
[  326.108376][ T5844] em28xx 2-1:0.0: Closing input extension
[  326.358356][ T5844] em28xx 2-1:0.0: Freeing device
[  326.366418][ T6942] fido_id[6942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  328.253359][ T6976] capability: warning: `syz.3.300' uses 32-bit capabilities (legacy support in use)
[  328.819416][ T5844] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  328.985877][ T6981] fuse: Unknown parameter '00000000000000000000003'
[  329.029033][ T5844] usb 1-1: Using ep0 maxpacket: 16
[  329.029082][ T5842] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  329.081460][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  329.128049][ T5844] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  329.137622][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.145961][ T5844] usb 1-1: Product: syz
[  329.150293][ T5844] usb 1-1: Manufacturer: syz
[  329.154987][ T5844] usb 1-1: SerialNumber: syz
[  329.257814][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  329.269302][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.279379][ T5842] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  329.288534][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.357264][ T5844] usb 1-1: config 0 descriptor??
[  329.410461][ T5842] usb 2-1: config 0 descriptor??
[  329.483177][ T5844] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  329.493497][ T5844] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  330.075629][ T5844] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  330.086721][ T5842] elan 0003:04F3:0755.0004: failed to start in urb: -90
[  330.223834][ T5842] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  330.419170][ T5842] usb 2-1: USB disconnect, device number 7
[  330.530944][ T5844] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  330.539250][ T5844] em28xx 1-1:0.0: board has no eeprom
[  330.929881][ T5844] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  330.937841][ T5844] em28xx 1-1:0.0: dvb set to bulk mode.
[  330.949037][ T5441] em28xx 1-1:0.0: Binding DVB extension
[  330.986403][ T6985] fido_id[6985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  331.081146][ T5844] usb 1-1: USB disconnect, device number 8
[  331.249233][ T5844] em28xx 1-1:0.0: Disconnecting em28xx
[  331.535743][ T5441] em28xx 1-1:0.0: Registering input extension
[  331.610553][ T5844] em28xx 1-1:0.0: Closing input extension
[  331.724388][ T5844] em28xx 1-1:0.0: Freeing device
[  331.784958][ T6993] syz.1.307 uses obsolete (PF_INET,SOCK_PACKET)
[  334.007322][ T7019] fuse: Unknown parameter '00000000000000000000003'
[  334.719268][ T5842] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  334.841144][ T5850] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  334.928273][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  334.939802][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.954685][ T5842] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  334.972040][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.069236][ T5850] usb 3-1: Using ep0 maxpacket: 16
[  335.111919][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  335.122584][ T5842] usb 1-1: config 0 descriptor??
[  335.190781][ T5850] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  335.200817][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.209181][ T5850] usb 3-1: Product: syz
[  335.213443][ T5850] usb 3-1: Manufacturer: syz
[  335.220314][ T5850] usb 3-1: SerialNumber: syz
[  335.320996][ T5850] usb 3-1: config 0 descriptor??
[  335.450600][ T5850] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  335.464364][ T5850] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  335.592143][ T5842] elan 0003:04F3:0755.0005: failed to start in urb: -90
[  335.644576][ T5842] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  335.838470][ T5842] usb 1-1: USB disconnect, device number 9
[  336.017741][ T7035] can: request_module (can-proto-5) failed.
[  336.031196][ T5850] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  336.486524][ T7041] fido_id[7041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  336.544978][ T5850] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  336.553617][ T5850] em28xx 3-1:0.0: board has no eeprom
[  336.895836][ T5850] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  336.906097][ T5850] em28xx 3-1:0.0: dvb set to bulk mode.
[  336.912534][ T5842] em28xx 3-1:0.0: Binding DVB extension
[  337.019599][ T5850] usb 3-1: USB disconnect, device number 6
[  337.060808][ T5850] em28xx 3-1:0.0: Disconnecting em28xx
[  337.348072][ T5842] em28xx 3-1:0.0: Registering input extension
[  337.421474][ T5850] em28xx 3-1:0.0: Closing input extension
[  337.542223][ T5850] em28xx 3-1:0.0: Freeing device
[  339.527025][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  339.527103][   T30] audit: type=1800 audit(1770456194.400:142): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.334" name="bus" dev="ramfs" ino=13225 res=0 errno=0
[  340.334907][   T30] audit: type=1804 audit(1770456195.230:143): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.337" name="/newroot/69/file0/file1" dev="ramfs" ino=13236 res=1 errno=0
[  341.416416][ T7070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.345241][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  347.352305][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  349.763909][    C0] vcan0: j1939_tp_rxtimer: 0xffff888051b92c00: rx timeout, send abort
[  349.773764][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888051b93c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  350.272447][    C0] vcan0: j1939_tp_rxtimer: 0xffff888051b92c00: abort rx timeout. Force session deactivation
[  351.052346][ T5850] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  351.309943][ T5850] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  351.311809][ T5441] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  351.322075][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0
[  351.428961][ T5850] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  351.441404][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  351.451111][ T5850] usb 3-1: Product: syz
[  351.455463][ T5850] usb 3-1: Manufacturer: syz
[  351.460403][ T5850] usb 3-1: SerialNumber: syz
[  351.561514][ T5441] usb 2-1: config 160 has an invalid interface number: 200 but max is 0
[  351.571801][ T5441] usb 2-1: config 160 has no interface number 0
[  351.609554][ T5850] usb 3-1: config 0 descriptor??
[  351.627106][ T5441] usb 2-1: config 160 interface 200 has no altsetting 0
[  351.684754][ T5441] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  351.694224][ T5441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.702439][ T5441] usb 2-1: Product: syz
[  351.706683][ T5441] usb 2-1: Manufacturer: syz
[  351.711541][ T5441] usb 2-1: SerialNumber: syz
[  351.845353][ T5850] usb 3-1: selecting invalid altsetting 0
[  352.134624][ T5850] usb 3-1: USB disconnect, device number 7
[  352.199241][ T5441] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  352.259190][ T5441] usb 2-1: MIDIStreaming interface descriptor not found
[  352.447004][   T30] audit: type=1804 audit(1770456207.340:144): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.349" name="/newroot/22/file0/file1" dev="ramfs" ino=13429 res=1 errno=0
[  352.534793][ T5441] usb 2-1: USB disconnect, device number 8
[  353.287741][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  353.457036][ T5787] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  355.620982][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'.
[  355.650984][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  355.670000][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  355.680013][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  355.703947][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  355.715388][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  356.907704][ T7194] overlayfs: failed to resolve './bus': -2
[  356.940539][   T30] audit: type=1804 audit(1770456211.830:145): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.361" name="/newroot/25/file0/file0/file1" dev="ramfs" ino=13485 res=1 errno=0
[  357.132430][   T30] audit: type=1800 audit(1770456211.920:146): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="bus" dev="ramfs" ino=14503 res=0 errno=0
[  357.335332][ T5842] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  357.579840][ T5842] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  357.590481][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0
[  357.701643][ T5842] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  357.711238][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  357.720226][ T5842] usb 3-1: Product: syz
[  357.724552][ T5842] usb 3-1: Manufacturer: syz
[  357.729420][ T5842] usb 3-1: SerialNumber: syz
[  357.804848][ T5800] Bluetooth: hci0: command tx timeout
[  357.845099][ T5842] usb 3-1: config 0 descriptor??
[  357.868110][ T7182] chnl_net:caif_netlink_parms(): no params data found
[  357.907783][ T5842] usb 3-1: selecting invalid altsetting 0
[  358.269519][ T5842] usb 3-1: USB disconnect, device number 8
[  358.609233][ T5800] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  358.651535][ T6800] udevd[6800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.909170][ T5800] Bluetooth: hci0: command tx timeout
[  360.101370][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.109468][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.159367][ T7182] bridge_slave_0: entered allmulticast mode
[  360.168646][ T7182] bridge_slave_0: entered promiscuous mode
[  360.211375][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.219102][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.264429][ T7182] bridge_slave_1: entered allmulticast mode
[  360.298433][ T7182] bridge_slave_1: entered promiscuous mode
[  360.421431][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[  360.745933][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.843096][ T7230] overlayfs: failed to resolve './bus': -2
[  360.864131][   T30] audit: type=1804 audit(1770456215.760:147): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.371" name="/newroot/30/file0/file0/file1" dev="ramfs" ino=13565 res=1 errno=0
[  360.892715][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.440158][ T7182] team0: Port device team_slave_0 added
[  361.593532][ T7182] team0: Port device team_slave_1 added
[  361.959270][ T5800] Bluetooth: hci0: command tx timeout
[  362.100036][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.107295][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.134006][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.514938][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.522281][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.548855][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.300110][ T5800] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  363.391942][ T7182] hsr_slave_0: entered promiscuous mode
[  363.402907][ T7182] hsr_slave_1: entered promiscuous mode
[  363.417527][ T7182] debugfs: 'hsr0' already exists in 'hsr'
[  363.423629][ T7182] Cannot create hsr debugfs directory
[  364.039098][ T5800] Bluetooth: hci0: command tx timeout
[  366.104928][ T7182] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  366.254454][ T7258] overlayfs: failed to resolve './bus': -2
[  366.273075][   T30] audit: type=1804 audit(1770456221.170:148): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.381" name="/newroot/85/file0/file0/file1" dev="ramfs" ino=14744 res=1 errno=0
[  366.320514][ T7182] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  366.393333][ T7182] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  366.466442][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'.
