last executing test programs:

1m47.305874615s ago: executing program 3 (id=121):
socket$l2tp(0x2, 0x2, 0x73)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a9fecad1299da37835f41b66372a06345efe52fe14627df60bc0cc"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x5e, 0xf0, 0x10, 0x572, 0x41, 0x6b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb4, 0x5b, 0x23}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m30.282659813s ago: executing program 3 (id=121):
socket$l2tp(0x2, 0x2, 0x73)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a9fecad1299da37835f41b66372a06345efe52fe14627df60bc0cc"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x5e, 0xf0, 0x10, 0x572, 0x41, 0x6b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb4, 0x5b, 0x23}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m3.503382296s ago: executing program 3 (id=121):
socket$l2tp(0x2, 0x2, 0x73)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a9fecad1299da37835f41b66372a06345efe52fe14627df60bc0cc"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x5e, 0xf0, 0x10, 0x572, 0x41, 0x6b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb4, 0x5b, 0x23}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

45.599759024s ago: executing program 3 (id=121):
socket$l2tp(0x2, 0x2, 0x73)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a9fecad1299da37835f41b66372a06345efe52fe14627df60bc0cc"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x5e, 0xf0, 0x10, 0x572, 0x41, 0x6b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb4, 0x5b, 0x23}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

28.968848994s ago: executing program 3 (id=121):
socket$l2tp(0x2, 0x2, 0x73)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a9fecad1299da37835f41b66372a06345efe52fe14627df60bc0cc"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x5e, 0xf0, 0x10, 0x572, 0x41, 0x6b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb4, 0x5b, 0x23}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

10.557279221s ago: executing program 4 (id=1196):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
write$sndseq(r0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000280)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88)

10.19773854s ago: executing program 0 (id=1199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0)

10.012841795s ago: executing program 0 (id=1200):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = semget$private(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000600))
semtimedop(0x0, 0x0, 0x0, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x16}}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
r4 = dup(r2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000200)=""/177)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000d5713e84293bf59ef70dc89e3758f4e2c4c3a46e8811f0d194dc3d451879b43300af22aee0e2d59156db8fdcf9e7e49b1707b2aaa8f8adaf48d317b91c30cf037b6c22f2bb69ea5d814e35dff5510499fc8f9ce51199ef9bace9b29bf5f54ab07fc8ea353b0712d36bc799b085ead17301c61c23f6f2f8840c7b5d00000000000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="1e00c70000000000000000000000000000000300000570712816323800f70000"], 0x3c}}, 0x24040040)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0)

9.824693394s ago: executing program 3 (id=121):
socket$l2tp(0x2, 0x2, 0x73)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a9fecad1299da37835f41b66372a06345efe52fe14627df60bc0cc"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x5e, 0xf0, 0x10, 0x572, 0x41, 0x6b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb4, 0x5b, 0x23}}]}}]}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

7.518233397s ago: executing program 0 (id=1201):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.494222887s ago: executing program 2 (id=1203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x5, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x502c0, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000002c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000002140)=ANY=[@ANYBLOB="02c90010000c0005"], 0x15)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
setns(r9, 0x4000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x10000000, 0x0, 0x0, 0x0, 0xce0251}, 0x9c)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000008410000004c001800000000696200000000d3b000"/98], 0x68}}, 0x0)
r10 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(r10, 0x7, &(0x7f00000005c0)={0x0, 0x0, 0x6ed8, 0xfffffffffffffeff})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
getdents64(r12, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045519, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0})

7.493469228s ago: executing program 4 (id=1204):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, 0x0)
write$sndseq(r0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000280)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

6.594490585s ago: executing program 4 (id=1205):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0}, 0x90)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_getevents(r1, 0x0, 0x5, &(0x7f0000000480)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={0x77359400})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vxcan1\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0xf447a000)
preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r9, 0xc004562f, &(0x7f0000000200)=0x6)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000005c0)={<r10=>0x0, 0x7}, &(0x7f0000000600)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000640)={r10}, &(0x7f0000000680)=0x8)
ioctl$EVIOCGREP(r9, 0x80084503, &(0x7f0000000300)=""/219)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe40, 0x5e, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x8, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109025d000101000000090400000002060000052406000005240000000d240f010000000004000000001524120000a317a88b045e4f01a607c0ffcb7e312a072414faffffff052407"], 0x0)

6.28794276s ago: executing program 2 (id=1207):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000630000000000711f00851000000600", @ANYRES32], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r5, 0x4008af04, &(0x7f0000000240))

