last executing test programs:

26m47.938748202s ago: executing program 32 (id=344):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

26m36.018567575s ago: executing program 33 (id=400):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[], 0x0, 0x6}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)

25m59.60112416s ago: executing program 34 (id=556):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}})

24m49.28738191s ago: executing program 35 (id=738):
timer_create(0x2, 0x0, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)

23m57.344395832s ago: executing program 36 (id=859):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
fanotify_init(0x4, 0x2)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}})
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

23m51.648540595s ago: executing program 37 (id=869):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

21m57.869609724s ago: executing program 38 (id=1187):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5)
request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x19c}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r4)
sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
shutdown(r2, 0x1)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)

21m57.05459447s ago: executing program 39 (id=1192):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x43, 0xffffff81}}], 0x18}, 0x40c0)

21m46.253142532s ago: executing program 40 (id=1269):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x84)

20m38.112150929s ago: executing program 41 (id=1497):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x4129, &(0x7f00000002c0)={0x0, 0x115f1, 0x81, 0x80400, 0x195}, &(0x7f0000000240), &(0x7f0000000280))
syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x10000, 0x1, 0x10f, 0x0, r3}, 0x0, 0x0)
syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0))
io_uring_enter(r3, 0x369a, 0x0, 0x1, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
lseek(r4, 0x7fff, 0x1)
io_uring_enter(r3, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0)

19m53.972643905s ago: executing program 42 (id=1634):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0)
r3 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000000)={0x1, 0x1})
read$FUSE(r3, &(0x7f0000003c00)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@fd={0x3ff, 0x0, 0x4, 0x400, 0x1, {}, {0x5, 0x0, 0x47, 0x4, 0xb, 0xc, "0100"}, 0x0, 0x4, {}, 0x4, 0x0, r3})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

19m12.180721234s ago: executing program 43 (id=1791):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

18m30.709996486s ago: executing program 44 (id=1884):
socket$inet6_tcp(0xa, 0x1, 0x0)
futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x1, 0xf9}}, 0x20)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

18m20.291159563s ago: executing program 45 (id=1886):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200050085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

18m16.940176594s ago: executing program 46 (id=1887):
rseq(&(0x7f0000001dc0), 0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), 0xffffffffffffffff)

18m4.416847759s ago: executing program 47 (id=1888):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@netkit}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
unshare(0x22020600)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x2, 0x3, 0x100, 0xffffffffffffffff, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r4, 0x100}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e00", 0x57}], 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpjquota}]}, 0xfe, 0x524, &(0x7f0000000e00)="$eJzs3U9vI2cZAPBnJvEmu5uSFDiUSi0VLcpWsHbS0Dbi0C4S4lYJVO7bKHGiKE4cxU7ZRD2k4gMgIQS9cuKCxAdAQv0IqFIlekeAQAi2cOAADBp7TF0zzh9tbC/J7yeNPfPOzPs87649fudPZgK4tp6LiHsRMRURL0bEfFGeFkOcdId8uY8fvrOeD/mcN/+SRFKURcRCr7687HZnlZunxm0dHe+sNRr1g2K61t7dr7WOju9u765t1bfqeysry6+svrr68urSpbQzb9dr3/zDj3/ws2+99quvfu+39/90Z7p/ftGO80gvEvejzmslZvvK8sAHF6nkMTZVtKcy6UQAADiXvDP72Yj4Uqf/Px9T8d9u8WCXbnb82QEAAACXIXt9Lv6ZRGQAAADAlfV6RMxFklaLawHmIk2r1e41vJ+PW2mj2Wp/ZbN5uLeRz4tYiEq6ud2oLxXX1C5EJcmnl4uLgHvTLw1Mr0TEkxHxo/mbnenqerOxMemDHwAAAHBN3B7Y///7fHf/HwAAALhiFiadAAAAADByw/b/kzHnAQAAAIzOsP3/mTHnAQAAAIzEt994Ix+y2eg+/3rj7aPDnebbdzfqrZ3q7uF6db15sF/daja3Ovfs2z2rvkazuf+12Dt8UGvX7yW11tHx/d3m4V77/rbnBwIAAMCkPPnF9z9KIuLk6zc7Q+7GxlsRU0NWcK8AuDLSiyz8+9HlAYzfsJ954OqbnnQCwOScTDoBYNI+dauPkk5B/8U7af/Cvx5hUgAAwKVa/ELJ+f9iF6Ay6eSAkbrQ+X/gSnH+H66vC57//2BUeQDjV/mkB+BSILimznrUx9Cbd5Sd/79RtmCWnVkXAAAwUnOd1yStFucC5yJNq9WIJzp/6l9JNrcb9aWI+ExE/Ga+MpNPL3fX8XhAAAAAAAAAAAAAAAAAAAAAAAAAADinLEsiAwAAAK60iPSPSfH8r8X5F+YGjw/cSP4xH91HevWeD9g+WM7L/9orj/Z7b/7kwVq7ffDSuI9eAAAAAGV6++md9+VJZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVfPxw3fWi+HGOOP++RsRsfCp+OvdOdMx23mfjUpE3PpbEtN96yURMXUJ8U/ejYinyuIneVqxUGQxGD+NiJvjif9MlmWl8W9fQny4zt7Ptz/3yr5/aTzXeS///k8Xw6Pqbf9mSuL3tn9TQ7Z/T5wzxtMf/qI2NP67EU9Pl29/evGTIfGfL6uw5B/lre8eH/9PYbfyyH4asRjl8ftj1dq7+7XW0fHd7d21rfpWfW9lZfmV1VdXX15dqm1uN+rFa2kbf/jML/89UPSvrKvT/hgSf+GM9r+Qj1T6CrPBMEWwDx88/Fx3tDJQRSf+nefLP39PnRI//0x8ufgdyOcv9sZPuuP9nv35B8+WJlbE3xjS/rP+/+8Mq3TAi9/5/u/OuSgAMAato+OdtUajfjDykfeyLHuUem6NL9VrOdLr3Z2yzMwjhZh9XFr6/zgyExHjC3oZR7YAAIDHzSed/klnAgAAAAAAAAAAAAAAAAAAANdX6yjSUd9ObDDmyWSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwqv8EAAD//57g0/s=")
r8 = open(&(0x7f0000000040)='./bus\x00', 0xc0d40, 0x20)
sendfile(r8, r8, 0x0, 0x1000000201005)

14m58.278113711s ago: executing program 48 (id=2293):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setitimer(0x1, 0x0, 0x0)

14m9.902247654s ago: executing program 49 (id=2397):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x40f00, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0])
chdir(&(0x7f0000000080)='./file1\x00')
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x8}, 0x18)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000)
setsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000300)="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", 0xfb)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@hyper})

7m6.96408644s ago: executing program 7 (id=5090):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001)
ptrace(0x11, r0)

7m6.306112599s ago: executing program 7 (id=5092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}, @TCA_STAB={0x4}]}, 0x5c}}, 0x4000010)

7m5.91276621s ago: executing program 7 (id=5096):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000046, &(0x7f0000001600)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@noblock_validity}, {@discard}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@barrier_val}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)

7m5.101794588s ago: executing program 7 (id=5102):
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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")
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="3481c669c6d4", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "440101", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')

7m3.722096449s ago: executing program 7 (id=5107):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x5}, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x26, 0x0, @void}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r5=>0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="2f0000003820000004000000", @ANYRES32=r5], 0x20)

7m3.282224236s ago: executing program 7 (id=5109):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = socket(0x10, 0x803, 0x0)
setsockopt(r1, 0xc41, 0xdf, &(0x7f0000001100), 0x0)
pipe(0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)=0x6)
write(0xffffffffffffffff, &(0x7f0000001080)="0a00dc99ea474bc9", 0xffffff9e)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket(0x25, 0x1782a5e3d6d88c1a, 0xde0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10)
write(r6, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001140)={r5, 0x38, &(0x7f0000001100)=[@in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0xfe7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000001180)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff0600000000"], 0x1c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m47.959511689s ago: executing program 50 (id=5109):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = socket(0x10, 0x803, 0x0)
setsockopt(r1, 0xc41, 0xdf, &(0x7f0000001100), 0x0)
pipe(0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)=0x6)
write(0xffffffffffffffff, &(0x7f0000001080)="0a00dc99ea474bc9", 0xffffff9e)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket(0x25, 0x1782a5e3d6d88c1a, 0xde0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10)
write(r6, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001140)={r5, 0x38, &(0x7f0000001100)=[@in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0xfe7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000001180)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff0600000000"], 0x1c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m26.319920767s ago: executing program 9 (id=5739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="89e7ee0c9fdad9b4b47380c988cafbe1f2fbb44fc49df4af792a38", 0x1b}, {0x0}], 0x2)

4m22.129045763s ago: executing program 9 (id=5748):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

4m21.921282982s ago: executing program 9 (id=5750):
pipe2(&(0x7f0000000040), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x840)
write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="410306"], 0xb)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

4m21.047089146s ago: executing program 9 (id=5755):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000003c0)='./bus\x00', 0x4400, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff7, 0x2001)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x2, 0x14, 0x1c, "6c3d1900001ea89de2b7fb0000e60080b8785d9600010047b5e60befa67b28007efef100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4e, 0xffffffff9673e35d]}})

4m20.623139785s ago: executing program 9 (id=5758):
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0)
futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0)

4m17.366509628s ago: executing program 9 (id=5769):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@rdma_args={0xfffffffffffffea3, 0x114, 0x1, {{0x1, 0x8}, {0x0}, &(0x7f0000002200), 0x0, 0x1, 0x2}}], 0x48}, 0x0)
open(0x0, 0x66842, 0x90)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0x12)
sendfile(r5, r4, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x40c4}}, 0x20}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000)

4m16.771332448s ago: executing program 51 (id=5769):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@rdma_args={0xfffffffffffffea3, 0x114, 0x1, {{0x1, 0x8}, {0x0}, &(0x7f0000002200), 0x0, 0x1, 0x2}}], 0x48}, 0x0)
open(0x0, 0x66842, 0x90)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0x12)
sendfile(r5, r4, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x40c4}}, 0x20}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000)

4m8.554911347s ago: executing program 8 (id=5796):
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x190)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000100)=[@decrefs, @decrefs], 0x0, 0x0, 0x0})

4m8.422098554s ago: executing program 8 (id=5797):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf})
getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f0000000280))

4m6.699967391s ago: executing program 8 (id=5800):
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1e9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de00328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c87b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12d", 0x4d9}], 0x1}, 0x240009bd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

4m4.404798159s ago: executing program 8 (id=5809):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030303031302c6e6c733d64656661756c742c00d4023937168c6a03faba6a3338c76bbb2cc123a1966858d8147d2c8f6696a3afb73a4233a7d6d17cbf793d9f3d5dc088fadadfdb7688c6a99fb22e09bb9b1fbe01fd94fae1e35f93fdbc2d26ac49430c71a16ad073e2416238a4b5f8c9877c553b2690fd7148fad9a9579680000d1a5caad58758c05f80c742dfc96510890d6ab62c3d6bc97ea00353e76f0f436500c88ef1b3ec52d6d1b6189c2c09e76160176ee4c21e9bcebdcac3565569f673575a04183f4095c2743d1547baa170a07fb5b39c0af610bbf13953ecb5e354858f41aa5b7bf2fbde", @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESOCT=0x0], 0x42, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==")
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

4m3.906453119s ago: executing program 8 (id=5813):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x20000005)

4m2.818747101s ago: executing program 8 (id=5818):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x800)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f0000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000240)='H', 0x1)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000440)=0xa0, 0x4)
shutdown(r2, 0x1)
socket(0x15, 0x800, 0x200)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40840)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x2})

4m1.736147035s ago: executing program 52 (id=5818):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x800)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f0000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000240)='H', 0x1)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000440)=0xa0, 0x4)
shutdown(r2, 0x1)
socket(0x15, 0x800, 0x200)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40840)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x2})

1m19.289660448s ago: executing program 5 (id=6351):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x206, 0x20182)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xefff}}}}}}}, 0x0)
chdir(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080)
syz_extract_tcp_res(&(0x7f0000000180), 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_ON(r5, 0x7001)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")

1m16.736599631s ago: executing program 5 (id=6358):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m14.713348649s ago: executing program 5 (id=6364):
socket$kcm(0x2, 0x7, 0x106)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

1m13.090193036s ago: executing program 5 (id=6369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0)

1m12.914453862s ago: executing program 5 (id=6371):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1m12.401938875s ago: executing program 5 (id=6372):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="89e7ee0c9fdad9b4b47380c988cafbe1f2fbb44fc4", 0x15}, {&(0x7f0000000180)=']\x00\x00', 0x3}], 0x2)

57.352938842s ago: executing program 53 (id=6372):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="89e7ee0c9fdad9b4b47380c988cafbe1f2fbb44fc4", 0x15}, {&(0x7f0000000180)=']\x00\x00', 0x3}], 0x2)

11.562489391s ago: executing program 0 (id=6537):
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mkdir(&(0x7f0000000040)='./file1\x00', 0x7)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

10.921449104s ago: executing program 6 (id=6542):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xa}, {0x3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x4000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe0000"], 0x28}}, 0x0)