[  366.510431][ T7182] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  366.867481][ T5800] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[  367.568070][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.738484][ T7182] 8021q: adding VLAN 0 to HW filter on device team0
[  367.814024][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.821582][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.986721][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.994312][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.440230][   T30] audit: type=1800 audit(1770456223.300:149): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.391" name="bus" dev="ramfs" ino=14876 res=0 errno=0
[  370.539340][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.054224][ T5800] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[  371.589463][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'.
[  373.351919][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.598620][ T7182] veth0_vlan: entered promiscuous mode
[  373.924768][ T7182] veth1_vlan: entered promiscuous mode
[  374.820431][ T7182] veth0_macvtap: entered promiscuous mode
[  374.908652][ T7182] veth1_macvtap: entered promiscuous mode
[  375.365635][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.522564][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.673601][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.791729][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.839170][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.848249][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.499237][ T5800] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  377.576809][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'.
[  378.143112][ T7370] veth3: entered promiscuous mode
[  379.647282][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.655960][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.826295][   T30] audit: type=1800 audit(1770456234.720:150): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.416" name="bus" dev="ramfs" ino=15114 res=0 errno=0
[  379.853333][ T5800] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[  380.783111][ T7412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.876585][ T7412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.990030][ T7429] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[  381.459375][   T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  381.869808][   T31] usb 1-1: Using ep0 maxpacket: 16
[  381.910050][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  382.171218][   T31] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  382.180915][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.189482][   T31] usb 1-1: Product: syz
[  382.193799][   T31] usb 1-1: Manufacturer: syz
[  382.198559][   T31] usb 1-1: SerialNumber: syz
[  382.300684][ T7429] 8021q: adding VLAN 0 to HW filter on device bond1
[  382.872110][   T31] usb 1-1: config 0 descriptor??
[  384.691209][   T31] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected
[  384.805455][ T7430] bond1: (slave syz_tun): making interface the new active one
[  384.830810][   T31] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  385.069778][ T7430] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[  385.079345][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.145879][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.183405][ T5441] usb 1-1: USB disconnect, device number 10
[  385.206200][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.261331][ T5441] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  385.267481][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.342622][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'.
[  385.354424][ T5441] kobil_sct 1-1:0.0: device disconnected
[  387.070272][ T7458] syzkaller0: entered promiscuous mode
[  387.076052][ T7458] syzkaller0: entered allmulticast mode
[  387.161876][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.299793][ T7462] bond0: (slave rose0): Enslaving as an active interface with an up link
[  387.439555][ T5850] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  387.600231][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.608410][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.622227][ T5850] usb 6-1: device descriptor read/64, error -71
[  388.009042][ T5850] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  388.118014][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.126773][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.289054][ T5850] usb 6-1: device descriptor read/64, error -71
[  388.458024][ T5850] usb usb6-port1: attempt power cycle
[  388.863490][ T5850] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  389.325451][ T5850] usb 6-1: device descriptor read/8, error -71
[  392.320903][ T5850] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  394.344960][ T5850] usb 6-1: device descriptor read/8, error -71
[  394.502569][ T5850] usb usb6-port1: unable to enumerate USB device
[  394.980593][ T7490] syzkaller0: entered promiscuous mode
[  394.986341][ T7490] syzkaller0: entered allmulticast mode
[  395.086771][ T7494] TC_ACT_REPEAT abuse ?
[  395.593336][ T7499] netlink: 'syz.5.435': attribute type 1 has an invalid length.
[  395.890713][ T5800] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  396.060976][ T7499] 8021q: adding VLAN 0 to HW filter on device bond1
[  396.099473][ T5850] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  396.111382][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  396.128445][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  396.155568][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  396.172421][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  396.190735][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  396.268322][ T7502] bond1: (slave syz_tun): making interface the new active one
[  396.365874][ T7502] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[  396.389906][ T5850] usb 6-1: Using ep0 maxpacket: 16
[  396.530071][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  396.650418][ T5850] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  396.659906][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.668088][ T5850] usb 6-1: Product: syz
[  396.672644][ T5850] usb 6-1: Manufacturer: syz
[  396.677405][ T5850] usb 6-1: SerialNumber: syz
[  396.864138][ T5850] usb 6-1: config 0 descriptor??
[  396.951422][ T5850] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected
[  397.049647][ T5850] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  397.182499][ T5850] usb 6-1: USB disconnect, device number 7
[  397.297078][ T5850] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  397.440381][ T5850] kobil_sct 6-1:0.0: device disconnected
[  398.279384][ T5800] Bluetooth: hci2: command tx timeout
[  398.506259][ T7534] netlink: 'syz.5.444': attribute type 1 has an invalid length.
[  398.625292][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.662659][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.722166][ T7537] bond1: (slave syz_tun): Releasing active interface
[  398.876957][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.974533][ T7508] chnl_net:caif_netlink_parms(): no params data found
[  399.135465][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.273964][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'.
[  399.390726][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'.
[  400.182925][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.360663][ T5800] Bluetooth: hci2: command tx timeout
[  400.433768][ T7544] 8021q: adding VLAN 0 to HW filter on device bond1
[  401.092900][ T7548] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  402.440914][ T5800] Bluetooth: hci2: command tx timeout
[  403.889957][ T7565] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  404.031189][ T1099] bridge_slave_1: left allmulticast mode
[  404.037535][ T1099] bridge_slave_1: left promiscuous mode
[  404.046343][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.181400][ T1099] bridge_slave_0: left allmulticast mode
[  404.187244][ T1099] bridge_slave_0: left promiscuous mode
[  404.195207][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.530007][ T5787] Bluetooth: hci2: command tx timeout
[  404.808136][ T7582] netlink: 83 bytes leftover after parsing attributes in process `syz.5.452'.
[  405.533786][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.581107][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.611166][   T30] audit: type=1804 audit(1770456260.510:151): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.453" name="/newroot/101/file0/file1" dev="overlay" ino=544 res=1 errno=0
[  405.644816][ T1099] bond0 (unregistering): Released all slaves
[  405.733323][ T5787] Bluetooth: hci5: command 0x0406 tx timeout
[  405.995651][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.003649][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.051173][ T7508] bridge_slave_0: entered allmulticast mode
[  406.083581][ T7508] bridge_slave_0: entered promiscuous mode
[  406.241076][ T7596] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[  406.256380][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.264581][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.320989][ T7508] bridge_slave_1: entered allmulticast mode
[  406.349547][ T7599] loop6: detected capacity change from 0 to 524287999
[  406.358077][ T7508] bridge_slave_1: entered promiscuous mode
[  406.503817][ T7596] 8021q: adding VLAN 0 to HW filter on device bond2
[  406.550612][ T7598] bond1: (slave syz_tun): Releasing active interface
[  408.644972][ T7605] Set syz1 is full, maxelem 65536 reached
[  408.782005][ T1099] hsr_slave_0: left promiscuous mode
[  408.848657][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  408.855970][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  408.910190][ T1099] hsr_slave_1: left promiscuous mode
[  408.936015][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.943913][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.193327][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.201006][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.994743][ T1099] veth1_macvtap: left promiscuous mode
[  411.042542][ T1099] veth0_macvtap: left promiscuous mode
[  411.088151][ T1099] veth1_vlan: left promiscuous mode
[  411.104032][ T1099] veth0_vlan: left promiscuous mode
[  412.754019][ T7631] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  412.761273][ T7631] overlayfs: failed to set xattr on upper
[  412.767117][ T7631] overlayfs: ...falling back to redirect_dir=nofollow.
[  412.777341][ T7631] overlayfs: ...falling back to index=off.
[  412.783632][ T7631] overlayfs: ...falling back to uuid=null.
[  412.829069][   T30] audit: type=1804 audit(1770456267.720:152): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.464" name="/newroot/105/file0/file0/file1" dev="overlay" ino=15661 res=1 errno=0
[  412.933671][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  412.999257][ T7632] ieee802154 phy0 wpan0: encryption failed: -22
[  413.045967][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  413.117298][ T7632] ieee802154 phy0 wpan0: encryption failed: -22
[  413.617150][ T7640] netlink: 'syz.6.468': attribute type 1 has an invalid length.
[  413.717130][ T7508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.316918][ T7640] 8021q: adding VLAN 0 to HW filter on device bond1
[  418.485269][ T7508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.831903][ T7508] team0: Port device team_slave_0 added
[  418.929784][ T7508] team0: Port device team_slave_1 added
[  419.363486][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.370948][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.397478][ T7508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.547696][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.554938][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.581597][ T7508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.871922][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.932336][ T7663] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  419.942669][ T7663] overlayfs: failed to set xattr on upper
[  419.948554][ T7663] overlayfs: ...falling back to redirect_dir=nofollow.