6.184256155s ago: executing program 1 (id=1208):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x8c)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000018c0))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
fremovexattr(0xffffffffffffffff, 0x0)
syz_emit_vhci(0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c010000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff01000000000000000000000000000100000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000529a00000000000000000000000000000000000a00000003000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='?', 0x1, 0x0, 0x0, 0x0)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x842, 0x10, 0x20}, 0x18)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="d6180cc44bc2ebf866120147b441f57a9efa341b59bbed0f59e6f89a09c5be9e870b61562cc979582c1e9e9ff3a2b6ed021bcb785ad5892598907bb1dd77e77b52924474e81f07e0d0d541160311c17ec36d65244cac56f00dec228961c0327a25ae216e2c8e764034627a9ae78e92d6c4d119089609f154e721985b2fb5917458", 0x81)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100006001"], 0x48}}, 0x0)
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', '', [{}, {}, {}, {}, {0x20, 'nl80211\x00'}], 0xa, "d50d3d2af862"}, 0x17)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000004200))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
memfd_create(&(0x7f0000001c80)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xe6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x16=q\x93u\xf1\xde\xef\xac\x171\x13r\xc49\x80\x86\x1a\xbf\xaa&\xf0\xe8Gwm\x80]\xe8\xc2\x90w\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xcbX\x891\xae\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcIv\xe6\xd1\xb5\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfd\x05\x00\x00\x00Q\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89b,8X\xee\rSJQ\x94{}\xd5\xaf\xa9mX0\x94T\x95\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4b\xfc\xf9\xb1\xe0\xdd2\xfd\xda\x84\xbd\xaf\x88\xb3\x91P6t\xf3\xcc\x03\xb8\x9a\x043|A\f\xd4\x1a?h \f\x7f\x92\xb5\x98/J\xd1\x8eW\xfd\xf4o\xd4[\x90\xb3\xc3\xf9\x18\x86\xd1\xeb\x13PIwg\xbe\xbb\"\xfce:\xae\xa9\xc57\xe7\xf6G\x93\xe1X\x9f\xfb\xa5\xe4$>L\xe5]\xc3\x88\xca\xb7\x8b\xfcCn\xcc7>\xa7\xf6mF\xc2\x96q\xc48\xeeP%\x89d\x942\x84r]S\x18{\xd8\xbfT\x0f\xcb\xf7\x84D\xac\x03F+Nj\xd5\x81\x10\xfe\xa6\xf9l\x96N\x1f\xae\xab\xf67\xf1e4v*\x8et\xd3}}\xee\xaf5\x123\x15\xa0\x05\xf4B\x9c\x127\xc42\xab\xf2\xcd\x9a\xcdu\xa9A\xa4\x1f?y\xf0p\x9a\xd7o\xcd\xd0X.\xfa\x15(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe8\x97\xb7\xb6:\aD\x92\x007\xf0\xe2\x1e\xbf9%\x10\xdb\xd69\xfa6e\xef\xf3\xbf{!H1\xd6+\xde\x7f\xe9\x98\xe4\x1do\xfc\xa3\x9b@z\xe5\xbf\xbce\xdd4d\\\x97\x17\xec\x8c\xc0;\xb9\x17`-\x1d\xc4~\x1f\xbcW\"\xb9\x8e~\xc8|\xeb.\x90\x8f\xe5\xf8\x8fM\x1a\xb3\x12j\xae\xffX\xca\xd3\xa4[]\xfe\xc1<B\xa7-\xca\x919\xd0\xf2\xb9\x9ak\xf9\x9dv\xc4\xdd\x9a\x87\xa9L\xd0#\x94c>\x01\x14\xd7\xcdb\xff\b4`\xcd$\x81R\xe5\xbf\xe1\v\xcf,\xd9&\x1a\xfc\x134\xf40P\xd5J\xec\x15-\f\xf0ls9{\xb1\x8f\xb2\xa5', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5bc378c492453b26eb6e9fa1c67faffffffffffffff5c94299e316e1029fe068219816bbc8dfe3e12984addb123b152a7d8418f24ee64666cfe6197ef6a4f", @ANYRES16, @ANYBLOB="00022cbd7000fbdbdf25000000000800080003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1, 0x4, 0x2, 0x0, 0x1}, 0x48)

5.370644827s ago: executing program 0 (id=1209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000012001301000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000100000000e700000063f7f200"], 0x28}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x8008662c, &(0x7f0000000000)=0x6)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @loopback}, &(0x7f0000000540)=0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
pread64(r2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000}, 0x48)
socket(0x0, 0x0, 0x100)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$llc(r8, &(0x7f0000000080)={0x1a, 0x309, 0x2, 0xff, 0xe2, 0x98, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r8}, 0x10)
getsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='f2fs_filemap_fault\x00'}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0)
accept4$llc(r9, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x80800)

4.995689877s ago: executing program 1 (id=1210):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0)

4.991430363s ago: executing program 0 (id=1211):
r0 = socket(0x2, 0x6, 0x0)
connect$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000000025030000002a0100"], 0x58}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'})
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
openat$cgroup_ro(r10, 0x0, 0x26e1, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x34}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

4.313720393s ago: executing program 1 (id=1212):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006119b000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000c60a000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="363634a58c5941c553e9db9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="fe000000000000000a00000000000000fe8000000000000000000000000000bb00000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe39fc4193974800000000000000000347f0000000000000000000000000000000002000000000000000000000000000000000000020000000a00000000000000200100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007122046730f8003a06a9de23330500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000fffffffeff0100000000000000000000000000012e1e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016f9d0f85a0c41dcd0ee46c15e3cf74468fb427e80"], 0x190)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffe}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$netlink(r8, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$alg(r9, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="9f90875a73ad17dee9ebece02db2103d", 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a010800000000000000000200000408000540ffffffff0900010073797a31000000000900010073797a310000000008000b40000004000b00070066696c74657200002c0000a19c3fc87442aa9798d1dea7f262cf2900140a06020000000000000000010000020900010073797a30000000000900010073797a310000000028000000090a01020000000000000000070000060c0010400000000000000003080003400000000014000000020a030000000000000000000500000a14000000140a010400000000000000000300000a14000000"], 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)="0ebc9744361c3192353a")
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.192950228s ago: executing program 4 (id=1213):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x8050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$key(0xf, 0x3, 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

4.066791789s ago: executing program 2 (id=1214):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000180), 0xfe, 0x254, &(0x7f0000000900)="$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")
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[], 0x4b0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
r2 = socket(0x15, 0x0, 0x0)
getsockopt$nfc_llcp(r2, 0x114, 0x271e, 0x0, 0x20000000)

3.835882943s ago: executing program 1 (id=1215):
landlock_create_ruleset(0x0, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0xc, 0x35, "b950b2f65d7c0427f3ff2421f0689c9c659cf8114d719951cc9787303dae2611dcc40a71b0ee92e58102e19905d22066185a2a6c51"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x4, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x7f5c, 0x659, 0x1}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x15}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

3.423894624s ago: executing program 2 (id=1216):
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendto(r0, &(0x7f0000000400)="ffd939898a4520b7a62c04ba32e6281450735c0fd83b2fbb75e3070f38292f09e9a9e3e0e80e5c088aafcadc4241467fe93bb86bfe92cbc03214ad4b5c75c1c63fc8758f926fd42ab5ad42a653e3bdc8fef61c3ccb7d9e94c779d146d6030b4efb349b986503c4f17c25cf4e352aea873b7f44521d6734d632f1224ac0d811340041e9043b36b7562c546798d28f1c41cb22d30501b5966e903246", 0x9b, 0x40000000, &(0x7f0000000300)=@hci={0x1f, 0x0, 0x4}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_io_uring_setup(0x239, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f00000001c0))
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0)
socket$inet(0x2, 0x80001, 0x84)