10.60242353s ago: executing program 6 (id=6544):
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000540)={0x0, 0x0, 0x9, 0x0, 0x0, 0x5})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd}]}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)

10.394046623s ago: executing program 6 (id=6547):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1083}, 0x1})
io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)

8.413646945s ago: executing program 0 (id=6554):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0)
dup(r3)
accept4(r0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.203989252s ago: executing program 6 (id=6555):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3})
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x4080, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
pipe2$watch_queue(0x0, 0x80)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000340)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r6, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x128, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc561}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc0}, 0x20004030)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"})

7.908121838s ago: executing program 0 (id=6557):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x30)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {}, {}, 0x183639ee, 0x10001})
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000019200)={'macsec0\x00', @local})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008801}, 0x40000)
syz_usb_control_io$hid(r5, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, 0x0, 0xb301fffd)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007ff00080900010073"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

7.906300816s ago: executing program 3 (id=6558):
r0 = socket$netlink(0x10, 0x3, 0x15)
writev(r0, 0x0, 0x0)

7.402111018s ago: executing program 3 (id=6560):
socket(0x2a, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.725739362s ago: executing program 3 (id=6563):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/16], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1)

6.077871916s ago: executing program 3 (id=6565):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94)

4.135770249s ago: executing program 3 (id=6570):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x1, 0x8, 0x61, 0xffffffff}, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x101800)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000010)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
io_setup(0xffffffff, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000140))
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r4 = syz_open_dev$audion(&(0x7f0000000700), 0x1ff, 0x0)
ioctl$LOOP_SET_FD(r4, 0x80044dfb, 0xffffffffffffffff)
r5 = syz_open_dev$sndctrl(&(0x7f0000000680), 0x9, 0x1)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="030000001c0000003b5e000001000000000000008ec500000200000006000000040000004ccd90b01d6b63f89c3515e5a77d40da0c2b50d2801d96af5d8c90"])
fsmount(r3, 0x0, 0x1)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r6, 0x0, 0x0)

3.590544239s ago: executing program 1 (id=6572):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x840)
write$nci(r1, &(0x7f0000000680)=ANY=[], 0xb)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

3.588482865s ago: executing program 2 (id=6573):
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000540)={0x0, 0x0, 0x9, 0x0, 0x0, 0x5})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0x9}]}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)

3.399392915s ago: executing program 4 (id=6574):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7ff, 0x30}, &(0x7f00000000c0)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x26, 0x3, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="84010000190001002abd7000fbdbdf251d0109004d0012800c00bf000d00000000000000955d0a1ffbad02f7a5952bd37e1eedb9ee3993727d879cd1ee15cb50c118a9107a31ff3938adb6737c778a96d7a74496e2d0f798a5f4b66128566dfe72d4679e27fc2d7f86b4ca81ccc0e63e000000200106801c01a98018013e8014019780100161800c016d800801d18004011280fd00cd8042110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

3.24367758s ago: executing program 2 (id=6575):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp={0x44, 0x4, 0x5, 0x3}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

3.089806717s ago: executing program 1 (id=6576):
r0 = socket(0x2b, 0x1, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
r3 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2})
io_uring_enter(r3, 0x44fd, 0x3, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

2.759698414s ago: executing program 6 (id=6577):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.745667925s ago: executing program 2 (id=6578):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/57, 0x39}, {&(0x7f00000000c0)=""/36, 0x24}], 0x2}, 0x40000000)

2.662464806s ago: executing program 1 (id=6579):
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0xa1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)

2.488776518s ago: executing program 2 (id=6580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a00000609"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

2.389845012s ago: executing program 4 (id=6581):
syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)

2.329890239s ago: executing program 6 (id=6582):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94)

2.106846564s ago: executing program 2 (id=6583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

1.956812811s ago: executing program 4 (id=6584):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
write$tcp_congestion(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x440d8, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@data_err_abort, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x450, &(0x7f00000016c0)="$eJzs3M1vG0UbAPDHdpy8/XoTymdDC4GCiPhImrSgHrgUgcQBJCQ4FHEKSVqFug1qgkSrCAKHcESVuCOOSPwFXCgXBJyQuMIdIUUoFwono7V3Uyexkzix47T+/aRNZjxjzTy7O/Z41usAutZQ8icXcTgifouI/mp2bYWh6r9bKwuT/6wsTOaiXH7zr1yl3t8rC5NZ1ex5h6qZcnmTdpfeiZgolaavpvnR+cvvj85du/7czOWJi9MXp6+Mnz175vSJ3hfGn29JnEeSvg5+NHv82Ktv33h98vyNd3/6Junv4bS8No5WGaru3bqebHVjHXakJp3r6WBHaEohIpLDVayM//4oxIHVsv545dOOdg5oq3I5X+5rXLxYBu5iyUQd6EbZG33y+Tfb9mjqsS8sn4vVdYxb6VYt6Yl8WqeYfkZqh6GIOL/475fJFm1ahwAAqHXzXEQ8W2/+l48Haur9P702NBAR90TE0Yi4NyLui4j7Iyp1H4yIh5psf/0Vko3zn3L/jgLbpmT+92J6bWvt/C+b/cVAIc0dqcRfzF2YKU2fSvfJcBT7kvzYJm18//Kvnzcqq53/JVvSfjYXTPvxZ8+6BbqpifmJ3cRca/mTiMGeevHnVue8yfz4WEQM7rCNmae/Pt6obGDL+DfRgkl5+auIp6rHfzHWxZ/JNbw+mV0rKU2fGs3Oio1+/mXpjUbtb33822v5ZjkO1j3/V+MfyP0vYu7a9UuV67Vzzbex9PtnDT/T7PT87829VUn3po99ODE/f3Usojf32sbHx28/N8tn9ZPzf/hk/fF/NG7viYcjIjmJT0TEIxHxaNr3xyLi8Yg4uUn8P770xHvNx7/JqnwLJfFPbXX8o/b4N58oXPrh27qNF7d7/M9UUsPpI9t5/dtuB3e5+wAAAOCOkK98Bz6XH1lN5/MjIxGLlbXdg/nS7Nz8MxdmP7gyVf2u/EAU89lKV3/NeuhYupaX5cfX5U+n68ZfFA5U8iOTs6WpTgcPXe5QNv4La8d/4o9Cp3sHtJ37taB7Gf/QvYx/6F7GP3Qv4x+6V73x/3EH+gHsvS3e/w/sVT+AvWf+D93L+IfuZfxDV2p4b3x+V7f83/mJviZ+RGAfJb7r3d1vNWw/Efl9EvJdkyhG3aKedp+HfXWLOv3KBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Br/BQAA//9mG+Cj")
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x8, 0x302, 0xb8e, 0x0, 0x1, 0x0})

1.730046139s ago: executing program 0 (id=6585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x98, r1, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

1.573705757s ago: executing program 2 (id=6586):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000580)=[{0x1000, 0x200, 0x0, 0x0}, {0x5, 0x1201, 0x0, 0x0}], 0x2})

1.51231037s ago: executing program 4 (id=6587):
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000540)={0x0, 0x0, 0x9, 0x0, 0x0, 0x5})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0x9}]}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)

1.391143672s ago: executing program 0 (id=6588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x76e, 0x2, 0x10001, 0x24, 0x2c, 0x2, 0x4dd, 0x1000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x2, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0b1}, 0x4000800)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.229419423s ago: executing program 4 (id=6589):
syz_emit_ethernet(0x0, 0x0, 0x0)

938.467531ms ago: executing program 4 (id=6590):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3})
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x4080, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
pipe2$watch_queue(0x0, 0x80)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000340)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r6, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x128, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc561}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc0}, 0x20004030)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"})

937.507097ms ago: executing program 1 (id=6591):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x80, [[0x9ef8, 0x2, 0x0, 0x0, 0x3], [0x0, 0x10000001, 0x200, 0x0, 0x0, 0x10009, 0x400000], [0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xfffffffb]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0x2}, {0x63f}, {0xf7ffffe, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0xc, 0x6}, {0x1ff, 0x7f}, {0x17}, {0x0, 0x1}, {0x1}], '\x00', 0x1, 0x0, 0x0, 0xf8})

882.893094ms ago: executing program 3 (id=6592):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1})
syz_usb_control_io$printer(r2, 0x0, 0x0)
socket$inet(0x2, 0x801, 0x0)
socket$kcm(0x11, 0x3, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)

709.00988ms ago: executing program 1 (id=6593):
socket(0x2a, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

503.361369ms ago: executing program 0 (id=6594):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7ff, 0x30}, &(0x7f00000000c0)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x26, 0x3, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="84010000190001002abd7000fbdbdf251d0109004d0012800c00bf000d00000000000000955d0a1ffbad02f7a5952bd37e1eedb9ee3993727d879cd1ee15cb50c118a9107a31ff3938adb6737c778a96d7a74496e2d0f798a5f4b66128566dfe72d4679e27fc2d7f86b4ca81ccc0e63e000000200106801c01a98018013e8014019780100161800c016d800801d18004011280fd00cd8042110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

0s ago: executing program 1 (id=6595):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f00000013c0)=""/113, 0x71}], 0x2)

kernel console output (not intermixed with test programs):