[  419.955751][ T7663] overlayfs: ...falling back to index=off.
[  419.963713][ T7663] overlayfs: ...falling back to uuid=null.
[  420.013206][   T30] audit: type=1804 audit(1770456274.890:153): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.475" name="/newroot/114/file0/file0/file1" dev="overlay" ino=16729 res=1 errno=0
[  420.154834][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.419354][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.830638][ T7508] hsr_slave_0: entered promiscuous mode
[  421.085760][ T7508] hsr_slave_1: entered promiscuous mode
[  421.346300][ T7508] debugfs: 'hsr0' already exists in 'hsr'
[  421.352543][ T7508] Cannot create hsr debugfs directory
[  421.497781][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.535092][ T7671] ieee802154 phy0 wpan0: encryption failed: -22
[  422.020527][ T7671] ieee802154 phy0 wpan0: encryption failed: -22
[  424.357644][ T7680] loop6: detected capacity change from 0 to 524287999
[  424.486490][ T7682] netlink: 'syz.6.480': attribute type 1 has an invalid length.
[  424.704127][ T1099] bridge_slave_1: left allmulticast mode
[  424.710262][ T1099] bridge_slave_1: left promiscuous mode
[  424.716782][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.830704][ T1099] bridge_slave_0: left allmulticast mode
[  424.836561][ T1099] bridge_slave_0: left promiscuous mode
[  424.845877][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.328252][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.482'.
[  425.415980][ T7689] netlink: 56 bytes leftover after parsing attributes in process `syz.6.482'.
[  425.762808][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  425.988275][   T24] usb 7-1: Using ep0 maxpacket: 32
[  426.006446][   T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  426.053977][   T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  426.066217][   T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  426.077821][   T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  426.215187][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.231428][   T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  426.241360][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.249747][   T24] usb 7-1: Product: syz
[  426.254072][   T24] usb 7-1: Manufacturer: syz
[  426.259201][   T24] usb 7-1: SerialNumber: syz
[  426.278168][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.335491][ T1099] bond0 (unregistering): Released all slaves
[  426.383685][ T1099] bond1 (unregistering): Released all slaves
[  426.413775][    C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  426.463381][   T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input16
[  426.517382][ T1099] bond2 (unregistering): Released all slaves
[  426.638909][   T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  426.647384][   T24]  (id 0x00)
[  427.009036][   T24] rc_core: IR keymap rc-imon-pad not found
[  427.018573][   T24] Registered IR keymap rc-empty
[  427.039266][   T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  427.050050][   T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  427.127161][   T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  427.178358][   T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input17
[  427.253307][   T24] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized
[  427.799649][ T1099] hsr_slave_0: left promiscuous mode
[  427.832706][ T1099] hsr_slave_1: left promiscuous mode
[  427.949668][ T1099] veth1_macvtap: left promiscuous mode
[  427.955437][ T1099] veth0_macvtap: left promiscuous mode
[  428.067428][ T1099] veth1_vlan: left promiscuous mode
[  428.118882][ T1099] veth0_vlan: left promiscuous mode
[  428.509767][ T5844] usb 7-1: USB disconnect, device number 2
[  428.553001][ T7704] imon:send_packet: packet tx failed (-71)
[  428.580425][ T7704] imon:vfd_write: send packet #2 failed
[  431.308624][ T7709] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  431.315977][ T7709] overlayfs: failed to set xattr on upper
[  431.322390][ T7709] overlayfs: ...falling back to redirect_dir=nofollow.
[  431.329648][ T7709] overlayfs: ...falling back to index=off.
[  431.335578][ T7709] overlayfs: ...falling back to uuid=null.
[  431.375907][   T30] audit: type=1804 audit(1770456286.270:154): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.486" name="/newroot/117/file0/file0/file1" dev="overlay" ino=17060 res=1 errno=0
[  431.765606][ T7713] ieee802154 phy0 wpan0: encryption failed: -22
[  431.915868][ T7713] ieee802154 phy0 wpan0: encryption failed: -22
[  432.800715][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  432.845065][ T7724] netlink: 'syz.6.491': attribute type 1 has an invalid length.
[  432.875520][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  433.706030][ T7508] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  433.927332][ T7508] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  434.051836][ T7508] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  434.161145][ T7508] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  434.819969][ T7738] loop6: detected capacity change from 0 to 524287999
[  434.966545][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[  435.020655][ T7743] netlink: 56 bytes leftover after parsing attributes in process `syz.2.497'.
[  435.223263][ T7746] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  435.245051][ T7746] overlayfs: failed to set xattr on upper
[  435.251099][ T7746] overlayfs: ...falling back to redirect_dir=nofollow.
[  435.258263][ T7746] overlayfs: ...falling back to index=off.
[  435.264376][ T7746] overlayfs: ...falling back to uuid=null.
[  435.439252][ T5850] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  435.474571][   T30] audit: type=1804 audit(1770456290.370:155): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.498" name="/newroot/12/file0/file0/file1" dev="ramfs" ino=17220 res=1 errno=0
[  435.619834][ T5850] usb 3-1: Using ep0 maxpacket: 32
[  435.647973][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.666258][ T5850] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  435.736194][ T5850] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  435.748835][ T5850] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  435.760487][ T5850] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  435.844021][ T7508] 8021q: adding VLAN 0 to HW filter on device team0
[  435.914564][ T5850] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  435.924894][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.933678][ T5850] usb 3-1: Product: syz
[  435.938021][ T5850] usb 3-1: Manufacturer: syz
[  435.942926][ T5850] usb 3-1: SerialNumber: syz
[  435.968427][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.975982][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.057865][    C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  436.093194][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.100815][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.112807][ T5850] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input18
[  436.289862][ T5850] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  436.298453][ T5850]  (id 0x00)
[  436.733106][ T5850] rc_core: IR keymap rc-imon-pad not found
[  436.739447][ T5850] Registered IR keymap rc-empty
[  436.766406][ T5850] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  436.781893][ T5850] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  436.882812][ T5850] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  436.961390][ T5850] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input19
[  437.045637][ T5850] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:9> initialized
[  437.702311][ T5441] usb 3-1: USB disconnect, device number 9
[  437.709021][ T7774] imon:send_packet: packet tx failed (-71)
[  437.775585][ T7774] imon:vfd_write: send packet #2 failed
[  438.215723][ T7748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  438.661408][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.994925][ T7785] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[  440.266911][ T7803] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  440.304769][ T7803] overlayfs: failed to set xattr on upper
[  440.310944][ T7803] overlayfs: ...falling back to redirect_dir=nofollow.
[  440.320059][ T7803] overlayfs: ...falling back to index=off.
[  440.325955][ T7803] overlayfs: ...falling back to uuid=null.
[  440.471824][   T30] audit: type=1804 audit(1770456295.360:156): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.509" name="/newroot/18/file0/file0/file1" dev="overlay" ino=17278 res=1 errno=0
[  441.425311][ T7508] veth0_vlan: entered promiscuous mode
[  441.525471][ T7508] veth1_vlan: entered promiscuous mode
[  442.117365][ T7508] veth0_macvtap: entered promiscuous mode
[  442.186638][ T7508] veth1_macvtap: entered promiscuous mode
[  442.799016][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.953682][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.004123][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  443.211951][   T54] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.278399][   T54] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.362764][ T7562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.410094][ T1099] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.580575][ T5441] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  443.760868][ T5441] usb 1-1: device descriptor read/64, error -71
[  443.999434][ T5441] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  444.161290][ T5441] usb 1-1: device descriptor read/64, error -71
[  444.272335][ T5441] usb usb1-port1: attempt power cycle
[  444.520273][ T7851] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  444.533517][ T7850] loop6: detected capacity change from 0 to 524287999
[  444.542989][ T7851] overlayfs: failed to set xattr on upper
[  444.549156][ T7851] overlayfs: ...falling back to redirect_dir=nofollow.
[  444.556249][ T7851] overlayfs: ...falling back to index=off.
[  444.562261][ T7851] overlayfs: ...falling back to uuid=null.
[  444.592939][   T30] audit: type=1804 audit(1770456299.490:157): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.520" name="/newroot/124/file0/file0/file1" dev="ramfs" ino=17376 res=1 errno=0
[  444.709174][ T5441] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  444.756400][ T5441] usb 1-1: device descriptor read/8, error -71
[  445.029741][ T5441] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  445.079473][ T5441] usb 1-1: device descriptor read/8, error -71
[  445.184490][ T7825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  445.234771][ T5441] usb usb1-port1: unable to enumerate USB device
[  445.719050][ T5850] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  445.932920][ T5850] usb 6-1: Using ep0 maxpacket: 16
[  446.103526][ T5850] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  446.112839][ T5850] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  446.123560][ T5850] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  446.133972][ T5850] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice= 0.00
[  446.143379][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.814768][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'.