2.881299326s ago: executing program 4 (id=1217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x5, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x502c0, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000002c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000002140)=ANY=[@ANYBLOB="02c90010000c0005"], 0x15)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = pidfd_getfd(r8, r8, 0x0)
setns(r9, 0x4000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x10000000, 0x0, 0x0, 0x0, 0xce0251}, 0x9c)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000008410000004c001800000000696200000000d3b000"/98], 0x68}}, 0x0)
r10 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(r10, 0x7, &(0x7f00000005c0)={0x0, 0x0, 0x6ed8, 0xfffffffffffffeff})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
getdents64(r12, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045519, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0})

1.258593599s ago: executing program 2 (id=1218):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket(0x2, 0x1, 0x0)
inotify_init()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
pipe(&(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x0)
socket(0x1, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

1.22778784s ago: executing program 1 (id=1219):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488ad8ca9dbc4a9509a000000000000"], 0x0, 0x38}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8}, 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r8}, 0x18)
sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0)

348.480106ms ago: executing program 4 (id=1220):
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x880)
getpid()
syz_pidfd_open(0x0, 0x0)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt(r1, 0x0, 0x8001, &(0x7f0000000040)="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", 0xfa)
syz_pidfd_open(0x0, 0x0)
ioctl$HCIINQUIRY(r1, 0x400448cb, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280))
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5})
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x56, @rand_addr=' \x01\x00', 0x1}, 0x1c)

269.358127ms ago: executing program 0 (id=1221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000012001301000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000100000000e700000063f7f200"], 0x28}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x8008662c, &(0x7f0000000000)=0x6)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @loopback}, &(0x7f0000000540)=0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
pread64(r2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000}, 0x48)
socket(0x0, 0x0, 0x100)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$llc(r8, &(0x7f0000000080)={0x1a, 0x309, 0x2, 0xff, 0xe2, 0x98, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r8}, 0x10)
getsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='f2fs_filemap_fault\x00'}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0)
accept4$llc(r9, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x80800)

268.670847ms ago: executing program 1 (id=1222):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000200000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fc", 0x57}], 0x1)

0s ago: executing program 2 (id=1223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0)

kernel console output (not intermixed with test programs):

comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc761775d39 code=0x0
[  340.524441][ T8489] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  340.549631][ T8489] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  340.558811][ T8489] BTRFS info (device loop4): using free-space-tree
[  340.673530][ T8346] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  340.753811][ T8346] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  341.077961][ T5092] Bluetooth: hci3: command 0x0419 tx timeout
[  341.085367][ T8512] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  341.153727][ T8346] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  341.211644][ T8346] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  341.318754][ T8493] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  341.350852][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[  341.500457][ T5083] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  341.704022][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.780699][ T8346] 8021q: adding VLAN 0 to HW filter on device team0
[  341.923789][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.931090][ T5515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.973817][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.981063][ T5515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.983927][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[  342.124963][ T7656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.214923][ T8346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  342.250664][ T8346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.715858][ T5515] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  342.804502][ T8346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.839378][ T5913] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  342.888720][ T5515] usb 5-1: device descriptor read/64, error -71
[  342.946470][ T8346] veth0_vlan: entered promiscuous mode
[  342.981184][ T8346] veth1_vlan: entered promiscuous mode
[  343.033077][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.053086][ T8346] veth0_macvtap: entered promiscuous mode
[  343.071126][ T5913] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  343.107530][ T8346] veth1_macvtap: entered promiscuous mode
[  343.118378][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  343.135606][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.149950][ T5913] usb 2-1: Product: syz
[  343.154175][ T5913] usb 2-1: Manufacturer: syz
[  343.162313][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.172949][ T5913] usb 2-1: SerialNumber: syz
[  343.182904][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.194235][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.198006][ T5515] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  343.205101][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.243004][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.258212][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.281390][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.302263][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.312454][   T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  343.345113][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.357956][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.390811][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.397954][ T5515] usb 5-1: device descriptor read/64, error -71
[  343.426697][ T8557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  343.445349][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.476256][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.496558][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.515063][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.531790][ T5515] usb usb5-port1: attempt power cycle
[  343.548330][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.548409][   T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.570444][   T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.580620][   T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  343.587916][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.591415][   T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  343.621491][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.640967][   T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  343.647931][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.651185][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.672292][ T8346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.679602][   T45] usb 1-1: Product: syz
[  343.686976][   T45] usb 1-1: Manufacturer: syz
[  343.688067][ T8346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.707892][   T45] usb 1-1: SerialNumber: syz
[  343.720262][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.768436][ T8346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.777262][ T8346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.788627][ T8571] dccp_invalid_packet: P.Data Offset(100) too large
[  343.825201][ T8346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.839316][ T8346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.968367][ T5515] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  344.020070][ T5515] usb 5-1: device descriptor read/8, error -71
[  344.080701][ T8557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  344.093042][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.118638][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.212478][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.221473][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.313886][ T5913] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  344.320575][ T5913] cdc_ncm 2-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048
[  344.328059][ T5515] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  344.336094][ T5913] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  344.376016][   T45] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  344.391507][ T5515] usb 5-1: device descriptor read/8, error -71
[  344.408125][   T45] cdc_ncm 1-1:1.0: bind() failure
[  344.424217][   T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  344.434585][   T45] cdc_ncm 1-1:1.1: bind() failure
[  344.530106][ T5913] cdc_ncm 2-1:1.0: setting tx_max = 28
[  344.538439][ T5515] usb usb5-port1: unable to enumerate USB device
[  344.564575][ T5913] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  344.592286][ T5913] usb 2-1: USB disconnect, device number 13
[  344.609369][ T5913] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  345.999005][ T5515] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  346.033631][ T5424] usb 1-1: USB disconnect, device number 15
[  346.218977][ T5092] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  346.228954][ T5515] usb 5-1: Using ep0 maxpacket: 16
[  346.237530][ T5515] usb 5-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config
[  346.264207][ T5515] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  346.289523][ T5515] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  346.317959][ T5515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.337205][ T8602] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.884'.
[  346.337270][ T5515] usb 5-1: config 0 descriptor??
[  346.376885][ T8602] netlink: zone id is out of range
[  346.401158][ T8602] netlink: zone id is out of range
[  346.423364][ T1059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.437310][ T8602] netlink: zone id is out of range
[  346.449790][ T8602] netlink: zone id is out of range
[  346.476957][ T8602] netlink: zone id is out of range
[  346.550797][ T8602] netlink: zone id is out of range
[  346.580329][ T8595] netlink: 'syz.4.882': attribute type 33 has an invalid length.
[  346.588720][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'.
[  346.606715][ T8595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.882'.
[  346.625189][ T8602] netlink: zone id is out of range
[  346.631494][ T8602] netlink: zone id is out of range
[  346.636817][ T8602] netlink: zone id is out of range
[  346.643896][ T8602] netlink: zone id is out of range
[  346.859486][ T5515] usb 5-1: string descriptor 0 read error: -71
[  346.878385][ T5515] usb 5-1: USB disconnect, device number 20
[  347.127680][ T1059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.275284][ T1059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.349340][ T1059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.504448][ T1059] bridge_slave_1: left allmulticast mode
[  347.510265][ T1059] bridge_slave_1: left promiscuous mode
[  347.516048][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.528765][ T1059] bridge_slave_0: left allmulticast mode
[  347.534458][ T1059] bridge_slave_0: left promiscuous mode
[  347.550912][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.838064][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  348.023323][ T8621] netlink: 828 bytes leftover after parsing attributes in process `syz.2.887'.
[  348.317968][ T5131] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  348.319441][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  348.359961][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  348.369149][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  348.390928][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  348.398909][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  348.406836][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  348.549118][ T5131] usb 5-1: Using ep0 maxpacket: 16
[  348.565555][ T5131] usb 5-1: unable to read config index 0 descriptor/start: -61
[  348.579218][ T5131] usb 5-1: can't read configurations, error -61
[  348.768318][ T5131] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  348.788606][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.811104][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.847075][ T1059] bond0 (unregistering): Released all slaves
[  348.877886][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  348.979309][ T5131] usb 5-1: Using ep0 maxpacket: 16
[  348.986699][ T8628] lo speed is unknown, defaulting to 1000
[  349.032216][ T5131] usb 5-1: unable to read config index 0 descriptor/start: -61
[  349.040096][ T5131] usb 5-1: can't read configurations, error -61
[  349.062996][ T5131] usb usb5-port1: attempt power cycle