1492.232351][T26931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1492.239538][T26931] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1492.247150][T26931] bridge_slave_1: entered allmulticast mode
[ 1492.259199][T26931] bridge_slave_1: entered promiscuous mode
[ 1492.332676][T26931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1492.374100][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f5c6000: rx timeout, send abort
[ 1492.385104][T26931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1492.522570][T26931] team0: Port device team_slave_0 added
[ 1492.543849][T26931] team0: Port device team_slave_1 added
[ 1492.581011][ T5829] Bluetooth: hci0: command tx timeout
[ 1492.690023][T26931] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1492.718180][T26931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1492.794424][T26931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1492.825446][T26931] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1492.832575][T26931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1492.858836][T26931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1492.874288][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f5c6400: rx timeout, send abort
[ 1492.882810][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f5c6000: abort rx timeout. Force session deactivation
[ 1492.978891][T26962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.081277][T26963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.112945][T26962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.149558][T26962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.172807][T26931] hsr_slave_0: entered promiscuous mode
[ 1493.179557][T26931] hsr_slave_1: entered promiscuous mode
[ 1493.229326][T26931] debugfs: 'hsr0' already exists in 'hsr'
[ 1493.244448][T26931] Cannot create hsr debugfs directory
[ 1493.287082][T26969] xt_hashlimit: max too large, truncated to 1048576
[ 1493.304123][T26971] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5543'.
[ 1493.318749][T26971] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5543'.
[ 1493.382644][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f5c6400: abort rx timeout. Force session deactivation
[ 1493.455407][ T5829] Bluetooth: hci2: unexpected event for opcode 0x1003
[ 1493.668049][T26931] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1493.825057][T26931] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1493.990368][T26931] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1494.045373][T26993] bridge0: port 1(syz_tun) entered blocking state
[ 1494.054885][T26993] bridge0: port 1(syz_tun) entered disabled state
[ 1494.063898][T26993] syz_tun: entered allmulticast mode
[ 1494.071749][T26993] syz_tun: entered promiscuous mode
[ 1494.116574][T26931] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1494.260318][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888056d8e800: rx timeout, send abort
[ 1494.604741][T26931] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1494.701145][ T5829] Bluetooth: hci0: command tx timeout
[ 1494.760495][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888056d8d800: rx timeout, send abort
[ 1494.769936][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888056d8e800: abort rx timeout. Force session deactivation
[ 1494.823117][T26931] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1494.906421][T26931] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1494.944164][T26931] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1495.056946][T27007] net_ratelimit: 3 callbacks suppressed
[ 1495.056957][T27007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1495.093846][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5557'.
[ 1495.109776][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5557'.
[ 1495.268893][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888056d8d800: abort rx timeout. Force session deactivation
[ 1495.400334][T27026] loop9: detected capacity change from 0 to 512
[ 1495.523731][T26931] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1495.526354][T27026] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5561: invalid indirect mapped block 256 (level 2)
[ 1495.661113][T27026] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1495.664852][T26931] 8021q: adding VLAN 0 to HW filter on device team0
[ 1495.670865][    C0] EXT4-fs (loop9): error count since last fsck: 1
[ 1495.687124][    C0] EXT4-fs (loop9): initial error at time 1771657116: ext4_free_branches:1023: inode 11
[ 1495.696815][    C0] EXT4-fs (loop9): last error at time 1771657116: ext4_free_branches:1023: inode 11
[ 1495.708233][T27026] EXT4-fs (loop9): 2 truncates cleaned up
[ 1495.719881][T27026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1495.740348][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1495.747614][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1495.830647][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1495.837839][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1495.987896][T26931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1496.002573][T26931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1496.127896][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5565'.
[ 1496.144397][T27040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5565'.
[ 1496.320071][T13141] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.730948][ T5829] Bluetooth: hci0: command tx timeout
[ 1496.795746][T26931] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1497.136307][T27061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1497.333587][T27070] rose0: entered promiscuous mode
[ 1497.359121][T27070] rose0: entered allmulticast mode
[ 1497.409752][T27070] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1497.510244][T27074] loop9: detected capacity change from 0 to 512
[ 1497.536926][ T5829] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1497.546560][ T5829] Bluetooth: hci2: Injecting HCI hardware error event
[ 1497.555496][ T5829] Bluetooth: hci2: hardware error 0x00
[ 1497.632698][T27074] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5575: inode has both inline data and extents flags
[ 1497.660920][T27074] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1497.663794][T27074] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5575: couldn't read orphan inode 15 (err -117)
[ 1497.673030][    C0] EXT4-fs (loop9): error count since last fsck: 1
[ 1497.673056][    C0] EXT4-fs (loop9): initial error at time 1771657118: ext4_orphan_get:1391: inode 15
[ 1497.673102][    C0] EXT4-fs (loop9): last error at time 1771657118: ext4_orphan_get:1391: inode 15
[ 1497.788569][T27074] loop9: lost filesystem error report for type 5 error -117
[ 1497.824293][T27074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1497.909241][T26931] veth0_vlan: entered promiscuous mode
[ 1497.933416][T26931] veth1_vlan: entered promiscuous mode
[ 1498.099096][T26931] veth0_macvtap: entered promiscuous mode
[ 1498.169923][T26931] veth1_macvtap: entered promiscuous mode
[ 1498.233427][T26931] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1498.811114][ T5828] Bluetooth: hci0: command tx timeout
[ 1499.120198][T26931] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1499.179986][T13141] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1499.272946][T13717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.304140][T13717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.339462][T13717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.399379][T13717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1499.574413][T13081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1499.667650][T13081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1499.938712][ T5829] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1499.945903][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1499.978678][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1500.067050][T27081] loop8: detected capacity change from 0 to 32768
[ 1500.126904][T27081] btrfs: Deprecated parameter 'usebackuproot'
[ 1500.169852][T27081] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1500.264902][T27081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5576 (27081)
[ 1500.340447][T27117] binder: 27116:27117 ioctl c0306201 0 returned -14
[ 1500.479807][T27113] syzkaller0: entered promiscuous mode
[ 1500.610982][T27081] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1500.679448][T27122] binder: 27116:27122 ioctl c0306201 2000000001c0 returned -14
[ 1501.348230][T27081] BTRFS info (device loop8): using crc32c checksum algorithm
[ 1501.420962][T27113] syzkaller0: entered allmulticast mode
[ 1501.464341][T27081] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1501.537023][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[ 1501.537323][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1501.591434][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1501.673693][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1502.133808][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1502.179268][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1502.245187][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1502.308687][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1502.375591][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1502.421371][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1502.481926][T27081] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1502.514871][T27081] BTRFS error (device loop8): open_ctree failed: -12
[ 1504.618681][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1504.627659][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1504.636856][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1504.644926][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1504.653084][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1504.712074][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888056f00800: rx timeout, send abort
[ 1505.213788][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888056f00c00: rx timeout, send abort
[ 1505.222175][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888056f00800: abort rx timeout. Force session deactivation
[ 1505.722123][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888056f00c00: abort rx timeout. Force session deactivation
[ 1506.732625][ T5828] Bluetooth: hci4: command tx timeout
[ 1506.733828][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5605'.
[ 1506.807811][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5605'.
[ 1508.790071][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888054d19400: rx timeout, send abort
[ 1508.821034][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[ 1509.233055][T27185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1509.290275][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888054d1a800: rx timeout, send abort
[ 1509.298723][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888054d19400: abort rx timeout. Force session deactivation
[ 1509.522896][T27220] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5615'.
[ 1509.798637][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888054d1a800: abort rx timeout. Force session deactivation
[ 1510.822487][T27161] lo speed is unknown, defaulting to 1000
[ 1510.893730][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[ 1510.969006][T27233] nbd: nbd5 already in use
[ 1510.974445][T27233] nbd: must specify an index to disconnect
[ 1511.237403][T27239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5621'.
[ 1511.316959][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5621'.
[ 1511.351166][T27245] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1513.106716][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[ 1513.160967][T21845] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1513.174913][T27161] chnl_net:caif_netlink_parms(): no params data found
[ 1513.272830][T27263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1513.361200][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5626'.
[ 1513.374740][T21845] usb 9-1: Using ep0 maxpacket: 8
[ 1513.410116][T21845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1513.423430][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5626'.
[ 1513.495421][T21845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1513.523754][T21845] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1513.548729][T21845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1513.568905][T21845] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1513.582679][T21845] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1513.591891][T21845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.603977][T21845] usb 9-1: config 0 descriptor??
[ 1513.612477][T27249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1513.759890][T27161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1513.771624][T27161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.778975][T27161] bridge_slave_0: entered allmulticast mode
[ 1513.797429][T27161] bridge_slave_0: entered promiscuous mode
[ 1513.810358][T27161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1513.839326][T27161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.849519][T27161] bridge_slave_1: entered allmulticast mode
[ 1513.883918][T27161] bridge_slave_1: entered promiscuous mode
[ 1514.003647][T27161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1514.051483][T13174] usb 9-1: USB disconnect, device number 7
[ 1514.060150][ T5828] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[ 1514.075658][T27161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1514.179872][T27161] team0: Port device team_slave_0 added
[ 1514.356290][T27161] team0: Port device team_slave_1 added
[ 1514.445237][T27161] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1514.465503][T27161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1514.520210][T27161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1514.547584][T27161] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1514.560880][T21845] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1514.571590][T27161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1514.662592][T27161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1514.738608][T21845] usb 7-1: Using ep0 maxpacket: 16
[ 1514.744649][T27302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5637'.
[ 1514.749439][T21845] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.776957][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5637'.
[ 1514.786337][T27302] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1514.794448][T21845] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1514.796996][T21845] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1516.391501][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[ 1516.393710][T21845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.405553][T21845] usb 7-1: Product: syz
[ 1516.409711][T21845] usb 7-1: Manufacturer: syz
[ 1516.424646][T21845] usb 7-1: SerialNumber: syz
[ 1516.561938][T27161] hsr_slave_0: entered promiscuous mode
[ 1516.611601][T27161] hsr_slave_1: entered promiscuous mode
[ 1516.618195][T27161] debugfs: 'hsr0' already exists in 'hsr'
[ 1516.667831][T27161] Cannot create hsr debugfs directory
[ 1516.816334][T27314] overlayfs: failed to resolve './file1': -2
[ 1516.896534][T21845] usb 7-1: cannot find UAC_HEADER
[ 1516.941865][T27320] loop5: detected capacity change from 0 to 128
[ 1517.055995][T21845] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1517.065180][T27320] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1517.071052][T27320] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1517.113442][T21845] usb 7-1: USB disconnect, device number 38
[ 1517.295768][T13846] udevd[13846]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1517.385691][T27161] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1517.790521][T26931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1518.194919][T27161] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1518.275988][T27340] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5645'.
[ 1518.302375][T27341] loop6: detected capacity change from 0 to 1024
[ 1518.406240][T27161] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1518.754111][T27161] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.731488][T27362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5653'.
[ 1520.745545][T27161] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1520.796752][T27161] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1520.812231][T27362] Bluetooth: MGMT ver 1.23
[ 1520.852506][T27161] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1521.015840][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5653'.
[ 1521.069234][T27161] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1521.207381][T27362] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1521.676974][T27381] loop8: detected capacity change from 0 to 16
[ 1521.732697][T27381] erofs (device loop8): invalid ishare xattr prefix id 0
[ 1521.889565][T27161] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1521.966798][T27161] 8021q: adding VLAN 0 to HW filter on device team0
[ 1522.039242][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1522.046560][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1522.185662][T27393] loop8: detected capacity change from 0 to 512
[ 1522.198942][T27393] ext3: Unknown parameter 'pcr'
[ 1522.232611][T13497] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1522.487073][T13497] usb 7-1: config 0 has an invalid interface number: 255 but max is 0
[ 1522.583751][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1522.590983][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1522.629293][T13497] usb 7-1: config 0 has no interface number 0
[ 1522.671043][T13497] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1522.767736][T13497] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1522.822015][T13497] usb 7-1: config 0 interface 255 has no altsetting 0
[ 1522.844048][T13497] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1522.877100][T13497] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.887350][T27401] netlink: 'syz.4.5662': attribute type 1 has an invalid length.
[ 1522.921603][T13497] usb 7-1: config 0 descriptor??
[ 1522.953582][T13497] ums-realtek 7-1:0.255: USB Mass Storage device detected
[ 1523.157019][   T29] usb 7-1: USB disconnect, device number 39
[ 1523.253442][T27161] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1524.033593][T27439] loop6: detected capacity change from 0 to 1024
[ 1524.049678][T27443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5670'.
[ 1524.083071][T27443] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1524.157050][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5670'.
[ 1524.206153][T27439] hfsplus: b-tree write err: -5, ino 2
[ 1524.328155][T27131] hfsplus: b-tree write err: -5, ino 25
[ 1524.348400][T27131] hfsplus: b-tree write err: -5, ino 4
[ 1524.371359][T27131] hfsplus: b-tree write err: -5, ino 2
[ 1524.376944][T27131] hfsplus: b-tree write err: -5, ino 26