[  451.632899][ T7905] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  451.694841][ T7905] overlayfs: failed to set xattr on upper
[  451.700757][ T7905] overlayfs: ...falling back to redirect_dir=nofollow.
[  451.707737][ T7905] overlayfs: ...falling back to index=off.
[  451.713729][ T7905] overlayfs: ...falling back to uuid=null.
[  451.820817][   T30] audit: type=1804 audit(1770456306.710:158): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.530" name="/newroot/24/file0/file1" dev="ramfs" ino=16224 res=1 errno=0
[  452.405263][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.414324][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.714625][  T795] usb 6-1: USB disconnect, device number 8
[  452.779751][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.787780][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.801992][ T5441] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  453.019167][ T5441] usb 7-1: config 0 has no interfaces?
[  453.089821][ T5441] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  453.099518][ T5441] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  453.107891][ T5441] usb 7-1: Product: syz
[  453.112669][ T5441] usb 7-1: Manufacturer: syz
[  453.118972][ T5441] usb 7-1: SerialNumber: syz
[  453.284870][ T5441] usb 7-1: config 0 descriptor??
[  453.572378][ T5441] usb 7-1: USB disconnect, device number 3
[  454.678186][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.7.539'.
[  454.999715][ T5441] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  455.188923][ T5441] usb 7-1: Using ep0 maxpacket: 16
[  455.201617][ T5441] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.239589][ T5441] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  455.253265][ T5441] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  455.266820][ T5441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.500678][ T5441] usb 7-1: config 0 descriptor??
[  455.558630][ T5441] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  455.928064][ T7959] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  456.049074][ T7959] overlayfs: failed to set xattr on upper
[  456.055133][ T7959] overlayfs: ...falling back to redirect_dir=nofollow.
[  456.062469][ T7959] overlayfs: ...falling back to index=off.
[  456.068417][ T7959] overlayfs: ...falling back to uuid=null.
[  456.257955][   T30] audit: type=1804 audit(1770456311.150:159): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.542" name="/newroot/68/file0/file0/file1" dev="ramfs" ino=18509 res=1 errno=0
[  456.576705][ T7974] random: crng reseeded on system resumption
[  456.785792][ T5850] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  456.959177][ T5850] usb 8-1: Using ep0 maxpacket: 16
[  456.988902][ T5850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.028129][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  457.041476][ T5850] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  457.050937][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.157174][ T5850] usb 8-1: config 0 descriptor??
[  457.232499][ T5850] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  457.874672][ T5441] usb 7-1: USB disconnect, device number 4
[  458.176214][ T7994] random: crng reseeded on system resumption
[  459.659129][ T5850] usb 8-1: USB disconnect, device number 2
[  460.201658][ T5800] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  460.253549][ T8021] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  460.307497][ T8021] overlayfs: failed to set xattr on upper
[  460.313547][ T8021] overlayfs: ...falling back to redirect_dir=nofollow.
[  460.321254][ T8021] overlayfs: ...falling back to index=off.
[  460.327209][ T8021] overlayfs: ...falling back to uuid=null.
[  460.458999][   T30] audit: type=1804 audit(1770456315.340:160): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.558" name="/newroot/134/file0/file0/file1" dev="ramfs" ino=18580 res=1 errno=0
[  460.979346][ T5441] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  461.178972][ T5441] usb 1-1: Using ep0 maxpacket: 16
[  461.229745][ T5441] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.277869][ T5441] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  461.291737][ T5441] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  461.301187][ T5441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.481491][ T5441] usb 1-1: config 0 descriptor??
[  461.597349][ T5441] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  464.543391][ T5850] usb 1-1: USB disconnect, device number 15
[  464.839312][ T5441] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  465.019347][ T5441] usb 7-1: Using ep0 maxpacket: 16
[  465.044137][ T5441] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.120709][ T5441] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  465.134323][ T5441] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  465.144060][ T5441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.284657][ T5441] usb 7-1: config 0 descriptor??
[  465.337243][ T5441] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  465.880378][ T5800] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[  466.044415][ T8068] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  466.069026][ T8068] overlayfs: failed to set xattr on upper
[  466.074928][ T8068] overlayfs: ...falling back to redirect_dir=nofollow.
[  466.082377][ T8068] overlayfs: ...falling back to index=off.
[  466.088431][ T8068] overlayfs: ...falling back to uuid=null.
[  466.150559][   T30] audit: type=1804 audit(1770456321.040:161): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.572" name="/newroot/6/file0/file0/file1" dev="overlay" ino=18623 res=1 errno=0
[  466.265664][ T8071] random: crng reseeded on system resumption
[  466.871758][ T8079] fuse: Bad value for 'fd'
[  467.822476][ T5850] usb 7-1: USB disconnect, device number 5
[  470.251611][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  470.258077][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  471.875191][   T30] audit: type=1804 audit(1770456326.770:162): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.587" name="/newroot/141/file0/file1" dev="overlay" ino=738 res=1 errno=0
[  472.660169][ T8127] netlink: 'syz.5.591': attribute type 1 has an invalid length.
[  473.303996][ T8127] 8021q: adding VLAN 0 to HW filter on device bond3
[  473.485864][ T8133] bond3: (slave syz_tun): making interface the new active one
[  473.631993][ T8133] bond3: (slave syz_tun): Enslaving as an active interface with an up link
[  475.084632][ T5800] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  475.635411][   T30] audit: type=1326 audit(1770456330.530:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.769942][   T30] audit: type=1326 audit(1770456330.600:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.792662][   T30] audit: type=1326 audit(1770456330.600:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.815231][   T30] audit: type=1326 audit(1770456330.600:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.837772][   T30] audit: type=1326 audit(1770456330.610:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.861111][   T30] audit: type=1326 audit(1770456330.610:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.883945][   T30] audit: type=1326 audit(1770456330.610:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.906465][   T30] audit: type=1326 audit(1770456330.620:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  475.928992][   T30] audit: type=1326 audit(1770456330.620:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13519aeb9 code=0x7ffc0000
[  477.434323][ T8191] netlink: 'syz.6.613': attribute type 1 has an invalid length.
[  478.045004][ T8191] 8021q: adding VLAN 0 to HW filter on device bond2
[  478.180261][ T5800] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  478.246683][ T8193] bond2: (slave syz_tun): making interface the new active one
[  478.343853][ T8193] bond2: (slave syz_tun): Enslaving as an active interface with an up link
[  478.947028][ T8209] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) !
[  479.253395][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'.
[  481.265618][ T5787] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[  482.447619][ T8255] fuse: Unknown parameter 'group_i00000000000000000000'
[  482.524101][ T5787] Bluetooth: hci0: command 0x0406 tx timeout
[  482.640909][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'.
[  482.644739][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.632'.
[  482.746269][ T8260] netlink: 56 bytes leftover after parsing attributes in process `syz.6.632'.
[  483.088978][ T5844] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  483.275083][ T5844] usb 7-1: Using ep0 maxpacket: 32
[  483.328938][ T5844] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  483.348935][ T5850] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  483.364010][ T5844] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  483.376215][ T5844] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  483.387747][ T5844] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  483.439220][ T5844] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  483.448923][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.457177][ T5844] usb 7-1: Product: syz
[  483.461885][ T5844] usb 7-1: Manufacturer: syz
[  483.466565][ T5844] usb 7-1: SerialNumber: syz
[  483.576342][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  483.622612][ T5850] usb 8-1: Using ep0 maxpacket: 32
[  483.689069][ T5844] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input20
[  483.689891][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  483.712412][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  483.724281][ T5850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  483.737355][ T5850] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  483.750854][ T5850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  483.761986][ T5850] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  483.911114][ T5850] usb 8-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  483.920514][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.928896][ T5850] usb 8-1: Product: syz
[  483.933198][ T5850] usb 8-1: Manufacturer: syz
[  483.940822][ T5850] usb 8-1: SerialNumber: syz
[  483.959250][ T5844] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  483.967973][ T5844]  (id 0x00)
[  484.100960][ T5850] usb 8-1: config 0 descriptor??
[  484.132171][ T8264] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  484.196843][ T5850] pn533_usb 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  484.499668][ T5844] rc_core: IR keymap rc-imon-pad not found
[  484.505660][ T5844] Registered IR keymap rc-empty
[  484.555180][ T5844] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  484.565879][ T5844] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  484.675344][ T5844] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  484.727754][ T5844] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input21
[  484.815067][ T5800] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  484.871822][ T5844] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:6> initialized
[  485.141855][ T5850] usb 8-1: USB disconnect, device number 3
[  486.045564][ T5850] usb 7-1: USB disconnect, device number 6
[  487.038920][ T8307] fuse: Unknown parameter 'group_id00000000000000000000'
[  487.210159][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'.