[  349.288219][   T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  349.498302][ T5131] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  349.520274][   T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.541523][   T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.568067][   T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  349.585880][ T5131] usb 5-1: Using ep0 maxpacket: 16
[  349.600039][ T5131] usb 5-1: unable to read config index 0 descriptor/start: -61
[  349.607660][ T5131] usb 5-1: can't read configurations, error -61
[  349.614148][   T45] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  349.662558][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  349.676785][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.695121][   T45] usb 2-1: Product: syz
[  349.708555][   T45] usb 2-1: Manufacturer: syz
[  349.713258][   T45] usb 2-1: SerialNumber: syz
[  349.730775][ T8642] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.897'.
[  349.808173][ T5131] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  349.819923][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  349.871618][ T5131] usb 5-1: Using ep0 maxpacket: 16
[  349.884205][ T5131] usb 5-1: unable to read config index 0 descriptor/start: -61
[  349.906681][ T5131] usb 5-1: can't read configurations, error -61
[  349.926421][ T5131] usb usb5-port1: unable to enumerate USB device
[  349.959036][ T1059] hsr_slave_0: left promiscuous mode
[  350.021071][ T1059] hsr_slave_1: left promiscuous mode
[  350.037018][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.057481][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.078789][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.098018][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.156109][ T1059] veth1_macvtap: left promiscuous mode
[  350.172236][ T1059] veth0_macvtap: left promiscuous mode
[  350.184696][ T1059] veth1_vlan: left promiscuous mode
[  350.196806][ T1059] veth0_vlan: left promiscuous mode
[  350.330923][ T5131] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  350.424437][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'.
[  350.451503][ T5092] Bluetooth: hci3: command tx timeout
[  350.547898][ T5131] usb 1-1: Using ep0 maxpacket: 16
[  350.555855][ T5131] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  350.567537][ T5131] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  350.581167][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.592811][ T5131] usb 1-1: config 0 descriptor??
[  350.787121][   T45] cdc_ncm 2-1:1.0: bind() failure
[  350.800200][   T45] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  350.818055][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.833537][   T45] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  350.837056][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.855518][   T45] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  350.882216][   T45] usb 2-1: USB disconnect, device number 14
[  351.183125][ T8656] rdma_rxe: rxe_newlink: failed to add lo
[  351.520556][ T8662] netlink: 120 bytes leftover after parsing attributes in process `syz.1.904'.
[  351.605192][ T8663] xt_TPROXY: Can be used only with -p tcp or -p udp
[  351.656836][ T1059] team0 (unregistering): Port device team_slave_1 removed
[  351.867976][ T1059] team0 (unregistering): Port device team_slave_0 removed
[  352.535555][ T5092] Bluetooth: hci3: command tx timeout
[  353.395920][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'.
[  353.427484][ T8648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.899'.
[  353.446317][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.899'.
[  353.489914][ T8648] vlan3: entered allmulticast mode
[  353.496641][ T8648] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  353.513373][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'.
[  353.574432][ T5131] usbhid 1-1:0.0: can't add hid device: -71
[  353.588063][ T5131] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  353.618455][ T5131] usb 1-1: USB disconnect, device number 16
[  353.672458][ T8676] netlink: 828 bytes leftover after parsing attributes in process `syz.4.906'.
[  353.748878][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'.
[  354.008886][ T8628] chnl_net:caif_netlink_parms(): no params data found
[  354.628429][ T5092] Bluetooth: hci3: command tx timeout
[  354.981030][ T8685] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.910'.
[  355.038086][ T8685] net_ratelimit: 242 callbacks suppressed
[  355.038109][ T8685] netlink: zone id is out of range
[  355.051410][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'.
[  355.095195][ T8685] netlink: zone id is out of range
[  355.122990][ T8685] netlink: zone id is out of range
[  355.140188][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.158916][ T8685] netlink: zone id is out of range
[  355.166219][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.178152][ T8685] netlink: zone id is out of range
[  355.197543][ T8685] netlink: zone id is out of range
[  355.202416][ T8628] bridge_slave_0: entered allmulticast mode
[  355.219560][ T8685] netlink: zone id is out of range
[  355.247144][ T8685] netlink: zone id is out of range
[  355.251042][ T8628] bridge_slave_0: entered promiscuous mode
[  355.282142][ T8685] netlink: zone id is out of range
[  355.286331][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.298668][ T8685] netlink: zone id is out of range
[  355.327632][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.357350][ T8628] bridge_slave_1: entered allmulticast mode
[  355.383789][ T8628] bridge_slave_1: entered promiscuous mode
[  355.503190][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.544239][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.635043][ T8628] team0: Port device team_slave_0 added
[  355.668793][ T8628] team0: Port device team_slave_1 added
[  355.701824][ T8708] rdma_rxe: rxe_newlink: failed to add lo
[  355.794455][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.827991][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.888016][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.949116][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.998115][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.076003][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.253389][ T8719] netlink: 120 bytes leftover after parsing attributes in process `syz.1.920'.
[  356.279116][ T8628] hsr_slave_0: entered promiscuous mode
[  356.296406][ T8628] hsr_slave_1: entered promiscuous mode
[  356.306789][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  356.326788][ T8721] xt_TPROXY: Can be used only with -p tcp or -p udp
[  356.337964][ T5136] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  356.543306][ T5136] usb 5-1: Using ep0 maxpacket: 16
[  356.566011][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  356.608228][ T5136] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  356.628821][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.655967][ T5136] usb 5-1: config 0 descriptor??
[  356.678549][ T5092] Bluetooth: hci3: command tx timeout
[  356.775564][ T8727] netlink: 'syz.1.923': attribute type 1 has an invalid length.
[  356.868272][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.883851][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.963535][   T29] audit: type=1804 audit(1719289377.291:172): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.914" name="/root/syzkaller.KLmFUW/277/bus" dev="sda1" ino=1965 res=1 errno=0
[  357.024523][   T29] audit: type=1804 audit(1719289377.321:173): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.914" name="/root/syzkaller.KLmFUW/277/bus" dev="sda1" ino=1965 res=1 errno=0
[  357.196384][ T5136] usbhid 5-1:0.0: can't add hid device: -71
[  357.217156][ T5136] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  357.239310][ T5136] usb 5-1: USB disconnect, device number 25
[  357.348913][ T8736] xt_TPROXY: Can be used only with -p tcp or -p udp
[  357.488721][ T8739] rdma_rxe: rxe_newlink: failed to add lo
[  357.594354][ T8628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  357.669118][ T8628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  357.706907][ T8628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  357.781405][ T8628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  358.193399][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.274462][ T8749] fuse: Unknown parameter 'user_id00000000000000000000'
[  358.287036][ T8628] 8021q: adding VLAN 0 to HW filter on device team0
[  358.339006][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.346176][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.368015][   T29] audit: type=1804 audit(1719289378.681:174): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.929" name="/root/syzkaller.MZpDUG/64/file0" dev="sda1" ino=1961 res=1 errno=0
[  358.427364][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.434533][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.498201][ T8752] __nla_validate_parse: 7 callbacks suppressed
[  358.498216][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'.
[  358.846645][ T8757] netlink: 120 bytes leftover after parsing attributes in process `syz.4.933'.
[  358.910543][ T8757] xt_TPROXY: Can be used only with -p tcp or -p udp
[  359.242182][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.363869][ T8768] loop2: detected capacity change from 0 to 1024
[  359.417835][ T8628] veth0_vlan: entered promiscuous mode
[  359.465125][ T8768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  359.485949][ T8628] veth1_vlan: entered promiscuous mode
[  359.569139][ T8768] System zones: 0-1, 3-12
[  359.668746][ T8628] veth0_macvtap: entered promiscuous mode
[  359.676444][ T8768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.704240][ T8628] veth1_macvtap: entered promiscuous mode
[  359.746713][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.777206][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.866944][ T8782] rdma_rxe: rxe_newlink: failed to add lo
[  359.898391][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'.