[ 1524.819151][T27461] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5678'.
[ 1524.857371][T27161] veth0_vlan: entered promiscuous mode
[ 1524.911274][T27161] veth1_vlan: entered promiscuous mode
[ 1525.048569][T27161] veth0_macvtap: entered promiscuous mode
[ 1525.093254][T27161] veth1_macvtap: entered promiscuous mode
[ 1525.201754][T27161] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1525.229256][T27161] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1525.275067][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.317411][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.353202][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.382146][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1527.559029][T27496] loop5: detected capacity change from 0 to 8
[ 1527.775002][T27496] SQUASHFS error: Failed to read block 0x1ec: -5
[ 1527.781689][T27496] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1527.874641][T27463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1528.456840][T27506] lo speed is unknown, defaulting to 1000
[ 1528.893361][T27507] loop8: detected capacity change from 0 to 128
[ 1529.088498][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.131066][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.268108][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.286753][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.391219][ T9179] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1529.599324][ T9179] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1529.612143][ T9179] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1529.660018][ T9179] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1529.678822][ T9179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.737036][ T9179] usb 6-1: Product: syz
[ 1529.759523][ T9179] usb 6-1: Manufacturer: syz
[ 1529.779262][ T9179] usb 6-1: SerialNumber: syz
[ 1529.914818][ T9179] usb 6-1: config 0 descriptor??
[ 1529.935732][T27514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1530.941508][T27514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1531.167593][T27514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1531.187318][T27514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1531.613228][ T9179] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1532.249163][ T9179] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1532.339288][ T9179] dm9601 6-1:0.0 eth8: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, ce:ac:b0:27:d5:7d
[ 1532.439671][ T9179] usb 6-1: USB disconnect, device number 24
[ 1532.446052][T27554] syzkaller0: entered promiscuous mode
[ 1532.471274][T27554] syzkaller0: entered allmulticast mode
[ 1532.534131][ T9179] dm9601 6-1:0.0 eth8: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet
[ 1532.641765][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1532.656852][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1532.671163][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1532.680365][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1532.692145][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1533.109127][T27559] lo speed is unknown, defaulting to 1000
[ 1533.337460][T13138] syz_tun (unregistering): left allmulticast mode
[ 1533.349376][T13138] syz_tun (unregistering): left promiscuous mode
[ 1533.357681][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5714'.
[ 1533.361809][T13138] bridge0: port 1(syz_tun) entered disabled state
[ 1533.467139][T27576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1533.520735][T27578] overlayfs: failed to resolve './file0': -2
[ 1534.235638][T27574] syzkaller0: entered promiscuous mode
[ 1534.431395][T27574] syzkaller0: entered allmulticast mode
[ 1534.437704][T27574] tipc: Resetting bearer <eth:syzkaller0>
[ 1534.608680][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5717'.
[ 1534.733253][ T5829] Bluetooth: hci5: command tx timeout
[ 1535.305223][T13081] tipc: Resetting bearer <eth:syzkaller0>
[ 1535.331154][T27570] tipc: Resetting bearer <eth:syzkaller0>
[ 1536.810905][ T5829] Bluetooth: hci5: command tx timeout
[ 1538.552245][T27570] tipc: Disabling bearer <eth:syzkaller0>
[ 1538.655053][T26052] tipc: Node number set to 3629927064
[ 1538.724426][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5727'.
[ 1538.737970][T27605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1538.745665][T27605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1538.808094][T27627] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5728'.
[ 1538.878323][T27605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1538.891091][ T5829] Bluetooth: hci5: command tx timeout
[ 1538.903503][T27605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1539.024960][T27612] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1539.106665][T27627] bond3: entered promiscuous mode
[ 1539.115071][T27627] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1539.137063][   T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1539.174153][   T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1539.341799][   T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1539.393299][   T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1540.693193][T27559] chnl_net:caif_netlink_parms(): no params data found
[ 1540.971339][ T5829] Bluetooth: hci5: command tx timeout
[ 1540.994277][T27662] tipc: Started in network mode
[ 1541.000643][T27662] tipc: Node identity 7a983e2f7f13, cluster identity 4711
[ 1541.025594][T27662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1542.032115][T27669] syzkaller0: entered promiscuous mode
[ 1542.037630][T27669] syzkaller0: entered allmulticast mode
[ 1542.316999][T27669] tipc: Resetting bearer <eth:syzkaller0>
[ 1542.396199][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5743'.
[ 1542.582421][T25574] tipc: Resetting bearer <eth:syzkaller0>
[ 1542.601777][T27661] tipc: Resetting bearer <eth:syzkaller0>
[ 1544.756824][T27661] tipc: Disabling bearer <eth:syzkaller0>
[ 1544.766403][   T29] tipc: Node number set to 93011503
[ 1544.772045][T27559] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1544.779189][T27559] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1544.786684][T27559] bridge_slave_0: entered allmulticast mode
[ 1544.797034][T27559] bridge_slave_0: entered promiscuous mode
[ 1544.860336][T27676] bond1: entered promiscuous mode
[ 1544.871446][T27676] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1545.170024][T27559] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1545.197682][T27559] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1545.219455][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.239960][T27559] bridge_slave_1: entered allmulticast mode
[ 1545.331858][ T2145] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1545.437455][T27559] bridge_slave_1: entered promiscuous mode
[ 1545.624776][ T2145] usb 6-1: Using ep0 maxpacket: 8
[ 1545.828338][T27559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1545.856494][T27559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1545.915418][ T2145] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1546.002255][ T2145] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1546.032149][ T2145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1546.068894][ T2145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1546.084463][T27723] netlink: 'syz.4.5753': attribute type 1 has an invalid length.
[ 1546.112541][ T2145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1546.114706][T27722] loop9: detected capacity change from 0 to 1024
[ 1546.124818][ T2145] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1546.148934][ T2145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1546.152749][T27559] team0: Port device team_slave_0 added
[ 1546.159655][ T2145] usb 6-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1546.197537][T27559] team0: Port device team_slave_1 added
[ 1546.226240][T27722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1546.275557][ T2145] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1546.284911][ T2145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.297056][ T2145] usb 6-1: Product: syz
[ 1546.302026][ T2145] usb 6-1: Manufacturer: syz
[ 1546.306695][ T2145] usb 6-1: SerialNumber: syz
[ 1546.337045][ T2145] usb 6-1: config 0 descriptor??
[ 1546.354129][T27704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1546.376441][ T2145] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1546.431924][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1546.517046][T27559] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1546.540944][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1546.561597][T27559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1546.598387][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1546.724546][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1546.810758][T27559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1546.833717][ T2145] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1546.845698][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1546.848034][T27739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1547.564818][T27559] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1547.581636][T27559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1547.581706][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1547.749088][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5760'.
[ 1547.765927][T13140] udevd[13140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1547.782351][T27559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1547.820430][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1547.843450][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1547.878263][T27746] bond7: entered promiscuous mode
[ 1547.885900][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1547.903976][T27746] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1547.921584][T27161] EXT4-fs warning (device loop9): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[ 1548.021387][T27559] hsr_slave_0: entered promiscuous mode
[ 1548.028626][T27559] hsr_slave_1: entered promiscuous mode
[ 1548.038451][T27559] debugfs: 'hsr0' already exists in 'hsr'
[ 1548.047465][T27559] Cannot create hsr debugfs directory
[ 1549.134896][ T2145] usb 6-1: USB disconnect, device number 25
[ 1549.554373][T27161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1549.766069][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.990496][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.206564][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.335794][T27775] overlayfs: failed to clone upperpath
[ 1550.412942][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.528446][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1550.539172][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1550.553766][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1550.568277][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1550.582630][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1550.591653][   T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1550.650995][ T9179] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1550.695857][T25574] netdevsim netdevsim9 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.704921][T25574] netdevsim netdevsim9 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.784565][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1550.811174][ T9179] usb 9-1: Using ep0 maxpacket: 8
[ 1550.819108][T25574] netdevsim netdevsim9 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.832388][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1550.867153][ T9179] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1550.878121][T25574] netdevsim netdevsim9 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.889948][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1551.650445][ T9179] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1551.676458][   T12] bridge_slave_1: left allmulticast mode
[ 1551.695278][   T12] bridge_slave_1: left promiscuous mode
[ 1551.706255][ T9179] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1551.718665][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1551.743378][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1551.754432][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1551.763321][ T9179] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1551.776630][   T12] bridge_slave_0: left allmulticast mode
[ 1551.791013][   T10] usb 6-1: config 0 descriptor??
[ 1551.793743][   T12] bridge_slave_0: left promiscuous mode
[ 1551.796573][ T9179] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1551.805559][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1551.815854][ T9179] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1551.836014][ T9179] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1551.845877][ T9179] usb 9-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1551.863821][ T9179] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1551.873545][ T9179] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.882552][ T9179] usb 9-1: Product: syz
[ 1551.887218][ T9179] usb 9-1: Manufacturer: syz
[ 1551.892250][ T9179] usb 9-1: SerialNumber: syz
[ 1551.901385][ T9179] usb 9-1: config 0 descriptor??
[ 1551.927794][T27781] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1551.941242][ T9179] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1552.064830][ T9179] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1552.118994][T13140] udevd[13140]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1552.138826][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1552.179520][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1552.192071][   T12] bond0 (unregistering): Released all slaves
[ 1552.215074][T27786] lo speed is unknown, defaulting to 1000
[ 1552.297314][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.340752][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.375632][   T12] tipc: Left network mode
[ 1552.398426][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.626563][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.651534][ T5828] Bluetooth: hci4: command tx timeout
[ 1552.651863][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.780062][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.935525][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1552.974353][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1553.127455][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1553.147625][   T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1553.171593][   T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1553.254567][   T10] usb 6-1: USB disconnect, device number 26
[ 1553.454753][T27803] fido_id[27803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1554.455571][T26052] usb 9-1: USB disconnect, device number 8
[ 1554.497662][T27559] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1554.597564][T27559] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1554.617499][   T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1554.637655][T27559] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1554.701755][   T12] hsr_slave_0: left promiscuous mode
[ 1554.708067][   T12] hsr_slave_1: left promiscuous mode
[ 1554.715424][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1554.725324][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1554.732894][ T5828] Bluetooth: hci4: command tx timeout
[ 1554.742181][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1554.749682][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1554.769653][   T12] veth1_macvtap: left promiscuous mode
[ 1554.785709][   T12] veth0_macvtap: left promiscuous mode
[ 1554.796232][   T12] veth1_vlan: left promiscuous mode
[ 1554.801736][   T12] veth0_vlan: left promiscuous mode
[ 1554.812281][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 1554.826593][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1554.846105][   T10] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1554.860033][T27829] netlink: 'syz.1.5786': attribute type 1 has an invalid length.
[ 1554.884101][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1554.902548][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1554.913566][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1554.928164][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1554.940165][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1554.951850][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1554.967715][   T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1554.987199][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.003282][   T10] usb 6-1: Product: syz
[ 1555.007546][   T10] usb 6-1: Manufacturer: syz
[ 1555.012662][   T10] usb 6-1: SerialNumber: syz
[ 1555.023178][   T10] usb 6-1: config 0 descriptor??
[ 1555.029406][T27806] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1555.044451][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1555.161966][   T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1555.269929][T13140] udevd[13140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1555.369166][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1555.444594][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1555.968767][T26052] usb 6-1: USB disconnect, device number 27
[ 1556.477710][T27559] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1556.811226][ T5828] Bluetooth: hci4: command tx timeout
[ 1557.120143][T27850] lo speed is unknown, defaulting to 1000
[ 1557.259105][T27786] chnl_net:caif_netlink_parms(): no params data found
[ 1558.400305][T27559] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1558.434224][T27786] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1558.457068][T27786] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1558.465953][T27786] bridge_slave_0: entered allmulticast mode
[ 1558.479894][T27786] bridge_slave_0: entered promiscuous mode
[ 1558.555843][T27786] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1558.571069][T27786] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1558.586191][T27786] bridge_slave_1: entered allmulticast mode
[ 1558.602013][T27786] bridge_slave_1: entered promiscuous mode
[ 1558.729323][T27786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1558.744722][T27786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1558.825754][T27886] syzkaller0: entered promiscuous mode
[ 1558.843587][T27886] syzkaller0: entered allmulticast mode
[ 1558.893791][ T5828] Bluetooth: hci4: command tx timeout
[ 1558.942901][T27559] 8021q: adding VLAN 0 to HW filter on device team0
[ 1562.509148][T27786] team0: Port device team_slave_0 added
[ 1562.526081][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1562.533277][ T8166] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1562.595382][T27786] team0: Port device team_slave_1 added
[ 1562.673842][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1562.681018][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1562.771984][T27934] loop8: detected capacity change from 0 to 1024