[  488.012855][ T5800] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  488.074512][ T8319] Bluetooth: MGMT ver 1.23
[  488.800899][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  488.890605][ T8333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.655'.
[  489.179898][ T5844] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  489.378926][ T5844] usb 3-1: Using ep0 maxpacket: 32
[  489.412644][ T8343] fuse: Unknown parameter 'group_id00000000000000000000'
[  489.433794][ T5844] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  489.477301][ T5844] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  489.489703][ T5844] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  489.501193][ T5844] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  489.626474][ T5844] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  489.635876][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.644339][ T5844] usb 3-1: Product: syz
[  489.648789][ T5844] usb 3-1: Manufacturer: syz
[  489.653562][ T5844] usb 3-1: SerialNumber: syz
[  489.837172][    C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  489.886915][ T5844] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input22
[  490.098872][ T5844] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  490.107429][ T5844]  (id 0x00)
[  490.609741][ T5844] rc_core: IR keymap rc-imon-pad not found
[  490.615735][ T5844] Registered IR keymap rc-empty
[  490.639279][ T5844] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  490.650561][ T5844] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  490.762037][ T5844] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  490.833201][ T5844] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input23
[  490.922476][ T5844] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:10> initialized
[  491.665387][ T5800] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  492.235114][ T5844] usb 3-1: USB disconnect, device number 10
[  493.179140][ T5844] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  493.380054][ T5844] usb 7-1: Using ep0 maxpacket: 16
[  493.430276][ T5844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.440792][ T5844] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  493.504228][ T5844] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  493.513849][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.522350][ T5844] usb 7-1: Product: syz
[  493.526673][ T5844] usb 7-1: Manufacturer: syz
[  493.531530][ T5844] usb 7-1: SerialNumber: syz
[  493.926112][ T5844] usb 7-1: 0:2 : does not exist
[  494.028256][ T5844] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  494.241753][ T5844] usb 7-1: USB disconnect, device number 7
[  494.563512][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  495.280264][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[  495.366373][ T8415] netlink: 56 bytes leftover after parsing attributes in process `syz.2.682'.
[  495.741244][ T5839] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  495.876332][ T5844] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  495.940165][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  495.977746][ T5839] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  496.009049][ T5839] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  496.024373][ T5839] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  496.036837][ T5839] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  496.089279][ T5844] usb 7-1: Using ep0 maxpacket: 16
[  496.138135][ T5839] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  496.140002][ T5844] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  496.153427][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.160720][ T5844] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  496.168962][ T5839] usb 3-1: Product: syz
[  496.177966][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.182410][ T5839] usb 3-1: Manufacturer: syz
[  496.182507][ T5839] usb 3-1: SerialNumber: syz
[  496.347095][ T5844] usb 7-1: config 0 descriptor??
[  496.417921][    C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  496.445569][ T5839] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input24
[  496.496231][ T5844] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  496.610094][ T5839] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  496.619103][ T5839]  (id 0x00)
[  497.004763][ T5839] rc_core: IR keymap rc-imon-pad not found
[  497.013212][ T5839] Registered IR keymap rc-empty
[  497.049346][ T5839] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  497.060617][ T5839] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  497.394656][ T5839] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  497.412429][ T8456] random: crng reseeded on system resumption
[  497.503143][ T5839] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input25
[  497.626770][ T5839] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:11> initialized
[  498.940134][ T5844] usb 3-1: USB disconnect, device number 11
[  499.104564][ T5839] usb 7-1: USB disconnect, device number 8
[  499.853552][ T8479] loop7: detected capacity change from 0 to 64
[  500.029023][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  500.029091][   T30] audit: type=1800 audit(1770456354.920:186): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.699" name="file1" dev="loop7" ino=22 res=0 errno=0
[  500.615604][ T8484] bond2: (slave syz_tun): Releasing active interface
[  503.604983][ T8500] fuse: Bad value for 'user_id'
[  503.613292][ T8500] fuse: Bad value for 'user_id'
[  503.740290][ T8501] netlink: 'syz.7.704': attribute type 9 has an invalid length.
[  504.059036][ T5844] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  504.242647][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  504.272952][ T5844] usb 3-1: Using ep0 maxpacket: 16
[  504.352024][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  504.365629][ T5844] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  504.375044][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.425564][ T8510] netlink: 56 bytes leftover after parsing attributes in process `syz.0.708'.
[  504.523251][ T5844] usb 3-1: config 0 descriptor??
[  504.636534][ T5844] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  504.799330][  T795] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  505.010203][  T795] usb 1-1: Using ep0 maxpacket: 32
[  505.054128][  T795] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  505.102608][  T795] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  505.114734][  T795] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  505.126078][  T795] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  505.192117][  T795] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  505.201758][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.209998][  T795] usb 1-1: Product: syz
[  505.214246][  T795] usb 1-1: Manufacturer: syz
[  505.219037][  T795] usb 1-1: SerialNumber: syz
[  505.309387][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  505.321758][  T795] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input26
[  505.526459][ T8527] random: crng reseeded on system resumption
[  505.536124][  T795] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  505.546945][  T795]  (id 0x00)
[  505.989399][  T795] rc_core: IR keymap rc-imon-pad not found
[  505.995700][  T795] Registered IR keymap rc-empty
[  506.023157][  T795] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  506.033858][  T795] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  506.162735][  T795] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[  506.208168][  T795] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input27
[  506.350565][  T795] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:16> initialized
[  506.716912][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.715'.
[  506.817997][ T8537] syzkaller0: entered promiscuous mode
[  506.824032][ T8537] syzkaller0: entered allmulticast mode
[  507.586506][  T795] usb 3-1: USB disconnect, device number 12
[  507.711261][ T5839] usb 1-1: USB disconnect, device number 16
[  508.105443][ T8547] fuse: Bad value for 'user_id'
[  508.110713][ T8547] fuse: Bad value for 'user_id'
[  508.534077][ T8557] netlink: 'syz.5.721': attribute type 1 has an invalid length.
[  508.742978][ T8557] 8021q: adding VLAN 0 to HW filter on device bond4
[  508.761599][ T8563] netlink: 124 bytes leftover after parsing attributes in process `syz.6.722'.
[  508.771971][ T8563] nbd: couldn't find a device at index 83886080
[  509.668941][  T795] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  509.868961][  T795] usb 3-1: Using ep0 maxpacket: 16
[  509.895404][  T795] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  509.909121][  T795] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  509.918391][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.963591][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.729'.
[  510.010929][  T795] usb 3-1: config 0 descriptor??
[  510.024998][ T8584] netlink: 56 bytes leftover after parsing attributes in process `syz.7.729'.
[  510.043595][  T795] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  510.352805][ T8587] tipc: Started in network mode
[  510.362864][ T8587] tipc: Node identity 8aa653e8a9d3, cluster identity 4711
[  510.371217][ T8587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  510.379493][  T795] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  510.432066][ T8587] tipc: Resetting bearer <eth:syzkaller0>
[  510.469987][ T8586] tipc: Disabling bearer <eth:syzkaller0>
[  510.497346][ T8593] fuse: Bad value for 'fd'
[  510.576038][  T795] usb 8-1: Using ep0 maxpacket: 32
[  510.599848][  T795] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  510.645077][  T795] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  510.657417][  T795] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  510.670629][  T795] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  510.725255][  T795] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  510.734904][  T795] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.743257][  T795] usb 8-1: Product: syz
[  510.747581][  T795] usb 8-1: Manufacturer: syz
[  510.752472][  T795] usb 8-1: SerialNumber: syz
[  510.894333][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  510.911483][  T795] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input28
[  510.979596][ T8602] random: crng reseeded on system resumption
[  511.032386][ T8601] netlink: 124 bytes leftover after parsing attributes in process `syz.0.735'.
[  511.044029][ T8601] nbd: couldn't find a device at index 83886080
[  511.103817][  T795] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  511.112645][  T795]  (id 0x00)
[  511.469221][  T795] rc_core: IR keymap rc-imon-pad not found
[  511.475309][  T795] Registered IR keymap rc-empty
[  511.529211][  T795] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  511.540144][  T795] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  511.681191][  T795] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  511.725669][  T795] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input29
[  511.802146][ T5839] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  511.929720][  T795] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:4> initialized
[  512.050303][ T5839] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  512.064797][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0
[  512.160298][ T5839] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  512.170359][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  512.179025][ T5839] usb 1-1: Product: syz
[  512.183356][ T5839] usb 1-1: Manufacturer: syz
[  512.188119][ T5839] usb 1-1: SerialNumber: syz
[  512.276789][ T5839] usb 1-1: config 0 descriptor??
[  512.742108][ T5839] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  512.750865][  T795] usb 3-1: USB disconnect, device number 13
[  512.879613][ T5839] usb 1-1: USB disconnect, device number 17
[  513.550183][ T5850] usb 8-1: USB disconnect, device number 4
[  513.703658][ T8626] netlink: 'syz.6.741': attribute type 1 has an invalid length.