[  359.922790][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.988008][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.022003][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.032759][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.042812][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.053433][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.063327][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.073861][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.086477][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.140492][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.158542][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.179997][ T8774] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  360.195403][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.334794][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.344843][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.355717][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.376962][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.391920][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.401944][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.412595][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.424654][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.454489][ T8628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.467694][ T7656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.488247][ T8628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.497015][ T8628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.526195][ T8628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.668483][ T5136] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  360.818596][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.826484][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.869349][ T5136] usb 2-1: Using ep0 maxpacket: 16
[  360.881266][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  360.908915][ T5136] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  360.909131][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.933333][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.966810][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.969698][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'.
[  360.997608][ T5136] usb 2-1: config 0 descriptor??
[  361.223307][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.259437][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.427553][ T8798] net_ratelimit: 244 callbacks suppressed
[  361.427577][ T8798] dccp_invalid_packet: P.Data Offset(0) too small
[  361.484140][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  361.508041][ T8786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.940'.
[  361.524944][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'.
[  361.573293][ T8786] vlan3: entered allmulticast mode
[  361.607564][ T8786] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  361.632037][ T8788] loop4: detected capacity change from 0 to 32768
[  361.650357][ T5136] usbhid 2-1:0.0: can't add hid device: -71
[  361.652797][ T8788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.942 (8788)
[  361.682208][ T5136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  361.704272][ T8788] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  361.729611][ T8788] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  361.750236][ T8788] BTRFS info (device loop4): using free-space-tree
[  361.750529][ T5136] usb 2-1: USB disconnect, device number 15
[  362.232288][ T5083] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  362.893644][ T8823] loop4: detected capacity change from 0 to 1024
[  362.932655][ T8823] hfsplus: unable to parse mount options
[  363.296830][ T8794] loop2: detected capacity change from 0 to 32768
[  363.385466][ T3715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.414068][ T8794] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.944 (8794)
[  363.528559][ T8794] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  363.564751][ T8794] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  363.589157][ T8794] BTRFS info (device loop2): using free-space-tree
[  363.980381][   T29] audit: type=1804 audit(1719289384.311:175): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.944" name="/root/syzkaller.MZpDUG/67/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  364.136021][   T29] audit: type=1804 audit(1719289384.461:176): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.944" name="/root/syzkaller.MZpDUG/67/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  364.260741][ T3715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.377860][ T3715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.466454][ T3715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.708220][ T3715] bridge_slave_1: left allmulticast mode
[  364.714074][ T3715] bridge_slave_1: left promiscuous mode
[  364.722182][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.752114][ T3715] bridge_slave_0: left allmulticast mode
[  364.758700][ T3715] bridge_slave_0: left promiscuous mode
[  364.775488][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.967065][ T8853] rdma_rxe: rxe_newlink: failed to add lo
[  364.986368][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[  365.142356][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'.
[  366.666593][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  366.678657][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  366.687096][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  366.696568][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  366.705090][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  366.712587][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  366.810183][ T5131] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  366.818744][ T3715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.856347][ T3715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.875429][ T3715] bond0 (unregistering): Released all slaves
[  367.028504][ T5131] usb 2-1: Using ep0 maxpacket: 16
[  367.058280][ T5131] usb 2-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config
[  367.108743][ T5131] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  367.319949][ T8866] lo speed is unknown, defaulting to 1000
[  367.360621][ T5131] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  367.369916][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.402681][ T5131] usb 2-1: config 0 descriptor??
[  368.219248][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'.
[  368.412163][ T8865] netlink: 'syz.1.957': attribute type 33 has an invalid length.
[  368.448129][ T8865] netlink: 152 bytes leftover after parsing attributes in process `syz.1.957'.
[  368.711548][ T5131] usb 2-1: string descriptor 0 read error: -71
[  368.777913][ T5131] usb 2-1: USB disconnect, device number 16
[  368.839747][ T5092] Bluetooth: hci3: command tx timeout
[  369.150482][ T7656] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  369.400742][ T3715] hsr_slave_0: left promiscuous mode
[  369.415724][ T3715] hsr_slave_1: left promiscuous mode
[  369.425346][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.439282][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.483503][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.497946][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.612827][ T3715] veth1_macvtap: left promiscuous mode
[  369.646337][ T3715] veth0_macvtap: left promiscuous mode
[  369.667462][ T3715] veth1_vlan: left promiscuous mode
[  369.698117][ T3715] veth0_vlan: left promiscuous mode
[  369.732637][ T8886] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  369.795739][ T5092] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  370.369033][ T8903] rdma_rxe: rxe_newlink: failed to add lo
[  370.827974][ T5131] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  370.918005][ T5092] Bluetooth: hci3: command tx timeout
[  371.035184][ T5131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.072308][ T5131] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  371.096475][ T5131] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  371.119787][ T5131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.146566][ T5131] usb 2-1: Product: syz
[  371.152525][ T5131] usb 2-1: Manufacturer: syz
[  371.162934][ T5131] usb 2-1: SerialNumber: syz
[  371.227237][ T3715] team0 (unregistering): Port device team_slave_1 removed
[  371.292971][ T3715] team0 (unregistering): Port device team_slave_0 removed
[  371.407122][ T8907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  371.643484][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.676161][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.114411][ T8907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  372.341597][ T5131] cdc_ncm 2-1:1.0: failed to get mac address
[  372.368757][ T5131] cdc_ncm 2-1:1.0: bind() failure
[  372.387945][ T5131] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  372.404603][ T5131] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  372.652173][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[  372.664907][ T5131] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  372.687544][ T5131] usb 2-1: USB disconnect, device number 17
[  373.028783][ T5092] Bluetooth: hci3: command tx timeout
[  373.364673][ T8866] chnl_net:caif_netlink_parms(): no params data found
[  373.885080][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'.
[  373.923186][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.949297][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.972910][ T8866] bridge_slave_0: entered allmulticast mode
[  373.978903][ T8944] loop1: detected capacity change from 0 to 1764
[  373.998428][ T8866] bridge_slave_0: entered promiscuous mode
[  374.028877][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.044456][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.069439][ T8866] bridge_slave_1: entered allmulticast mode
[  374.093734][ T8866] bridge_slave_1: entered promiscuous mode
[  374.329897][ T8866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.382052][ T8866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.545098][ T8866] team0: Port device team_slave_0 added
[  374.567264][ T8866] team0: Port device team_slave_1 added
[  374.619729][ T8952] loop2: detected capacity change from 0 to 1024
[  374.687969][ T8952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  374.740110][ T8952] System zones: 0-1, 3-12
[  374.799649][ T8952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.841467][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.871159][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.964781][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'.
[  375.078017][ T5092] Bluetooth: hci3: command tx timeout