[ 1562.860910][T27786] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1562.869641][T27786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1562.896674][T27786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1562.909907][T27786] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1562.940163][T27786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1562.975314][   T29] kernel write not supported for file bpf-prog (pid: 29 comm: kworker/1:1)
[ 1562.987326][T27934] hfsplus: b-tree write err: -5, ino 2
[ 1563.035551][T27786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1563.075839][T25484] hfsplus: bad catalog entry type
[ 1563.410191][T27786] hsr_slave_0: entered promiscuous mode
[ 1563.422247][T27786] hsr_slave_1: entered promiscuous mode
[ 1563.429532][T27786] debugfs: 'hsr0' already exists in 'hsr'
[ 1563.439116][T27786] Cannot create hsr debugfs directory
[ 1563.735999][   T13] hfsplus: b-tree write err: -5, ino 25
[ 1563.783009][   T13] hfsplus: b-tree write err: -5, ino 4
[ 1563.788594][   T13] hfsplus: b-tree write err: -5, ino 2
[ 1564.000060][T13081] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1564.130951][   T13] hfsplus: b-tree write err: -5, ino 26
[ 1564.756189][T27786] netdevsim netdevsim3 eth28 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.043043][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1565.112617][T13081] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.231026][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 1565.254898][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1565.269761][   T10] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1565.283971][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1565.289966][T27786] netdevsim netdevsim3 eth27 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.311263][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1565.340918][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1565.356587][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1565.391665][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1565.403973][T27972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5821'.
[ 1565.420985][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1565.457258][   T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1565.470576][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5821'.
[ 1565.479838][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.497058][T27972] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1565.509473][   T10] usb 6-1: Product: syz
[ 1565.512634][T13081] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.514357][   T10] usb 6-1: Manufacturer: syz
[ 1565.544892][   T10] usb 6-1: SerialNumber: syz
[ 1565.551801][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1565.562834][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1565.572543][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1565.581579][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1565.589185][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1565.603347][   T10] usb 6-1: config 0 descriptor??
[ 1565.609383][T27955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1565.622085][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1565.688321][T27786] netdevsim netdevsim3 eth26 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.773879][   T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1565.871607][T13081] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.903483][T13140] udevd[13140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1566.377638][T27974] lo speed is unknown, defaulting to 1000
[ 1566.521754][   T29] usb 6-1: USB disconnect, device number 28
[ 1566.540278][T27990] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1566.961019][T27786] netdevsim netdevsim3 eth25 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1567.691578][ T5829] Bluetooth: hci3: command tx timeout
[ 1567.981400][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880342ab400: rx timeout, send abort
[ 1568.481582][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888055d07000: rx timeout, send abort
[ 1568.489936][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880342ab400: abort rx timeout. Force session deactivation
[ 1568.989921][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888055d07000: abort rx timeout. Force session deactivation
[ 1569.366257][T27974] chnl_net:caif_netlink_parms(): no params data found
[ 1569.774435][ T5829] Bluetooth: hci3: command tx timeout
[ 1569.844936][T27974] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1569.885165][T27974] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1569.932609][T27974] bridge_slave_0: entered allmulticast mode
[ 1569.976810][T27974] bridge_slave_0: entered promiscuous mode
[ 1570.010903][T27974] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1570.028327][T27974] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1570.057417][T27974] bridge_slave_1: entered allmulticast mode
[ 1571.097894][T27974] bridge_slave_1: entered promiscuous mode
[ 1571.730470][T27974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1571.742821][   T12] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[ 1571.761716][   T12] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[ 1571.852595][ T5829] Bluetooth: hci3: command tx timeout
[ 1571.879822][T27974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1571.962166][   T12] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[ 1572.096732][T27559] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1572.134440][T13081] bridge_slave_1: left allmulticast mode
[ 1572.140126][T13081] bridge_slave_1: left promiscuous mode
[ 1572.162286][T13081] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1572.899170][T13081] bridge_slave_0: left allmulticast mode
[ 1572.909239][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5848'.
[ 1572.918310][T13081] bridge_slave_0: left promiscuous mode
[ 1572.946278][T13081] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1572.963527][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5848'.
[ 1573.482302][T28086] overlayfs: failed to clone upperpath
[ 1573.688991][T28094] overlayfs: failed to clone upperpath
[ 1573.860497][T13081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1573.871960][T13081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1573.882156][T13081] bond0 (unregistering): Released all slaves
[ 1573.893816][T13081] bond1 (unregistering): Released all slaves
[ 1573.910396][T13081] bond2 (unregistering): Released all slaves
[ 1573.928423][T13081] bond3 (unregistering): Released all slaves
[ 1573.934931][ T5829] Bluetooth: hci3: command tx timeout
[ 1573.956727][   T12] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[ 1573.968037][T27974] team0: Port device team_slave_0 added
[ 1574.025665][T28071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1574.096567][T27974] team0: Port device team_slave_1 added
[ 1574.140916][T13081] tipc: Left network mode
[ 1575.370665][T27974] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1575.420893][T27974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1575.486876][T27974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1575.543315][T27974] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1575.558069][T27974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1575.621139][T27974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1576.639192][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5863'.
[ 1576.648297][T28140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5863'.
[ 1577.423620][T27974] hsr_slave_0: entered promiscuous mode
[ 1577.433208][T27974] hsr_slave_1: entered promiscuous mode
[ 1577.439756][T27974] debugfs: 'hsr0' already exists in 'hsr'
[ 1577.453911][T27974] Cannot create hsr debugfs directory
[ 1577.459759][T27786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1577.486864][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5866'.
[ 1577.497478][T27786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1577.511201][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5866'.
[ 1577.554485][T28149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1577.603769][T27786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1577.665636][T27786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1577.849247][T13081] hsr_slave_0: left promiscuous mode
[ 1577.856968][T13081] hsr_slave_1: left promiscuous mode
[ 1577.873596][T13081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1577.883865][T13081] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1577.973777][T13081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1577.984829][T13081] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1578.066415][T13081] veth1_macvtap: left promiscuous mode
[ 1578.075508][T13081] veth0_macvtap: left promiscuous mode
[ 1578.104876][T13081] veth1_vlan: left promiscuous mode
[ 1578.123813][T13081] veth0_vlan: left promiscuous mode
[ 1580.085459][T13081] team0 (unregistering): Port device team_slave_1 removed
[ 1580.108687][T13081] team0 (unregistering): Port device team_slave_0 removed
[ 1580.338726][T28199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1580.543571][T27559] veth0_vlan: entered promiscuous mode
[ 1580.639582][T27974] netdevsim netdevsim0 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1580.861754][T27974] netdevsim netdevsim0 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1580.907711][T27559] veth1_vlan: entered promiscuous mode
[ 1581.079011][T27974] netdevsim netdevsim0 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.139875][T27559] veth0_macvtap: entered promiscuous mode
[ 1581.172900][T27786] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1581.204964][T27786] 8021q: adding VLAN 0 to HW filter on device team0
[ 1581.243727][T27559] veth1_macvtap: entered promiscuous mode
[ 1581.301921][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1581.309110][ T8166] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1581.373697][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1581.381001][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1581.991844][T27974] netdevsim netdevsim0 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.066922][   T30] audit: type=1326 audit(1771657202.555:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28242 comm="syz.4.5884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c6bf9c629 code=0x0
[ 1582.224903][T27559] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1582.328572][T27559] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1582.363101][T28261] tipc: Started in network mode
[ 1582.385106][T28261] tipc: Node identity 5227016c6408, cluster identity 4711
[ 1582.411080][T28261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1582.667969][T28270] syzkaller0: entered promiscuous mode
[ 1582.684949][T28270] syzkaller0: entered allmulticast mode
[ 1582.708424][T28270] tipc: Resetting bearer <eth:syzkaller0>
[ 1582.806892][ T8166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.823330][ T8166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1583.008650][T28259] tipc: Resetting bearer <eth:syzkaller0>
[ 1586.548731][T28259] tipc: Disabling bearer <eth:syzkaller0>
[ 1586.577657][ T8166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.587023][ T8166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.596780][ T2145] tipc: Node number set to 909050220
[ 1586.897886][T27974] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1586.937526][T27974] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1586.969542][T27974] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1587.003577][T27974] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1587.068946][T27786] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1587.102062][ T2145] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1587.181257][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1587.404900][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1588.021033][T13717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1588.028883][T13717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1588.133830][T27786] veth0_vlan: entered promiscuous mode
[ 1588.163283][ T2145] usb 6-1: Using ep0 maxpacket: 16
[ 1588.172623][ T2145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1588.191661][ T2145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1588.202526][ T2145] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1588.215937][ T2145] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1588.230874][ T2145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.261929][ T2145] usb 6-1: config 0 descriptor??
[ 1588.306166][T27786] veth1_vlan: entered promiscuous mode
[ 1588.493971][T28360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5705'.
[ 1588.503620][T28360] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5705'.
[ 1588.519613][T27786] veth0_macvtap: entered promiscuous mode
[ 1588.789646][ T2145] hid_parser_main: 1 callbacks suppressed
[ 1588.789673][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.154584][T27974] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1589.265657][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.525114][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.542618][T27786] veth1_macvtap: entered promiscuous mode
[ 1589.581442][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.625724][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.687773][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.747760][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.776861][T27786] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1589.803420][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.859340][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.869984][T27786] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1589.908367][ T2145] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1589.970514][T27974] 8021q: adding VLAN 0 to HW filter on device team0
[ 1589.989910][ T2145] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 1590.082675][ T2145] microsoft 0003:045E:07DA.0008: no inputs found
[ 1590.136444][ T2145] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[ 1590.210704][T28387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1590.231718][ T2145] usb 6-1: USB disconnect, device number 29
[ 1590.291182][T28389] syzkaller0: entered promiscuous mode
[ 1590.324871][T28389] syzkaller0: entered allmulticast mode
[ 1590.478792][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1590.486016][ T7386] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1590.491388][T28388] fido_id[28388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1590.499149][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1590.514702][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1590.658509][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.721533][T28399] tipc: Resetting bearer <eth:syzkaller0>
[ 1590.751866][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.760695][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.812407][T28384] tipc: Resetting bearer <eth:syzkaller0>
[ 1590.880723][T28384] tipc: Disabling bearer <eth:syzkaller0>
[ 1590.958680][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1591.094988][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1591.154244][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1591.258629][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1591.272249][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1592.693413][T28429] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56
[ 1592.897068][T28431] fuse: Bad value for 'fd'
[ 1592.922261][T26052] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1593.376084][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5913'.
[ 1593.385806][T26052] usb 7-1: config 127 has an invalid interface number: 248 but max is 0
[ 1593.385842][T26052] usb 7-1: config 127 has no interface number 0
[ 1593.385889][T26052] usb 7-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 5.dc
[ 1593.385918][T26052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1593.395675][T26052] usb-storage 7-1:127.248: USB Mass Storage device detected
[ 1593.417755][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5913'.
[ 1593.460326][T27974] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1593.483359][T26052] usb-storage 7-1:127.248: Quirks match for vid 054c pid 0010: 1
[ 1593.696478][T26052] usb 7-1: USB disconnect, device number 40
[ 1593.730199][T27974] veth0_vlan: entered promiscuous mode
[ 1593.756510][T27974] veth1_vlan: entered promiscuous mode
[ 1593.816075][T27974] veth0_macvtap: entered promiscuous mode
[ 1593.829106][T27974] veth1_macvtap: entered promiscuous mode
[ 1593.880484][T27974] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1593.926423][T27974] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1593.959997][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1593.986657][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1594.004594][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1594.025968][   T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1594.164857][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5919'.
[ 1594.192586][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1594.273177][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1594.548499][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1594.580642][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1594.752430][T26052] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1595.011152][T26052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1595.330416][   T29] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1595.339942][T26052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1595.351396][T26052] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1595.365410][T26052] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1595.392512][T26052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.442266][T26052] usb 6-1: config 0 descriptor??
[ 1595.585159][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1595.996967][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1596.045425][   T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb
[ 1596.315378][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.324452][   T29] usb 7-1: Product: syz
[ 1596.328741][   T29] usb 7-1: Manufacturer: syz
[ 1596.336204][   T29] usb 7-1: SerialNumber: syz
[ 1596.351767][   T29] usb 7-1: config 0 descriptor??
[ 1596.361239][   T29] keyspan 7-1:0.0: Keyspan - (without firmware) converter detected
[ 1597.008796][T26052] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1597.028937][T26052] usb 6-1: USB disconnect, device number 30
[ 1597.340549][T28503] fido_id[28503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1597.375166][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1597.384871][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1597.395119][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1597.413180][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1597.422227][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1597.638010][T28504] lo speed is unknown, defaulting to 1000
[ 1597.733151][T13174] usb 7-1: USB disconnect, device number 41
[ 1597.748337][T13174] keyspan 7-1:0.0: device disconnected