[  514.479174][  T795] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  514.624707][ T7517] udevd[7517]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  514.737353][  T795] usb 7-1: Using ep0 maxpacket: 16
[  514.805226][  T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  514.999098][  T795] usb 7-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  515.008597][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.016889][  T795] usb 7-1: Product: syz
[  515.021312][  T795] usb 7-1: Manufacturer: syz
[  515.026051][  T795] usb 7-1: SerialNumber: syz
[  515.238528][  T795] usb 7-1: config 0 descriptor??
[  515.247525][ T8626] 8021q: adding VLAN 0 to HW filter on device bond3
[  515.314451][  T795] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected
[  515.414593][  T795] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  515.456231][ T8629] bond3: (slave syz_tun): making interface the new active one
[  515.702201][ T8629] bond3: (slave syz_tun): Enslaving as an active interface with an up link
[  516.791238][ T8650] netlink: 124 bytes leftover after parsing attributes in process `syz.7.746'.
[  516.805646][ T8650] nbd: couldn't find a device at index 83886080
[  516.975687][ T5839] usb 7-1: USB disconnect, device number 9
[  518.039704][ T8654] loop7: detected capacity change from 0 to 4096
[  518.151612][ T8610] Set syz1 is full, maxelem 65536 reached
[  518.164968][ T5839] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  518.200610][ T5839] kobil_sct 7-1:0.0: device disconnected
[  519.019258][ T5844] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  519.277654][ T5844] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  519.291712][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0
[  519.356883][ T5844] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  519.366689][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  519.377025][ T5844] usb 1-1: Product: syz
[  519.382256][ T5844] usb 1-1: Manufacturer: syz
[  519.387035][ T5844] usb 1-1: SerialNumber: syz
[  519.497031][ T5844] usb 1-1: config 0 descriptor??
[  519.750523][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.753'.
[  519.850977][ T5844] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  519.908378][ T5844] usb 1-1: USB disconnect, device number 18
[  519.941454][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.754'.
[  520.000442][ T8678] netlink: 56 bytes leftover after parsing attributes in process `syz.6.754'.
[  520.052781][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  520.360190][ T5844] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  520.583645][ T5844] usb 7-1: Using ep0 maxpacket: 32
[  520.622974][ T5844] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  520.654497][ T5844] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  520.666704][ T5844] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  520.678431][ T5844] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  520.952384][ T5844] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  520.961906][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.970400][ T5844] usb 7-1: Product: syz
[  520.974732][ T5844] usb 7-1: Manufacturer: syz
[  520.979808][ T5844] usb 7-1: SerialNumber: syz
[  521.028531][ T8686] block nbd0: server does not support multiple connections per device.
[  521.095349][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  521.135750][ T5844] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input30
[  521.175765][ T8686] block nbd0: shutting down sockets
[  521.299700][ T5844] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  521.308270][ T5844]  (id 0x00)
[  521.797952][ T5844] rc_core: IR keymap rc-imon-pad not found
[  521.804849][ T5844] Registered IR keymap rc-empty
[  521.849233][ T5844] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  521.860037][ T5844] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  521.951179][ T5844] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  522.024761][ T8703] Illegal XDP return value 4294967294 on prog  (id 21) dev N/A, expect packet loss!
[  522.045791][ T5844] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input31
[  522.116832][ T5844] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:10> initialized
[  522.321482][ T8709] netlink: 'syz.7.761': attribute type 1 has an invalid length.
[  522.859018][ T5844] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  522.882587][ T8709] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.071770][ T5844] usb 8-1: Using ep0 maxpacket: 16
[  523.086978][ T8711] bond1: (slave syz_tun): making interface the new active one
[  523.223779][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  523.251198][ T8711] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[  523.380247][ T5844] usb 8-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  523.391484][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.399849][ T5844] usb 8-1: Product: syz
[  523.404094][ T5844] usb 8-1: Manufacturer: syz
[  523.408983][ T5844] usb 8-1: SerialNumber: syz
[  523.414041][ T8720] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  523.420338][ T8720] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  523.443338][ T5839] usb 7-1: USB disconnect, device number 10
[  523.555765][ T8720] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  523.562727][ T8720] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  523.563666][ T5844] usb 8-1: config 0 descriptor??
[  523.727159][ T8720] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  523.735799][ T8720] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  523.760200][ T5844] kobil_sct 8-1:0.0: KOBIL USB smart card terminal converter detected
[  523.855584][ T5844] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  523.955434][ T8720] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  523.964091][ T8720] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  523.985126][ T5844] usb 8-1: USB disconnect, device number 5
[  524.050150][ T5844] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  524.141699][ T5844] kobil_sct 8-1:0.0: device disconnected
[  524.237311][ T8720] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  524.243566][ T8720] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  524.494789][ T8725] loop0: detected capacity change from 0 to 4096
[  525.081861][ T8740] fuse: Bad value for 'fd'
[  527.368390][ T8769] ip6t_rpfilter: unknown options
[  527.637693][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'.
[  527.660343][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.776'.
[  527.731412][ T8775] netlink: 56 bytes leftover after parsing attributes in process `syz.7.777'.
[  528.059069][ T5844] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  528.282078][ T5844] usb 8-1: Using ep0 maxpacket: 32
[  528.317761][ T5844] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  528.350418][ T5844] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  528.362738][ T5844] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  528.374423][ T5844] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  528.452774][ T5844] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  528.462334][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.472595][ T5844] usb 8-1: Product: syz
[  528.476844][ T5844] usb 8-1: Manufacturer: syz
[  528.483168][ T5844] usb 8-1: SerialNumber: syz
[  528.590045][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  528.620683][ T5844] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input32
[  528.648209][ T8787] netlink: 'syz.2.779': attribute type 1 has an invalid length.
[  528.805700][ T8789] fuse: Bad value for 'fd'
[  528.820068][ T5844] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  528.828798][ T5844]  (id 0x00)
[  528.965194][ T5844] rc_core: IR keymap rc-imon-pad not found
[  528.973811][ T5844] Registered IR keymap rc-empty
[  529.002982][ T5844] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  529.013582][ T5844] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  529.083167][ T5844] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  529.142752][ T5844] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input33
[  529.293370][ T5844] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:6> initialized
[  529.425533][ T8797] netlink: 'syz.0.782': attribute type 5 has an invalid length.
[  529.433796][ T8797] netlink: 64 bytes leftover after parsing attributes in process `syz.0.782'.
[  529.484627][ T8797] block nbd0: not configured, cannot reconfigure
[  529.488184][ T8787] 8021q: adding VLAN 0 to HW filter on device bond2
[  529.512741][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  529.719634][   T24] usb 3-1: Using ep0 maxpacket: 16
[  529.849175][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  530.023379][ T8790] bond2: (slave syz_tun): making interface the new active one
[  530.133197][   T24] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  530.143029][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.151351][   T24] usb 3-1: Product: syz
[  530.155665][   T24] usb 3-1: Manufacturer: syz
[  530.160501][   T24] usb 3-1: SerialNumber: syz
[  530.185472][ T8790] bond2: (slave syz_tun): Enslaving as an active interface with an up link
[  530.341180][   T24] usb 3-1: config 0 descriptor??
[  530.367423][ T8799] loop5: detected capacity change from 0 to 4096
[  530.453777][   T24] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected
[  530.571235][   T24] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  530.819840][   T24] usb 8-1: USB disconnect, device number 6
[  530.881351][ T5844] usb 3-1: USB disconnect, device number 14
[  531.087294][ T5844] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  531.227742][ T5844] kobil_sct 3-1:0.0: device disconnected
[  531.692529][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  531.699389][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  533.934842][ T8830] syzkaller0: entered promiscuous mode
[  533.940850][ T8830] syzkaller0: entered allmulticast mode
[  534.291991][ T8836] fuse: Invalid rootmode
[  534.685081][ T8840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.794'.
[  534.753574][ T8840] block nbd0: not configured, cannot reconfigure
[  535.380558][ T8847] loop0: detected capacity change from 0 to 4096
[  535.390422][ T5844] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  535.644888][ T5844] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  535.657669][ T5844] usb 6-1: config 0 interface 0 has no altsetting 0
[  535.747282][ T5844] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  535.758343][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  535.770404][ T5844] usb 6-1: Product: syz
[  535.774762][ T5844] usb 6-1: Manufacturer: syz
[  535.779904][ T5844] usb 6-1: SerialNumber: syz
[  535.903038][ T5844] usb 6-1: config 0 descriptor??
[  536.212957][ T5844] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  536.284219][ T5844] usb 6-1: USB disconnect, device number 9
[  536.521138][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.480585][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'.
[  537.780135][ T8882] fuse: Invalid rootmode
[  538.460555][ T8890] syzkaller0: entered promiscuous mode
[  538.466223][ T8890] syzkaller0: entered allmulticast mode
[  538.954582][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  539.971268][ T8905] netlink: 64 bytes leftover after parsing attributes in process `syz.6.811'.