[  375.097945][ T8866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.185840][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.207993][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.234263][ T8866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.448257][ T8956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  375.585627][ T8866] hsr_slave_0: entered promiscuous mode
[  375.611973][ T7656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.619076][ T8959] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  375.638388][ T8866] hsr_slave_1: entered promiscuous mode
[  375.779952][ T5092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  375.795072][ T5092] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  375.804311][ T5092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  375.813681][ T5092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  375.908493][ T5092] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  375.916776][ T5092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.017981][   T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  376.270027][   T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.305188][   T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  376.320305][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'.
[  376.324947][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  376.391035][   T45] usb 5-1: SerialNumber: syz
[  376.421258][   T45] cdc_ether 5-1:1.0: skipping garbage
[  376.429749][   T45] usb 5-1: bad CDC descriptors
[  376.443222][ T3715] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.620677][ T3715] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.659101][   T45] usb 5-1: USB disconnect, device number 26
[  376.702160][ T8973] lo speed is unknown, defaulting to 1000
[  376.850811][ T3715] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.167124][ T3715] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.962277][ T5098] Bluetooth: hci6: command tx timeout
[  378.044764][ T3715] bridge_slave_1: left allmulticast mode
[  378.058256][ T3715] bridge_slave_1: left promiscuous mode
[  378.064509][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.090768][ T8997] rdma_rxe: rxe_newlink: failed to add lo
[  378.098999][ T3715] bridge_slave_0: left allmulticast mode
[  378.147505][ T3715] bridge_slave_0: left promiscuous mode
[  378.147938][ T5136] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  378.160917][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.263602][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'.
[  378.310043][ T3715] bond0: left allmulticast mode
[  378.315104][ T3715] bond_slave_0: left allmulticast mode
[  378.324112][ T3715] bond_slave_1: left allmulticast mode
[  378.329878][ T3715] bond0: left promiscuous mode
[  378.334848][ T3715] bond_slave_0: left promiscuous mode
[  378.342370][ T3715] bond_slave_1: left promiscuous mode
[  378.356220][ T5136] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  378.378016][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.416532][ T5136] usb 5-1: config 0 descriptor??
[  378.839927][ T5136] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  378.850822][ T5136] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  378.878659][ T5136] [drm:udl_init] *ERROR* Selecting channel failed
[  378.906412][ T5136] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  378.921943][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  378.928650][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  378.936849][ T5136] [drm] Initialized udl on minor 2
[  378.950835][ T5136] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  378.963853][ T5136] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  378.973091][ T5137] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  378.983146][ T5136] usb 5-1: USB disconnect, device number 27
[  378.989459][ T5137] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  379.007652][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'.
[  379.315003][ T3715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.339714][ T3715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.361452][ T3715] bond0 (unregistering): Released all slaves
[  379.397299][ T3715] bond1 (unregistering): Released all slaves
[  379.434687][ T3715] bond2 (unregistering): Released all slaves
[  379.471797][ T3715] bond3 (unregistering): (slave batadv3): Releasing backup interface
[  379.483978][ T3715] batadv3: left promiscuous mode
[  379.497710][ T3715] bond3 (unregistering): Released all slaves
[  379.676938][ T3715] tipc: Left network mode
[  379.762628][ T8866] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  379.806953][ T8866] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  379.828394][ T5136] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  379.857985][ T8973] chnl_net:caif_netlink_parms(): no params data found
[  379.878711][ T8866] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  379.891794][ T9013] netlink: 182736 bytes leftover after parsing attributes in process `syz.2.993'.
[  379.908416][ T8866] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  379.918752][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'.
[  380.027992][ T5136] usb 5-1: Using ep0 maxpacket: 16
[  380.045262][ T5098] Bluetooth: hci6: command tx timeout
[  380.059522][ T5136] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  380.074289][ T3715] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode
[  380.083069][ T5136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.099079][ T5136] usb 5-1: config 0 has no interface number 0
[  380.105254][ T5136] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  380.121126][ T5136] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  380.138080][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  380.146445][ T5136] usb 5-1: Product: syz
[  380.146666][   T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  380.157949][ T5136] usb 5-1: SerialNumber: syz
[  380.167149][ T5136] usb 5-1: config 0 descriptor??
[  380.330351][   T45] usb 2-1: device descriptor read/64, error -71
[  380.503306][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.512220][    T9] usb 5-1: USB disconnect, device number 28
[  380.526366][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.535734][ T8973] bridge_slave_0: entered allmulticast mode
[  380.544936][ T8973] bridge_slave_0: entered promiscuous mode
[  380.567248][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.577209][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.596740][ T8973] bridge_slave_1: entered allmulticast mode
[  380.605748][ T8973] bridge_slave_1: entered promiscuous mode
[  380.644696][   T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  380.778381][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.816792][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.828881][   T45] usb 2-1: device descriptor read/64, error -71
[  380.958526][   T45] usb usb2-port1: attempt power cycle
[  381.031398][ T8973] team0: Port device team_slave_0 added
[  381.092742][ T8973] team0: Port device team_slave_1 added
[  381.240162][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.247640][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.288247][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.297955][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.379195][ T3715] veth1_macvtap: left promiscuous mode
[  381.388080][ T3715] veth0_macvtap: left promiscuous mode
[  381.393798][ T3715] veth1_vlan: left promiscuous mode
[  381.400680][   T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  381.429534][ T3715] veth0_vlan: left promiscuous mode
[  381.459866][   T45] usb 2-1: device descriptor read/8, error -71
[  381.752051][   T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  381.885001][   T45] usb 2-1: device descriptor read/8, error -71
[  382.038777][   T45] usb usb2-port1: unable to enumerate USB device
[  382.123633][ T5098] Bluetooth: hci6: command tx timeout
[  382.731268][ T3715] team0 (unregistering): Port device team_slave_1 removed
[  382.739366][ T9054] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1001'.
[  382.751557][ T9054] netlink: zone id is out of range
[  382.756732][ T9054] netlink: zone id is out of range
[  382.802635][ T9054] netlink: zone id is out of range
[  382.810803][ T3715] team0 (unregistering): Port device team_slave_0 removed
[  382.831538][ T9054] netlink: zone id is out of range
[  382.848044][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'.
[  382.908248][ T9054] netlink: zone id is out of range
[  382.913445][ T9054] netlink: zone id is out of range
[  382.966566][ T9054] netlink: zone id is out of range
[  382.979405][ T9054] netlink: zone id is out of range
[  382.984654][ T9054] netlink: zone id is out of range
[  382.992560][ T9054] netlink: zone id is out of range
[  383.021965][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  383.428946][ T9066] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1004'.
[  383.456339][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'.
[  383.968811][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.975811][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.173101][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.216688][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.241754][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.268137][ T5092] Bluetooth: hci6: command tx timeout
[  384.283723][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.517065][ T9071] vlan4: entered promiscuous mode
[  384.579480][ T9071] team0: entered promiscuous mode
[  384.647118][ T9071] team_slave_0: entered promiscuous mode
[  384.738921][ T9071] team_slave_1: entered promiscuous mode
[  384.809773][ T9071] vlan4: entered allmulticast mode
[  384.858307][ T9071] team0: entered allmulticast mode
[  384.918368][ T9071] team_slave_0: entered allmulticast mode
[  384.934475][ T9071] team_slave_1: entered allmulticast mode
[  385.031265][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.213656][ T8973] hsr_slave_0: entered promiscuous mode
[  385.238799][ T9080] loop1: detected capacity change from 0 to 1024
[  385.245735][ T8973] hsr_slave_1: entered promiscuous mode
[  385.270186][ T8973] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  385.287425][ T8973] Cannot create hsr debugfs directory
[  385.297959][ T5131] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  385.357399][ T9080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  385.429968][ T9080] System zones: 0-1, 3-12