[ 1597.935450][T28518] syzkaller0: entered promiscuous mode
[ 1597.961298][T28518] syzkaller0: entered allmulticast mode
[ 1599.372858][T28547] overlayfs: failed to resolve './file0': -2
[ 1599.591049][ T5829] Bluetooth: hci1: command tx timeout
[ 1600.914276][T28504] chnl_net:caif_netlink_parms(): no params data found
[ 1601.662710][ T5829] Bluetooth: hci1: command tx timeout
[ 1602.054680][T28570] input: syz0 as /devices/virtual/input/input30
[ 1603.093392][T28504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1603.121023][T28504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1603.141810][T28504] bridge_slave_0: entered allmulticast mode
[ 1603.159531][T28504] bridge_slave_0: entered promiscuous mode
[ 1603.189645][T28504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1603.215628][T28504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1603.233609][T28504] bridge_slave_1: entered allmulticast mode
[ 1603.284039][T28504] bridge_slave_1: entered promiscuous mode
[ 1603.663949][T28504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1603.690896][ T5829] Bluetooth: hci1: command tx timeout
[ 1603.795816][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5954'.
[ 1603.814532][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5954'.
[ 1603.883404][T28504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1604.997205][T28504] team0: Port device team_slave_0 added
[ 1605.096558][T28504] team0: Port device team_slave_1 added
[ 1605.594490][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805332e800: rx timeout, send abort
[ 1606.094705][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880546edc00: rx timeout, send abort
[ 1606.103174][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805332e800: abort rx timeout. Force session deactivation
[ 1606.190644][ T5829] Bluetooth: hci1: command tx timeout
[ 1606.603097][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880546edc00: abort rx timeout. Force session deactivation
[ 1606.657399][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1606.704712][T28624] syzkaller0: entered promiscuous mode
[ 1606.757264][T28624] syzkaller0: entered allmulticast mode
[ 1608.182603][T13497] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1608.413064][T13497] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1608.423961][T13497] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1608.481614][T13497] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1608.501637][T13497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1608.521055][T13497] usb 1-1: SerialNumber: syz
[ 1608.833181][T13497] usb 1-1: 0:2 : does not exist
[ 1608.838172][T13497] usb 1-1: unit 5: unexpected type 0x03
[ 1609.589939][T13497] usb 1-1: USB disconnect, device number 11
[ 1610.494880][T28690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5970'.
[ 1610.515113][T28690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5970'.
[ 1613.858338][ T5828] Bluetooth: hci0: command 0x0406 tx timeout
[ 1614.555355][T28727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'.
[ 1614.565576][T28727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'.
[ 1616.949301][T28504] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1616.956657][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1616.987719][T28504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1617.000407][T28504] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1617.007508][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1617.034249][T28504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1617.107691][T28726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1617.252806][   T30] audit: type=1326 audit(1771657238.425:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28738 comm="syz.3.5984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47f079c629 code=0x0
[ 1617.446892][T28504] hsr_slave_0: entered promiscuous mode
[ 1618.072926][T28504] hsr_slave_1: entered promiscuous mode
[ 1618.079921][T28504] debugfs: 'hsr0' already exists in 'hsr'
[ 1618.087402][T28504] Cannot create hsr debugfs directory
[ 1618.374461][T28755] lo speed is unknown, defaulting to 1000
[ 1620.620195][T28504] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1620.868204][T28793] syzkaller0: entered promiscuous mode
[ 1620.881962][T28793] syzkaller0: entered allmulticast mode
[ 1620.934583][T28809] netlink: 'syz.3.5998': attribute type 13 has an invalid length.
[ 1624.448039][T28504] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1624.815416][T28836] sctp: [Deprecated]: syz.6.6004 (pid 28836) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1624.815416][T28836] Use struct sctp_sack_info instead
[ 1625.671138][T28832] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6003'.
[ 1625.892636][T28504] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1625.939165][T28854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6009'.
[ 1625.996119][T28504] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1626.030472][T28860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6009'.
[ 1626.063111][T28852] bridge0: port 3(syz_tun) entered blocking state
[ 1626.079826][T28852] bridge0: port 3(syz_tun) entered disabled state
[ 1626.101207][T28852] syz_tun: entered allmulticast mode
[ 1626.108220][T28852] syz_tun: entered promiscuous mode
[ 1626.114164][T28862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6009'.
[ 1626.131664][T28852] bridge0: port 3(syz_tun) entered blocking state
[ 1626.138684][T28852] bridge0: port 3(syz_tun) entered forwarding state
[ 1626.147360][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6010'.
[ 1626.158115][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6010'.
[ 1626.206882][T28859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1627.861102][T28882] syzkaller0: entered promiscuous mode
[ 1627.866636][T28882] syzkaller0: entered allmulticast mode
[ 1627.887073][T28504] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1629.147580][T28905] binder: 28904:28905 ioctl c0306201 0 returned -14
[ 1629.300998][T28504] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1629.349075][T28504] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1629.417792][T28504] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1629.433897][T28909] binder: 28904:28909 ioctl c0306201 2000000001c0 returned -14
[ 1629.459359][T28910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6025'.
[ 1629.542268][T28922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6025'.
[ 1629.596640][T28926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6025'.
[ 1629.639637][T28910] bond1: entered promiscuous mode
[ 1629.652069][T28910] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1630.154542][T28504] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1630.218343][T28504] 8021q: adding VLAN 0 to HW filter on device team0
[ 1630.252979][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1630.260212][ T8166] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1630.352131][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1630.359306][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1630.534510][   T30] audit: type=1326 audit(1771657251.695:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28950 comm="syz.0.6033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d4c19c629 code=0x0
[ 1630.579997][T13497] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1630.584954][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6033'.
[ 1630.685732][T28956] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1630.884278][T13497] usb 7-1: Using ep0 maxpacket: 32
[ 1631.155437][T13497] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1631.183104][T13497] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1631.237704][T13497] usb 7-1: config 0 descriptor??
[ 1631.482736][T13497] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1631.523450][T13497] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1631.547674][T13497] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1632.130767][T28504] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1634.853704][T28990] misc userio: Invalid payload size
[ 1634.908059][T28504] veth0_vlan: entered promiscuous mode
[ 1634.969342][T28504] veth1_vlan: entered promiscuous mode
[ 1635.129278][T28504] veth0_macvtap: entered promiscuous mode
[ 1635.212962][T28504] veth1_macvtap: entered promiscuous mode
[ 1635.296927][T28504] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1635.344014][T28504] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1635.413892][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.425505][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.467642][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.515318][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.970469][T13083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1636.612500][T13083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1636.755991][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1636.766572][T29012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6042'.
[ 1636.807171][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1636.808950][T29012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6042'.
[ 1637.101055][T29012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6042'.
[ 1640.785643][T29052] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1640.811620][T29054] misc userio: Invalid payload size
[ 1643.431111][T29083] netlink: 'syz.1.6061': attribute type 10 has an invalid length.
[ 1643.469998][T29083] veth1_vlan: entered allmulticast mode
[ 1643.498195][T29083] veth1_vlan: left promiscuous mode
[ 1643.550682][T29083] team0: Device veth1_vlan failed to register rx_handler
[ 1644.617506][T29091] netdevsim netdevsim6: Direct firmware load for /
[ 1644.617506][T29091]  failed with error -2
[ 1644.697567][T29091] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 1644.697567][T29091] 
[ 1649.298485][T29158] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1654.156779][ T9179] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1654.371856][ T9179] usb 4-1: Using ep0 maxpacket: 8
[ 1654.410921][ T9179] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1654.453955][ T9179] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1654.509040][ T9179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1654.555723][ T9179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1654.598554][ T9179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1654.649642][ T9179] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1654.699295][ T9179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1654.741174][ T9179] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1654.821879][ T5828] Bluetooth: hci5: command 0x0406 tx timeout
[ 1654.828378][ T9179] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1654.851203][ T9179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.869982][ T9179] usb 4-1: Product: syz
[ 1654.879584][ T9179] usb 4-1: Manufacturer: syz
[ 1654.889119][ T9179] usb 4-1: SerialNumber: syz
[ 1654.955587][ T9179] usb 4-1: config 0 descriptor??
[ 1654.994955][T29247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1655.057727][ T9179] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1655.630018][T29276] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1655.729213][ T9179] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1655.929177][ T9179] usb 4-1: USB disconnect, device number 6
[ 1656.146147][T29282] udevd[29282]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1656.261052][   T30] audit: type=1326 audit(1771657277.435:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.5.6113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb06dd9c629 code=0x0
[ 1656.271615][T29289] syzkaller0: entered promiscuous mode
[ 1656.329468][T29289] syzkaller0: entered allmulticast mode
[ 1657.312839][T29323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6122'.
[ 1657.571752][T26052] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[ 1657.918940][T26052] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[ 1657.943742][T26052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1657.977960][T26052] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 1658.250139][T26052] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[ 1658.310619][T26052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.374665][T26052] usb 5-1: config 0 descriptor??
[ 1658.442130][T29335] binder_alloc: 29334: binder_alloc_buf, no vma
[ 1658.495119][T26052] usbhid 5-1:0.0: can't add hid device: -22
[ 1658.576505][T26052] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[ 1659.113138][T26052] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1659.278871][T26052] usb 6-1: Using ep0 maxpacket: 8
[ 1659.293428][T26052] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1659.327332][T26052] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1659.417194][T26052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1659.465808][T26052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1659.482717][T29352] syzkaller0: entered promiscuous mode
[ 1659.509270][T29352] syzkaller0: entered allmulticast mode
[ 1659.516292][T26052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1659.560880][T26052] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1659.630568][T26052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1659.665150][T26052] usb 6-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1659.749980][T26052] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1659.759812][T26052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1659.780730][T26052] usb 6-1: Product: syz
[ 1659.797844][T26052] usb 6-1: Manufacturer: syz
[ 1659.815892][T26052] usb 6-1: SerialNumber: syz
[ 1659.865492][T26052] usb 6-1: config 0 descriptor??
[ 1659.902920][T29343] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1659.940616][T29365] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1659.959919][T26052] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1659.982063][T29365] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1660.369393][T29371] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1660.660543][T29370] syzkaller0: entered promiscuous mode
[ 1660.709501][T29370] syzkaller0: entered allmulticast mode
[ 1660.752946][T29370] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[ 1660.836480][T26052] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1660.889160][T26052] usb 6-1: USB disconnect, device number 31
[ 1661.029140][T29279] udevd[29279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1661.511553][T13174] usb 5-1: USB disconnect, device number 29
[ 1661.800525][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'.
[ 1661.841909][T29401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1661.881966][T29405] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1661.932852][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'.
[ 1662.233230][T29404] syzkaller0: entered promiscuous mode
[ 1662.238739][T29404] syzkaller0: entered allmulticast mode
[ 1662.732013][ T5830] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1663.033578][ T5830] usb 6-1: Using ep0 maxpacket: 8
[ 1663.063544][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1663.071938][T29441] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2
[ 1663.086191][ T5830] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1663.169008][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1663.200987][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1663.210700][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1663.286122][ T5830] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1663.377125][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1663.458369][ T5830] usb 6-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1663.545570][ T5830] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1663.589993][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.617508][ T5830] usb 6-1: Product: syz
[ 1663.654311][ T5830] usb 6-1: Manufacturer: syz
[ 1663.658952][ T5830] usb 6-1: SerialNumber: syz
[ 1663.692007][ T5830] usb 6-1: config 0 descriptor??
[ 1663.707937][T29427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1663.805752][ T5830] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1664.188179][T29427] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1664.219782][ T5830] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1664.308927][ T5830] usb 6-1: USB disconnect, device number 32
[ 1664.466807][T29279] udevd[29279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1667.474468][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6164'.
[ 1667.504269][T29480] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1667.747779][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6167'.
[ 1667.775375][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6167'.
[ 1668.112291][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.550584][T29512] overlayfs: missing 'lowerdir'
[ 1669.161779][T29524] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1669.488395][T29532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1669.558879][T29520] overlayfs: missing 'lowerdir'
[ 1670.231057][T29523] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1670.237577][T29523] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1671.089050][T29536] syzkaller0: entered promiscuous mode
[ 1671.101024][T29536] syzkaller0: entered allmulticast mode
[ 1671.916618][   T30] audit: type=1326 audit(1771657293.095:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29573 comm="syz.1.6185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f684d39c629 code=0x0
[ 1672.238639][T29580] binder: 29579:29580 ioctl c0306201 200000000240 returned -11
[ 1673.800016][T29593] overlayfs: missing 'lowerdir'
[ 1674.756358][T29600] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1675.304715][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[ 1678.655617][T29523] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1678.683035][T29523] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1678.752174][T29523] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1678.772650][T29523] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1678.818102][T29523] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1678.844507][T29523] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1679.578318][T29644] overlayfs: missing 'lowerdir'
[ 1680.498870][   T30] audit: type=1326 audit(1771657301.655:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29637 comm="syz.1.6203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f684d39c629 code=0x0
[ 1681.707003][T29523] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1681.760746][T29523] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1681.992500][T29670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6209'.
[ 1682.103068][T29670] vlan2: entered promiscuous mode
[ 1682.128552][T29670] veth0: entered promiscuous mode
[ 1682.271406][T29677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1682.709099][T29677] syzkaller0: entered promiscuous mode
[ 1682.745180][T29677] syzkaller0: entered allmulticast mode