[  540.034706][ T8905] block nbd0: not configured, cannot reconfigure
[  540.700059][ T8908] tipc: Started in network mode
[  540.705263][ T8908] tipc: Node identity 9ea0266f2502, cluster identity 4711
[  540.713931][ T8908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.042147][ T8909] syzkaller0: entered promiscuous mode
[  541.047806][ T8909] syzkaller0: entered allmulticast mode
[  541.751370][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'.
[  542.025163][ T8908] tipc: Resetting bearer <eth:syzkaller0>
[  542.160420][ T8907] tipc: Resetting bearer <eth:syzkaller0>
[  542.223693][ T8907] tipc: Disabling bearer <eth:syzkaller0>
[  542.279847][ T5844] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  542.516541][ T5844] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[  542.525408][ T5844] usb 1-1: config 160 has no interface number 0
[  542.593636][ T5844] usb 1-1: config 160 interface 200 has no altsetting 0
[  542.708150][ T5844] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  542.719719][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.727910][ T5844] usb 1-1: Product: syz
[  542.733048][ T5844] usb 1-1: Manufacturer: syz
[  542.737814][ T5844] usb 1-1: SerialNumber: syz
[  543.049862][ T8913] loop2: detected capacity change from 0 to 4096
[  543.434582][ T5844] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  543.449828][   T24] tipc: Node number set to 3147966063
[  543.550341][ T5844] usb 1-1: MIDIStreaming interface descriptor not found
[  543.969559][ T5844] usb 1-1: USB disconnect, device number 19
[  544.014620][ T8871] Set syz1 is full, maxelem 65536 reached
[  544.335466][ T8913] ntfs3(loop2): Failed to read $AttrDef (-4).
[  544.586314][ T8734] udevd[8734]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  544.613267][   T24] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  544.853372][   T24] usb 7-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[  544.867477][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  544.947036][   T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  544.956992][   T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  544.965550][   T24] usb 7-1: Product: syz
[  544.972811][   T24] usb 7-1: Manufacturer: syz
[  544.977583][   T24] usb 7-1: SerialNumber: syz
[  545.186449][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.819'.
[  545.227196][   T24] usb 7-1: config 0 descriptor??
[  545.495151][   T24] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  545.622431][   T24] usb 7-1: USB disconnect, device number 11
[  545.812494][ T7566] udevd[7566]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.849896][ T8945] netlink: 76 bytes leftover after parsing attributes in process `syz.5.820'.
[  546.461150][ T8955] syzkaller0: entered promiscuous mode
[  546.466819][ T8955] syzkaller0: entered allmulticast mode
[  546.625241][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.824'.
[  547.614372][   T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  548.005700][ T8973] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  548.149057][   T24] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[  548.157744][   T24] usb 1-1: config 160 has no interface number 0
[  548.267614][   T24] usb 1-1: config 160 interface 200 has no altsetting 0
[  548.283168][   T24] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  548.292580][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.300891][   T24] usb 1-1: Product: syz
[  548.305208][   T24] usb 1-1: Manufacturer: syz
[  548.310030][   T24] usb 1-1: SerialNumber: syz
[  548.777212][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  549.017950][   T24] usb 1-1: MIDIStreaming interface descriptor not found
[  549.181749][   T24] usb 1-1: USB disconnect, device number 20
[  549.262350][ T8973] 8021q: adding VLAN 0 to HW filter on device bond3
[  549.702097][ T8932] udevd[8932]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  552.654641][ T8969] Set syz1 is full, maxelem 65536 reached
[  552.691994][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.839'.
[  553.163399][ T9004] xt_hashlimit: size too large, truncated to 1048576
[  553.239832][ T9006] tipc: Can't bind to reserved service type 0
[  553.678089][ T9004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  553.787091][ T9007] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  554.839525][ T9021] team_slave_0: entered promiscuous mode
[  554.845464][ T9021] team_slave_1: entered promiscuous mode
[  554.955015][ T9021] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  556.522075][ T9043] syzkaller0: entered promiscuous mode
[  556.527718][ T9043] syzkaller0: entered allmulticast mode
[  556.915173][ T9057] loop5: detected capacity change from 0 to 64
[  557.173943][   T30] audit: type=1800 audit(1770456412.070:187): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.854" name="file1" dev="loop5" ino=22 res=0 errno=0
[  557.406991][ T9057] syz.5.854: attempt to access beyond end of device
[  557.406991][ T9057] loop5: rw=34817, sector=39, nr_sectors = 30 limit=64
[  557.420750][ T9057] syz.5.854: attempt to access beyond end of device
[  557.420750][ T9057] loop5: rw=34817, sector=72, nr_sectors = 2 limit=64
[  557.435472][ T9057] syz.5.854: attempt to access beyond end of device
[  557.435472][ T9057] loop5: rw=34817, sector=76, nr_sectors = 90 limit=64
[  558.877619][ T9081] syzkaller0: entered promiscuous mode
[  558.883802][ T9081] syzkaller0: entered allmulticast mode
[  558.963381][ T9088] netlink: 'syz.6.863': attribute type 1 has an invalid length.
[  559.355012][ T9099] netlink: 64 bytes leftover after parsing attributes in process `syz.7.864'.
[  559.438961][   T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  559.449896][ T9088] 8021q: adding VLAN 0 to HW filter on device bond4
[  559.533392][ T9090] bond3: (slave syz_tun): Releasing active interface
[  559.669453][   T24] usb 7-1: Using ep0 maxpacket: 16
[  559.759350][ T9090] bond4: (slave syz_tun): making interface the new active one
[  559.803675][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  559.832247][ T9090] bond4: (slave syz_tun): Enslaving as an active interface with an up link
[  560.196379][   T24] usb 7-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  560.205787][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.214269][   T24] usb 7-1: Product: syz
[  560.218861][   T24] usb 7-1: Manufacturer: syz
[  560.223644][   T24] usb 7-1: SerialNumber: syz
[  560.244221][   T24] usb 7-1: config 0 descriptor??
[  560.265022][   T24] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected
[  560.266156][ T9105] loop0: detected capacity change from 0 to 64
[  560.302077][   T24] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  560.326534][   T30] audit: type=1800 audit(1770456415.220:188): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.866" name="file1" dev="loop0" ino=22 res=0 errno=0
[  560.387957][ T9105] syz.0.866: attempt to access beyond end of device
[  560.387957][ T9105] loop0: rw=34817, sector=39, nr_sectors = 30 limit=64
[  560.401881][ T9105] syz.0.866: attempt to access beyond end of device
[  560.401881][ T9105] loop0: rw=34817, sector=72, nr_sectors = 2 limit=64
[  560.416594][ T9105] syz.0.866: attempt to access beyond end of device
[  560.416594][ T9105] loop0: rw=34817, sector=76, nr_sectors = 90 limit=64
[  560.526694][   T24] usb 7-1: USB disconnect, device number 12
[  560.555434][   T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  560.612057][   T24] kobil_sct 7-1:0.0: device disconnected
[  563.099639][ T9145] syzkaller0: entered promiscuous mode
[  563.105404][ T9145] syzkaller0: entered allmulticast mode
[  563.209240][ T9150] loop6: detected capacity change from 0 to 64
[  563.329158][   T30] audit: type=1800 audit(1770456418.220:189): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.877" name="file1" dev="loop6" ino=22 res=0 errno=0
[  563.444461][ T9150] syz.6.877: attempt to access beyond end of device
[  563.444461][ T9150] loop6: rw=34817, sector=39, nr_sectors = 30 limit=64
[  563.458191][ T9150] syz.6.877: attempt to access beyond end of device
[  563.458191][ T9150] loop6: rw=34817, sector=72, nr_sectors = 2 limit=64
[  563.472834][ T9150] syz.6.877: attempt to access beyond end of device
[  563.472834][ T9150] loop6: rw=34817, sector=76, nr_sectors = 90 limit=64
[  563.747293][ T9107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.947347][ T9188] loop6: detected capacity change from 0 to 64
[  566.169035][   T30] audit: type=1800 audit(1770456421.050:190): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.888" name="file1" dev="loop6" ino=22 res=0 errno=0
[  566.412391][ T9192] syzkaller0: entered promiscuous mode
[  566.417974][ T9192] syzkaller0: entered allmulticast mode
[  566.702665][ T9188] syz.6.888: attempt to access beyond end of device
[  566.702665][ T9188] loop6: rw=34817, sector=39, nr_sectors = 30 limit=64
[  566.749643][ T9188] syz.6.888: attempt to access beyond end of device
[  566.749643][ T9188] loop6: rw=34817, sector=72, nr_sectors = 2 limit=64
[  566.847956][ T9188] syz.6.888: attempt to access beyond end of device
[  566.847956][ T9188] loop6: rw=34817, sector=76, nr_sectors = 90 limit=64
[  567.279797][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.892'.