[ 1682.826679][T29677] tipc: Resetting bearer <eth:syzkaller0>
[ 1683.735741][T29676] tipc: Resetting bearer <eth:syzkaller0>
[ 1684.057161][T29724] overlayfs: missing 'workdir'
[ 1684.931644][   T30] audit: type=1326 audit(1771657306.115:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29732 comm="syz.4.6222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff716d9c629 code=0x0
[ 1685.191365][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888077c88000: rx timeout, send abort
[ 1685.700650][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888077c88400: rx timeout, send abort
[ 1685.709017][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888077c88000: abort rx timeout. Force session deactivation
[ 1686.209031][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888077c88400: abort rx timeout. Force session deactivation
[ 1687.411672][T29779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6227'.
[ 1689.638749][T29796] overlayfs: missing 'workdir'
[ 1689.873014][T29676] tipc: Disabling bearer <eth:syzkaller0>
[ 1690.274057][T29705] netdevsim netdevsim6: Direct firmware load for /
[ 1690.274057][T29705]  failed with error -2
[ 1690.285016][T29689] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[ 1690.305266][T29705] netdevsim netdevsim6: Falling back to sysfs fallback for: /
[ 1690.305266][T29705] 
[ 1690.315480][T29695] syzkaller0: entered promiscuous mode
[ 1690.321067][T29695] syzkaller0: entered allmulticast mode
[ 1690.547637][T29800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6234'.
[ 1690.561334][T29800] 8021q: VLANs not supported on nlmon0
[ 1692.200967][   T30] audit: type=1326 audit(1771657313.365:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29808 comm="syz.5.6236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb06dd9c629 code=0x0
[ 1692.545836][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880abdb5000: rx timeout, send abort
[ 1693.046001][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880abdb4c00: rx timeout, send abort
[ 1693.054393][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880abdb5000: abort rx timeout. Force session deactivation
[ 1693.554390][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880abdb4c00: abort rx timeout. Force session deactivation
[ 1693.791156][T13497] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1693.824988][T29840] misc userio: Invalid payload size
[ 1693.862582][T13497] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1693.889844][T13497] usb 7-1: USB disconnect, device number 42
[ 1693.926287][T29844] misc userio: The device must be registered before sending interrupts
[ 1694.988686][T29849] syzkaller0: entered promiscuous mode
[ 1695.011083][T29849] syzkaller0: entered allmulticast mode
[ 1695.931165][T29857] tipc: Started in network mode
[ 1695.936298][T29857] tipc: Node identity f26176a8cbd9, cluster identity 4711
[ 1695.946044][T29857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1696.137618][T29859] syzkaller0: entered promiscuous mode
[ 1696.310523][T29859] syzkaller0: entered allmulticast mode
[ 1696.342393][T29859] tipc: Resetting bearer <eth:syzkaller0>
[ 1696.393614][T29856] tipc: Resetting bearer <eth:syzkaller0>
[ 1697.004873][T29881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6253'.
[ 1698.365505][T29901] binder: 29900:29901 ioctl c0306201 200000000240 returned -11
[ 1701.949063][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6265'.
[ 1704.056972][T29856] tipc: Disabling bearer <eth:syzkaller0>
[ 1704.066575][   T10] tipc: Node number set to 968390312
[ 1704.081317][T29881] vlan2: entered promiscuous mode
[ 1704.086377][T29881] veth0: entered promiscuous mode
[ 1704.199721][T29944] syzkaller0: entered promiscuous mode
[ 1704.209946][T29986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6271'.
[ 1704.213940][T29944] syzkaller0: entered allmulticast mode
[ 1704.231252][T29986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6271'.
[ 1704.309424][T29969] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1704.429414][T29994] binder: 29993:29994 ioctl c0306201 200000000240 returned -11
[ 1704.799374][T30004] fuse: Bad value for 'rootmode'
[ 1705.898961][T30019] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2
[ 1707.016783][T30023] slcan: can't register candev
[ 1708.761066][T13497] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1709.557500][T13497] usb 1-1: Using ep0 maxpacket: 8
[ 1709.565998][T13497] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1709.575662][T13497] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1709.604328][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1709.622201][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1709.637450][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1709.653390][T13497] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1709.663842][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1709.674047][T13497] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1709.695373][T13497] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1709.721195][T13497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1709.748975][T13497] usb 1-1: Product: syz
[ 1709.753520][T13497] usb 1-1: Manufacturer: syz
[ 1709.758113][T13497] usb 1-1: SerialNumber: syz
[ 1709.788004][T13497] usb 1-1: config 0 descriptor??
[ 1709.803108][T30034] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1709.826648][T13497] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1709.827166][T30043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6285'.
[ 1709.843774][T30043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6285'.
[ 1709.978764][T13497] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1710.608212][T30049] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1711.061381][T30053] udevd[30053]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1712.021190][ T9179] usb 1-1: USB disconnect, device number 12
[ 1712.234193][T30077] binder: 30076:30077 ioctl c0306201 200000000240 returned -11
[ 1713.385350][T30030] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1713.809940][T30093] binder: 30091:30093 ioctl c0306201 0 returned -14
[ 1713.835226][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6298'.
[ 1713.875121][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6298'.
[ 1714.778818][T30109] binder: 30091:30109 ioctl c0306201 2000000004c0 returned -14
[ 1714.791976][T30109] binder: 30091:30109 ioctl c0306201 2000000001c0 returned -14
[ 1714.858807][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6297'.
[ 1714.880188][T30105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1714.902384][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6297'.
[ 1715.031706][T30117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6302'.
[ 1715.083633][T30117] bridge0: port 3(syz_tun) entered blocking state
[ 1715.097010][T30117] bridge0: port 3(syz_tun) entered disabled state
[ 1715.114086][T30117] syz_tun: entered allmulticast mode
[ 1715.150620][T30117] syz_tun: entered promiscuous mode
[ 1715.170790][T30117] bridge0: port 3(syz_tun) entered blocking state
[ 1715.177485][T30117] bridge0: port 3(syz_tun) entered forwarding state
[ 1715.407079][T30124] syzkaller0: entered promiscuous mode
[ 1715.455753][T30124] syzkaller0: entered allmulticast mode
[ 1715.727901][T30150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6308'.
[ 1715.791673][T30149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6308'.
[ 1715.801130][T30150] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1717.402703][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'.
[ 1717.436064][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'.
[ 1717.735284][T30176] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1720.697710][T30214] capability: warning: `syz.4.6324' uses 32-bit capabilities (legacy support in use)
[ 1721.670537][T30134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1721.856160][T30225] overlayfs: missing 'lowerdir'
[ 1721.866520][T30223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'.
[ 1721.883292][T30138] syzkaller0: entered promiscuous mode
[ 1721.943852][T30223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'.
[ 1722.027246][T30138] syzkaller0: entered allmulticast mode
[ 1722.045903][T30138] tipc: Resetting bearer <eth:syzkaller0>
[ 1722.563110][T30127] tipc: Resetting bearer <eth:syzkaller0>
[ 1723.184524][T30249] netlink: 'syz.5.6333': attribute type 6 has an invalid length.
[ 1723.192591][T30249] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6333'.
[ 1724.344530][T30263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6338'.
[ 1725.945577][ T2145] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1726.108234][ T2145] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1726.120058][ T2145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1726.131585][ T2145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1726.141934][ T2145] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1726.160790][ T2145] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1726.170107][ T2145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1726.192261][ T2145] usb 5-1: config 0 descriptor??
[ 1726.640999][ T2145] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1726.857985][T30127] tipc: Disabling bearer <eth:syzkaller0>
[ 1727.236217][T30290] syzkaller0: entered promiscuous mode
[ 1727.241809][T30290] syzkaller0: entered allmulticast mode
[ 1727.561238][T27790] usb 5-1: USB disconnect, device number 30
[ 1727.575640][T30308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1727.907187][T30301] syzkaller0: entered promiscuous mode
[ 1727.938945][T30301] syzkaller0: entered allmulticast mode
[ 1727.980593][T30301] tipc: Resetting bearer <eth:syzkaller0>
[ 1728.011890][ T5895] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1728.222976][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1728.279387][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1728.326561][ T5895] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1728.355970][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.408506][ T8166] tipc: Resetting bearer <eth:syzkaller0>
[ 1728.493452][T30299] tipc: Resetting bearer <eth:syzkaller0>
[ 1728.506894][ T5895] usb 7-1: config 0 descriptor??
[ 1729.240312][T30334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6355'.
[ 1729.264640][ T5895] hid_parser_main: 5 callbacks suppressed
[ 1729.264667][ T5895] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[ 1729.309545][ T5895] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[ 1729.338285][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.000B/input/input34
[ 1729.429955][ T5895] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0
[ 1729.488023][ T5895] usb 7-1: USB disconnect, device number 43
[ 1729.547854][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.649141][T30342] fido_id[30342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1730.421010][T30108] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1730.585868][T30108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1730.598410][T30108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1730.620595][T30108] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1730.640107][T30108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1730.665776][T30108] usb 7-1: config 0 descriptor??
[ 1731.105170][T30108] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1731.134757][T30108] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[ 1731.309763][T30108] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE
[ 1731.948815][T30299] tipc: Disabling bearer <eth:syzkaller0>
[ 1731.967114][T30334] 8021q: VLANs not supported on nlmon0
[ 1731.974811][T30108] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71
[ 1732.004228][T30108] usb 7-1: USB disconnect, device number 44
[ 1732.038725][T30341] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1734.144033][T30408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6371'.
[ 1734.340598][T30408] vlan2: entered promiscuous mode
[ 1734.410670][T30408] veth0: entered promiscuous mode
[ 1734.792574][T30420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1735.165743][T30420] syzkaller0: entered promiscuous mode
[ 1735.271127][T30420] syzkaller0: entered allmulticast mode
[ 1735.298294][T30420] tipc: Resetting bearer <eth:syzkaller0>
[ 1735.417771][T30419] tipc: Resetting bearer <eth:syzkaller0>
[ 1736.192112][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6374'.
[ 1737.232493][T30447] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2
[ 1738.367665][T30448] slcan: can't register candev
[ 1749.367312][T30586] binder: BINDER_SET_CONTEXT_MGR already set
[ 1749.381130][T30586] binder: 30585:30586 ioctl 4018620d 200000000040 returned -16
[ 1749.441148][T30586] binder: 30585:30586 ioctl c0306201 200000000240 returned -11
[ 1750.490731][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1750.505363][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1750.523572][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1750.534435][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1750.544829][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1750.590956][ T2145] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1750.598893][T25594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1750.616220][T25594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1750.626101][T25594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1750.635239][T25594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1750.681567][T25594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1750.764616][ T2145] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1750.777846][ T2145] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1750.789147][ T2145] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1750.802544][ T2145] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1750.845560][ T2145] usb 7-1: config 0 descriptor??
[ 1751.283544][ T2145] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[ 1751.302906][ T2145] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[ 1751.361380][ T2145] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.000D/input/input35
[ 1751.410055][ T2145] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0
[ 1751.595014][T27790] usb 7-1: USB disconnect, device number 45
[ 1752.293119][ T2145] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1752.471009][ T2145] usb 5-1: device descriptor read/64, error -71
[ 1752.712751][T30631] binder: BINDER_SET_CONTEXT_MGR already set
[ 1752.721349][T30631] binder: 30630:30631 ioctl 4018620d 200000000040 returned -16
[ 1752.743289][T30631] binder: 30630:30631 ioctl c0306201 200000000240 returned -11
[ 1752.751491][ T2145] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1752.776791][ T5829] Bluetooth: hci6: command tx timeout
[ 1752.891487][ T2145] usb 5-1: device descriptor read/64, error -71
[ 1753.015544][ T2145] usb usb5-port1: attempt power cycle
[ 1753.386248][ T2145] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1753.419953][ T2145] usb 5-1: device descriptor read/8, error -71
[ 1753.670976][ T2145] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1753.730872][ T2145] usb 5-1: device descriptor read/8, error -71
[ 1753.846320][ T2145] usb usb5-port1: unable to enumerate USB device
[ 1754.748996][T30419] tipc: Disabling bearer <eth:syzkaller0>
[ 1754.774589][T30547] tunl0: Caught tx_queue_len zero misconfig
[ 1754.817656][ T5829] Bluetooth: hci6: command tx timeout
[ 1754.870438][T30622] lo speed is unknown, defaulting to 1000
[ 1755.021610][T30603] lo speed is unknown, defaulting to 1000
[ 1756.890982][ T5829] Bluetooth: hci6: command tx timeout
[ 1757.728618][T30419] bridge0: port 3(syz_tun) entered disabled state
[ 1757.743571][ T5895] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1757.893609][T30419] syz_tun (unregistering): left allmulticast mode
[ 1757.924550][T30419] syz_tun (unregistering): left promiscuous mode
[ 1757.934743][T30419] bridge0: port 3(syz_tun) entered disabled state
[ 1757.965507][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1758.000935][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1758.010741][ T5895] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1758.036326][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1758.086050][ T5895] usb 7-1: config 0 descriptor??
[ 1758.515198][T30603] chnl_net:caif_netlink_parms(): no params data found
[ 1758.552241][ T5895] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0
[ 1758.641159][ T5895] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0
[ 1758.694947][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.000E/input/input36
[ 1758.772921][ T5895] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0
[ 1758.873269][T26052] usb 7-1: USB disconnect, device number 46
[ 1758.985140][ T5829] Bluetooth: hci6: command tx timeout
[ 1759.000415][T27131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1759.026876][T30685] fido_id[30685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1761.877160][T27131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1762.395424][T27131] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1762.497268][T30603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1762.731312][T30603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1762.748918][T30603] bridge_slave_0: entered allmulticast mode
[ 1762.821329][T30603] bridge_slave_0: entered promiscuous mode
[ 1763.193740][T30718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6456'.
[ 1763.203019][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6456'.
[ 1763.250016][T27131] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1763.392061][T30603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1763.407308][T30603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1763.517864][T30603] bridge_slave_1: entered allmulticast mode
[ 1763.576645][T30603] bridge_slave_1: entered promiscuous mode
[ 1763.897284][T30603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1763.910191][T30603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1764.262640][ T7386] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[ 1764.633459][T30603] team0: Port device team_slave_0 added
[ 1765.787177][   T49] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[ 1765.891213][   T49] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[ 1765.909426][T30603] team0: Port device team_slave_1 added
[ 1766.210258][   T91] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[ 1766.243689][T30603] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1766.280397][T30603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1766.486844][T30603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1766.543824][T30603] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1766.818268][T30603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1767.047808][T30603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1767.146891][T27131] bridge_slave_1: left allmulticast mode
[ 1767.160942][T27131] bridge_slave_1: left promiscuous mode
[ 1767.167184][T27131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.271146][T30765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6464'.
[ 1767.375030][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6464'.
[ 1767.412423][T30764] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1767.834657][T27131] bridge_slave_0: left allmulticast mode
[ 1767.853768][T27131] bridge_slave_0: left promiscuous mode
[ 1767.894542][T27131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1769.652219][T30778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6468'.
[ 1770.301311][   T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1770.513827][   T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1770.529437][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1770.572929][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1770.607265][   T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1770.628034][T27131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1770.644963][   T29] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1770.664335][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1770.692904][   T29] usb 1-1: config 0 descriptor??
[ 1770.716526][T27131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1770.953203][T27131] bond0 (unregistering): Released all slaves
[ 1771.010194][T27131] bond1 (unregistering): Released all slaves
[ 1771.168882][T30603] hsr_slave_0: entered promiscuous mode
[ 1771.178380][T30603] hsr_slave_1: entered promiscuous mode
[ 1771.193255][   T29] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1771.220195][T30603] debugfs: 'hsr0' already exists in 'hsr'
[ 1771.235803][T30603] Cannot create hsr debugfs directory
[ 1771.259880][T27131] tipc: Left network mode
[ 1771.867376][T27131] hsr_slave_0: left promiscuous mode
[ 1771.890243][T27131] hsr_slave_1: left promiscuous mode
[ 1771.917287][T27131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1771.935210][T27131] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1771.976559][T27131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1771.997889][T27131] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1772.053729][T27131] veth1_macvtap: left promiscuous mode
[ 1773.165122][T27131] veth0_macvtap: left promiscuous mode
[ 1773.207292][T27131] veth1_vlan: left promiscuous mode
[ 1773.223122][T27131] veth0_vlan: left promiscuous mode
[ 1773.301719][   T29] usb 1-1: reset high-speed USB device number 13 using dummy_hcd
[ 1774.193707][T30838] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1774.193707][T30838]    program syz.0.6480 not setting count and/or reply_len properly
[ 1774.212990][T13497] usb 1-1: USB disconnect, device number 13
[ 1774.868823][T27131] team0 (unregistering): Port device team_slave_1 removed
[ 1774.954724][T27131] team0 (unregistering): Port device team_slave_0 removed
[ 1777.870147][T30603] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1778.829754][T30866] tipc: Started in network mode
[ 1778.906800][T30866] tipc: Node identity 8e7a47d7b842, cluster identity 4711
[ 1778.986172][T30866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1779.314658][T30603] netdevsim netdevsim2 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1779.418078][T30865] tipc: Resetting bearer <eth:syzkaller0>
[ 1779.578962][T30603] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1779.685646][T30863] tipc: Disabling bearer <eth:syzkaller0>
[ 1780.350574][T30603] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1782.247159][T30603] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1782.325464][T30603] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1782.438316][T30603] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1782.473102][T30603] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1782.816410][T30603] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1782.887712][T30603] 8021q: adding VLAN 0 to HW filter on device team0
[ 1782.963277][T13083] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1782.970445][T13083] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1783.060731][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1783.067980][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1785.196329][T30978] tipc: Started in network mode
[ 1785.239228][T30978] tipc: Node identity 86e987d067b, cluster identity 4711
[ 1785.271605][T30978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1785.313864][T30981] syzkaller0: entered promiscuous mode
[ 1785.319381][T30981] syzkaller0: entered allmulticast mode
[ 1786.970999][ T5914] tipc: Node number set to 3780741072
[ 1787.130395][T30976] tipc: Resetting bearer <eth:syzkaller0>
[ 1787.392202][T30976] tipc: Disabling bearer <eth:syzkaller0>
[ 1787.587480][T30603] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1787.751203][T31010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1787.831926][T30603] veth0_vlan: entered promiscuous mode
[ 1787.895371][T30603] veth1_vlan: entered promiscuous mode
[ 1788.023235][T30603] veth0_macvtap: entered promiscuous mode
[ 1788.056614][T30603] veth1_macvtap: entered promiscuous mode
[ 1788.142678][T30603] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1788.165519][T30603] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1789.437621][T13083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.475736][T13083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.547336][T13083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.704528][T13083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.881041][T31042] syzkaller0: entered promiscuous mode
[ 1789.886553][T31042] syzkaller0: entered allmulticast mode
[ 1790.476915][T31004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1790.975423][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.037281][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1791.091778][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1791.421134][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1791.574686][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1796.289618][T31141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6542'.
[ 1798.025082][T31111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1798.661086][T31185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6551'.
[ 1798.835604][T31186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6552'.
[ 1798.844961][T31186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6552'.
[ 1799.039100][T31200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6556'.
[ 1799.672655][T13497] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1799.740183][T31218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6560'.
[ 1800.102054][T13497] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1800.158126][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[ 1800.233513][T13497] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[ 1800.354883][T13497] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1800.366628][T13497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1800.406780][T13497] usb 1-1: Product: syz
[ 1800.477128][T13497] usb 1-1: Manufacturer: syz
[ 1800.489506][T13497] usb 1-1: SerialNumber: syz
[ 1800.508158][T13497] usb 1-1: config 0 descriptor??
[ 1800.523210][T31208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1800.650062][T31225] tipc: Started in network mode
[ 1800.721352][T31225] tipc: Node identity 6a5f4b9e3645, cluster identity 4711
[ 1800.739041][T31225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1800.762679][T31228] syzkaller0: entered promiscuous mode
[ 1800.776527][T31228] syzkaller0: entered allmulticast mode
[ 1800.823478][T31225] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1800.855672][T31225] tipc: Resetting bearer <eth:syzkaller0>
[ 1800.868018][T31208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1800.885898][T31223] tipc: Resetting bearer <eth:syzkaller0>
[ 1801.013767][T31223] tipc: Disabling bearer <eth:syzkaller0>
[ 1801.167759][T31208] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow!
[ 1802.232589][T31242] overlayfs: failed to clone upperpath
[ 1803.908654][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805662f400: rx timeout, send abort
[ 1804.408831][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880ac7ef800: rx timeout, send abort
[ 1804.417422][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805662f400: abort rx timeout. Force session deactivation
[ 1804.770639][T31286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6580'.
[ 1804.917355][    C0] vxcan0: j1939_tp_rxtimer: 0xffff8880ac7ef800: abort rx timeout. Force session deactivation
[ 1805.198293][T13497] usb 1-1: USB disconnect, device number 14
[ 1805.821694][T13497] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1805.822819][T31308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1805.903221][T31311] syzkaller0: entered promiscuous mode
[ 1805.931486][T31311] syzkaller0: entered allmulticast mode
[ 1805.994571][T31308] tipc: Resetting bearer <eth:syzkaller0>
[ 1806.025282][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1806.047863][T31307] tipc: Resetting bearer <eth:syzkaller0>
[ 1806.064326][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1806.092989][T13497] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1806.124905][T13497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.151582][T13497] usb 3-1: config 0 descriptor??
[ 1806.215679][T31307] tipc: Disabling bearer <eth:syzkaller0>
[ 1806.552136][T31327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6593'.
[ 1806.601271][T13497] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[ 1806.611831][ T2145] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1806.643901][T13497] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[ 1806.790157][T13497] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE
[ 1806.811436][ T2145] usb 4-1: Using ep0 maxpacket: 32
[ 1806.829142][ T2145] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1806.838381][ T2145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.882567][ T2145] usb 4-1: config 0 descriptor??
[ 1806.936944][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888057899800: rx timeout, send abort
[ 1807.108046][ T2145] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1807.143194][ T2145] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1807.200984][T31303] ------------[ cut here ]------------
[ 1807.206896][T31303] usb 4-1: BOGUS control dir, pipe 80000780 doesn't match bRequestType c0
[ 1807.215784][T31303] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.2.6586/31303
[ 1807.226252][T31303] Modules linked in:
[ 1807.230484][T31303] CPU: 1 UID: 0 PID: 31303 Comm: syz.2.6586 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1807.241742][T31303] Tainted: [L]=SOFTLOCKUP
[ 1807.246088][T31303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1807.256287][T31303] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[ 1807.262205][T31303] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[ 1807.281925][T31303] RSP: 0018:ffffc900035e7948 EFLAGS: 00010246
[ 1807.288029][T31303] RAX: 0000000000000000 RBX: ffff888026803600 RCX: 0000000080000780
[ 1807.296744][T31303] RDX: ffff888089280620 RSI: ffffffff8c7ee6a0 RDI: ffffffff901eaf00
[ 1807.304926][T31303] RBP: 1ffff11008f63e8c R08: 00000000000000c0 R09: 0000000000000000
[ 1807.312959][T31303] R10: dffffc0000000000 R11: fffff520006bcf54 R12: ffff88805323d100
[ 1807.321026][T31303] R13: ffff888047b1f460 R14: 0000000080000780 R15: ffff888089280620
[ 1807.329029][T31303] FS:  00007f5afd2576c0(0000) GS:ffff888125566000(0000) knlGS:0000000000000000
[ 1807.338036][T31303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1807.344678][T31303] CR2: 000000110c36060d CR3: 000000006756c000 CR4: 0000000000350ef0
[ 1807.352722][T31303] Call Trace:
[ 1807.356016][T31303]  <TASK>
[ 1807.358963][T31303]  ? __init_swait_queue_head+0xa9/0x150
[ 1807.364625][T31303]  usb_start_wait_urb+0x12b/0x510
[ 1807.369699][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.376003][T31303]  ? rcu_is_watching+0x15/0xb0
[ 1807.380912][T31303]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1807.386605][T31303]  ? trace_kmalloc+0x2a/0x110
[ 1807.391390][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.397445][T31303]  usb_control_msg+0x232/0x3e0
[ 1807.402358][T31303]  dib0700_i2c_xfer+0xbb2/0xf80
[ 1807.407262][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.413023][T31303]  __i2c_transfer+0x79a/0x2020
[ 1807.417827][T31303]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1807.423753][T31303]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1807.429610][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.435333][T31303]  ? i2c_transfer+0xc8/0x2d0
[ 1807.439953][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805789a000: rx timeout, send abort
[ 1807.448357][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888057899800: abort rx timeout. Force session deactivation
[ 1807.459168][T31303]  i2c_transfer+0x1cc/0x2d0
[ 1807.463862][T31303]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1807.468849][T31303]  i2cdev_ioctl+0x6a5/0x880
[ 1807.473454][T31303]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1807.478515][T31303]  ? __fget_files+0x3a0/0x420
[ 1807.483291][T31303]  ? __fget_files+0x2a/0x420
[ 1807.487923][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.493636][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.499644][T31303]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1807.504771][T31303]  __se_sys_ioctl+0xfc/0x170
[ 1807.509399][T31303]  do_syscall_64+0x14d/0xf80
[ 1807.514090][T31303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1807.520193][T31303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1807.526179][T31303] RIP: 0033:0x7f5afc39c629
[ 1807.530621][T31303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1807.550716][T31303] RSP: 002b:00007f5afd257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1807.559238][T31303] RAX: ffffffffffffffda RBX: 00007f5afc615fa0 RCX: 00007f5afc39c629
[ 1807.567312][T31303] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004
[ 1807.575384][T31303] RBP: 00007f5afc432b39 R08: 0000000000000000 R09: 0000000000000000
[ 1807.583448][T31303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1807.591504][T31303] R13: 00007f5afc616038 R14: 00007f5afc615fa0 R15: 00007ffce62e3138
[ 1807.599870][T31303]  </TASK>
[ 1807.603007][T31303] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1807.610282][T31303] CPU: 1 UID: 0 PID: 31303 Comm: syz.2.6586 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1807.621232][T31303] Tainted: [L]=SOFTLOCKUP
[ 1807.625550][T31303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1807.635603][T31303] Call Trace:
[ 1807.638881][T31303]  <TASK>
[ 1807.641806][T31303]  vpanic+0x56c/0xa60
[ 1807.645794][T31303]  ? __pfx__printk+0x10/0x10
[ 1807.650378][T31303]  ? __pfx_vpanic+0x10/0x10
[ 1807.654878][T31303]  ? is_bpf_text_address+0x292/0x2b0
[ 1807.660162][T31303]  ? is_bpf_text_address+0x26/0x2b0
[ 1807.665361][T31303]  panic+0xc5/0xd0
[ 1807.669086][T31303]  ? __pfx_panic+0x10/0x10
[ 1807.673526][T31303]  __warn+0x315/0x4f0
[ 1807.677526][T31303]  ? usb_submit_urb+0x1052/0x18b0
[ 1807.682569][T31303]  ? usb_submit_urb+0x1052/0x18b0
[ 1807.687594][T31303]  __report_bug+0x29a/0x540
[ 1807.692110][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.697767][T31303]  ? usb_submit_urb+0x1052/0x18b0
[ 1807.702799][T31303]  ? __pfx___report_bug+0x10/0x10
[ 1807.707831][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.713464][T31303]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1807.718748][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.724376][T31303]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1807.730183][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.735830][T31303]  report_bug_entry+0x19a/0x290
[ 1807.740714][T31303]  ? usb_submit_urb+0x1114/0x18b0
[ 1807.745776][T31303]  ? usb_submit_urb+0x1119/0x18b0
[ 1807.750904][T31303]  handle_bug+0xca/0x200
[ 1807.755149][T31303]  exc_invalid_op+0x1a/0x50
[ 1807.759654][T31303]  asm_exc_invalid_op+0x1a/0x20
[ 1807.764502][T31303] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[ 1807.770138][T31303] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[ 1807.789746][T31303] RSP: 0018:ffffc900035e7948 EFLAGS: 00010246
[ 1807.795815][T31303] RAX: 0000000000000000 RBX: ffff888026803600 RCX: 0000000080000780
[ 1807.803792][T31303] RDX: ffff888089280620 RSI: ffffffff8c7ee6a0 RDI: ffffffff901eaf00
[ 1807.811775][T31303] RBP: 1ffff11008f63e8c R08: 00000000000000c0 R09: 0000000000000000
[ 1807.819737][T31303] R10: dffffc0000000000 R11: fffff520006bcf54 R12: ffff88805323d100
[ 1807.827702][T31303] R13: ffff888047b1f460 R14: 0000000080000780 R15: ffff888089280620
[ 1807.835692][T31303]  ? usb_submit_urb+0x10a3/0x18b0
[ 1807.840729][T31303]  ? __init_swait_queue_head+0xa9/0x150
[ 1807.846287][T31303]  usb_start_wait_urb+0x12b/0x510
[ 1807.851335][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.856973][T31303]  ? rcu_is_watching+0x15/0xb0
[ 1807.861746][T31303]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1807.867313][T31303]  ? trace_kmalloc+0x2a/0x110
[ 1807.872015][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.877649][T31303]  usb_control_msg+0x232/0x3e0
[ 1807.882433][T31303]  dib0700_i2c_xfer+0xbb2/0xf80
[ 1807.887310][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.892975][T31303]  __i2c_transfer+0x79a/0x2020
[ 1807.897743][T31303]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1807.903588][T31303]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1807.909396][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.915033][T31303]  ? i2c_transfer+0xc8/0x2d0
[ 1807.919622][T31303]  i2c_transfer+0x1cc/0x2d0
[ 1807.924123][T31303]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1807.929067][T31303]  i2cdev_ioctl+0x6a5/0x880
[ 1807.933565][T31303]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1807.938585][T31303]  ? __fget_files+0x3a0/0x420
[ 1807.943258][T31303]  ? __fget_files+0x2a/0x420
[ 1807.947846][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.953466][T31303]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1807.959090][T31303]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1807.964108][T31303]  __se_sys_ioctl+0xfc/0x170
[ 1807.968698][T31303]  do_syscall_64+0x14d/0xf80
[ 1807.973289][T31303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1807.979349][T31303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1807.985232][T31303] RIP: 0033:0x7f5afc39c629
[ 1807.989640][T31303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1808.009332][T31303] RSP: 002b:00007f5afd257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1808.017745][T31303] RAX: ffffffffffffffda RBX: 00007f5afc615fa0 RCX: 00007f5afc39c629
[ 1808.025708][T31303] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004
[ 1808.033674][T31303] RBP: 00007f5afc432b39 R08: 0000000000000000 R09: 0000000000000000
[ 1808.041646][T31303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1808.049604][T31303] R13: 00007f5afc616038 R14: 00007f5afc615fa0 R15: 00007ffce62e3138
[ 1808.057577][T31303]  </TASK>
[ 1808.060961][T31303] Kernel Offset: disabled
[ 1808.065277][T31303] Rebooting in 86400 seconds..