[  567.659158][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  567.869001][   T24] usb 6-1: Using ep0 maxpacket: 32
[  567.934073][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  567.945261][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  567.957270][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  567.968725][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  567.979309][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  567.989544][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  568.295566][   T24] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  568.305210][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.314018][   T24] usb 6-1: Product: syz
[  568.318352][   T24] usb 6-1: Manufacturer: syz
[  568.323210][   T24] usb 6-1: SerialNumber: syz
[  568.415237][   T24] usb 6-1: config 0 descriptor??
[  568.434771][ T9204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  568.543914][   T24] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  569.305479][ T9232] fuse: Bad value for 'fd'
[  569.357749][ T8278] usb 6-1: USB disconnect, device number 10
[  570.144444][ T9246] loop6: detected capacity change from 0 to 64
[  570.225129][ T9242] syzkaller0: entered promiscuous mode
[  570.233160][ T9242] syzkaller0: entered allmulticast mode
[  570.550845][   T30] audit: type=1800 audit(1770456425.450:191): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.905" name="file1" dev="loop6" ino=22 res=0 errno=0
[  571.016485][ T9246] syz.6.905: attempt to access beyond end of device
[  571.016485][ T9246] loop6: rw=34817, sector=39, nr_sectors = 30 limit=64
[  571.054028][ T9246] syz.6.905: attempt to access beyond end of device
[  571.054028][ T9246] loop6: rw=34817, sector=72, nr_sectors = 2 limit=64
[  571.079465][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  571.191535][ T9246] syz.6.905: attempt to access beyond end of device
[  571.191535][ T9246] loop6: rw=34817, sector=76, nr_sectors = 90 limit=64
[  571.344714][ T9261] =====================================================
[  571.352173][ T9261] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400
[  571.359812][ T9261]  _copy_to_iter+0xef3/0x3400
[  571.364658][ T9261]  __skb_datagram_iter+0x18f/0x12b0
[  571.370288][ T9261]  skb_copy_datagram_iter+0x5b/0x1e0
[  571.375799][ T9261]  netlink_recvmsg+0x4bb/0xfe0
[  571.380847][ T9261]  sock_recvmsg+0x2d9/0x380
[  571.385650][ T9261]  __sys_recvfrom+0x282/0x550
[  571.390696][ T9261]  __x64_sys_recvfrom+0x130/0x200
[  571.395991][ T9261]  x64_sys_call+0x3227/0x3e70
[  571.401520][ T9261]  do_syscall_64+0xc9/0xf80
[  571.406199][ T9261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.412887][ T9261] 
[  571.415293][ T9261] Uninit was created at:
[  571.420797][ T9261]  __kmalloc_node_track_caller_noprof+0xb6e/0x1c70
[  571.427474][ T9261]  kmalloc_reserve+0x22f/0x4b0
[  571.432715][ T9261]  __alloc_skb+0x805/0x1030
[  571.437394][ T9261]  netlink_dump+0x248/0x1800
[  571.442293][ T9261]  __netlink_dump_start+0x716/0xd60
[  571.447689][ T9261]  rtnetlink_rcv_msg+0x1262/0x14b0
[  571.453106][ T9261]  netlink_rcv_skb+0x54d/0x680
[  571.458066][ T9261]  rtnetlink_rcv+0x35/0x40
[  571.464044][ T9261]  netlink_unicast+0xf04/0x12b0
[  571.469183][ T9261]  netlink_sendmsg+0x10b2/0x1250
[  571.474259][ T9261]  ____sys_sendmsg+0xfe7/0x1080
[  571.479404][ T9261]  ___sys_sendmsg+0x271/0x3b0
[  571.484209][ T9261]  __x64_sys_sendmsg+0x211/0x3e0
[  571.489523][ T9261]  x64_sys_call+0x1c60/0x3e70
[  571.494401][ T9261]  do_syscall_64+0xc9/0xf80
[  571.499297][ T9261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.505360][ T9261] 
[  571.507758][ T9261] Bytes 32-35 of 44 are uninitialized
[  571.513362][ T9261] Memory access of size 44 starts at ffff888043607000
[  571.520494][ T9261] Data copied to user address 00007fe7ace6e000
[  571.526743][ T9261] 
[  571.529288][ T9261] CPU: 1 UID: 0 PID: 9261 Comm: syz.7.910 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  571.539275][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  571.549755][ T9261] =====================================================
[  571.556779][ T9261] Disabling lock debugging due to kernel taint
[  571.563218][ T9261] Kernel panic - not syncing: kmsan.panic set ...
[  571.569813][ T9261] CPU: 1 UID: 0 PID: 9261 Comm: syz.7.910 Tainted: G    B               syzkaller #0 PREEMPT(voluntary) 
[  571.581201][ T9261] Tainted: [B]=BAD_PAGE
[  571.585437][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  571.595611][ T9261] Call Trace:
[  571.598991][ T9261]  <TASK>
[  571.602017][ T9261]  __dump_stack+0x26/0x30
[  571.606531][ T9261]  dump_stack_lvl+0x50/0x1c0
[  571.611305][ T9261]  ? dump_stack+0x12/0x25
[  571.615807][ T9261]  dump_stack+0x1e/0x25
[  571.620131][ T9261]  vpanic+0x435/0xd40
[  571.624311][ T9261]  panic+0x15d/0x160
[  571.628440][ T9261]  kmsan_report+0x31a/0x320
[  571.633140][ T9261]  ? kmsan_internal_check_memory+0x166/0x240
[  571.639309][ T9261]  ? kmsan_copy_to_user+0xef/0x190
[  571.644602][ T9261]  ? _copy_to_iter+0xef3/0x3400
[  571.649614][ T9261]  ? __skb_datagram_iter+0x18f/0x12b0
[  571.655212][ T9261]  ? skb_copy_datagram_iter+0x5b/0x1e0
[  571.660857][ T9261]  ? netlink_recvmsg+0x4bb/0xfe0
[  571.665933][ T9261]  ? sock_recvmsg+0x2d9/0x380
[  571.670762][ T9261]  ? __sys_recvfrom+0x282/0x550
[  571.675796][ T9261]  ? __x64_sys_recvfrom+0x130/0x200
[  571.681189][ T9261]  ? x64_sys_call+0x3227/0x3e70
[  571.686206][ T9261]  ? do_syscall_64+0xc9/0xf80
[  571.690976][ T9261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.697130][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.702351][ T9261]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  571.708294][ T9261]  ? do_syscall_64+0x81/0xf80
[  571.713058][ T9261]  ? filter_irq_stacks+0x49/0x190
[  571.718167][ T9261]  ? stack_depot_save_flags+0x35/0x790
[  571.723709][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.728942][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.734172][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.739433][ T9261]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  571.745363][ T9261]  kmsan_internal_check_memory+0x166/0x240
[  571.751283][ T9261]  kmsan_copy_to_user+0xef/0x190
[  571.756320][ T9261]  _copy_to_iter+0xef3/0x3400
[  571.761067][ T9261]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  571.767497][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.772716][ T9261]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  571.778652][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.783932][ T9261]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  571.790376][ T9261]  __skb_datagram_iter+0x18f/0x12b0
[  571.795687][ T9261]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  571.801444][ T9261]  skb_copy_datagram_iter+0x5b/0x1e0
[  571.806833][ T9261]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  571.812752][ T9261]  netlink_recvmsg+0x4bb/0xfe0
[  571.817584][ T9261]  ? aa_sock_msg_perm+0x284/0x2e0
[  571.822708][ T9261]  ? __pfx_netlink_recvmsg+0x10/0x10
[  571.828057][ T9261]  ? __pfx_netlink_recvmsg+0x10/0x10
[  571.833420][ T9261]  sock_recvmsg+0x2d9/0x380
[  571.838012][ T9261]  __sys_recvfrom+0x282/0x550
[  571.842792][ T9261]  ? kmsan_get_metadata+0xf1/0x160
[  571.848038][ T9261]  __x64_sys_recvfrom+0x130/0x200
[  571.853184][ T9261]  x64_sys_call+0x3227/0x3e70
[  571.857956][ T9261]  do_syscall_64+0xc9/0xf80
[  571.862544][ T9261]  ? clear_bhb_loop+0x40/0x90
[  571.867301][ T9261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.873278][ T9261] RIP: 0033:0x7fe7abf5b78e
[  571.877745][ T9261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  571.897524][ T9261] RSP: 002b:00007fe7ace6de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  571.906020][ T9261] RAX: ffffffffffffffda RBX: 00007fe7ace6f6c0 RCX: 00007fe7abf5b78e
[  571.914050][ T9261] RDX: 0000000000001000 RSI: 00007fe7ace6e000 RDI: 0000000000000008
[  571.922072][ T9261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  571.930089][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  571.938105][ T9261] R13: 00007fe7ace6df58 R14: 00007fe7ace6e000 R15: 0000000000000000
[  571.946155][ T9261]  </TASK>
[  571.949577][ T9261] Kernel Offset: disabled
[  571.954010][ T9261] Rebooting in 86400 seconds..