[  385.485041][ T9080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.509887][ T5131] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.532479][ T8866] 8021q: adding VLAN 0 to HW filter on device team0
[  385.563682][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.570868][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.744759][ T5131] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  385.765824][ T5131] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.785481][ T5131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.794850][ T5131] usb 3-1: Product: syz
[  385.810083][ T5131] usb 3-1: Manufacturer: syz
[  385.815041][ T5131] usb 3-1: SerialNumber: syz
[  385.856736][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.863996][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.059777][ T9073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  386.334912][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.364603][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.446279][ T8866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  386.647970][ T5215] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  386.848564][ T5215] usb 5-1: device descriptor read/64, error -71
[  386.869061][ T9073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  386.988915][ T8973] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  387.019013][ T8973] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  387.053572][ T8973] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  387.077594][ T8973] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  387.103216][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.129280][ T5131] cdc_ncm 3-1:1.0: failed to get mac address
[  387.139553][ T5131] cdc_ncm 3-1:1.0: bind() failure
[  387.148391][ T5215] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  387.188275][ T5131] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  387.228143][ T5131] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  387.267506][ T5131] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  387.312531][ T5131] usb 3-1: USB disconnect, device number 11
[  387.318017][ T5215] usb 5-1: device descriptor read/64, error -71
[  387.395883][ T8866] veth0_vlan: entered promiscuous mode
[  387.457451][ T5215] usb usb5-port1: attempt power cycle
[  387.472556][ T8866] veth1_vlan: entered promiscuous mode
[  387.559747][ T8000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.582146][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.610186][ T8866] veth0_macvtap: entered promiscuous mode
[  387.647581][ T8866] veth1_macvtap: entered promiscuous mode
[  387.664643][ T8973] 8021q: adding VLAN 0 to HW filter on device team0
[  387.712408][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.719665][ T5515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.775681][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.797094][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.814607][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.833908][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.854488][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.875549][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.891788][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.902788][ T5215] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  387.919703][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.940336][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.959856][ T5215] usb 5-1: device descriptor read/8, error -71
[  387.992375][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'.
[  387.999085][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.008578][ T5515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.077737][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.099809][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.111234][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.123835][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.141222][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.163519][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.196017][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.206984][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.220428][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.251580][ T5215] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  388.270084][ T8866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.283648][ T8866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.294320][ T8866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.306557][ T5215] usb 5-1: device descriptor read/8, error -71
[  388.312976][ T8866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.348195][ T9108] rdma_rxe: rxe_newlink: failed to add lo
[  388.362027][ T8973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  388.440864][ T5215] usb usb5-port1: unable to enumerate USB device
[  388.576054][ T3715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.606935][ T3715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.663692][ T9112] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1016'.
[  388.689820][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.697699][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.713258][ T9112] net_ratelimit: 254 callbacks suppressed
[  388.713284][ T9112] netlink: zone id is out of range
[  388.729977][ T9112] netlink: zone id is out of range
[  388.757050][ T9112] netlink: zone id is out of range
[  388.775547][ T9112] netlink: zone id is out of range
[  388.785269][ T9112] netlink: zone id is out of range
[  388.837865][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'.
[  388.852112][ T9112] netlink: zone id is out of range
[  388.857544][ T9112] netlink: zone id is out of range
[  388.863382][ T9112] netlink: zone id is out of range
[  388.885006][ T9112] netlink: zone id is out of range
[  388.890466][ T9112] netlink: zone id is out of range
[  388.995450][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.111053][ T8973] veth0_vlan: entered promiscuous mode
[  389.157720][ T8973] veth1_vlan: entered promiscuous mode
[  389.304619][ T8973] veth0_macvtap: entered promiscuous mode
[  389.335882][ T8973] veth1_macvtap: entered promiscuous mode
[  389.453953][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.492987][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.530665][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.573007][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.615691][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.655522][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.689452][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.712222][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.749463][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.790133][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.818470][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.850677][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.879805][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.903745][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.929704][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.968915][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.005670][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.068057][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.111569][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.127910][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  390.165178][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.186409][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.210520][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.352464][ T2823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.374829][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.386099][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.407004][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  390.432255][    T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  390.452407][ T8973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.477695][ T8973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.494565][ T8973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.507984][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  390.517065][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.534337][ T8973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.544562][    T9] usb 5-1: Product: syz
[  390.565787][    T9] usb 5-1: Manufacturer: syz
[  390.570774][    T9] usb 5-1: SerialNumber: syz
[  390.620807][ T2823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.856935][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.884110][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.923288][ T2823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.007316][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.024954][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.061056][ T2823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.252138][ T2823] bridge_slave_1: left allmulticast mode
[  391.260996][ T2823] bridge_slave_1: left promiscuous mode
[  391.266900][ T2823] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.283413][ T2823] bridge_slave_0: left allmulticast mode
[  391.289706][ T2823] bridge_slave_0: left promiscuous mode
[  391.295923][ T2823] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.610598][    T9] cdc_ncm 5-1:1.0: bind() failure
[  391.638032][    T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  391.646841][    T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  391.677370][    T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  391.704205][    T9] usb 5-1: USB disconnect, device number 33
[  392.346526][ T2823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.394413][ T2823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.404939][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  392.427467][ T9153] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1028'.
[  392.430700][ T2823] bond0 (unregistering): Released all slaves
[  392.445924][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'.
[  392.463460][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  392.475309][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  392.496125][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  392.505107][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  392.513275][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  392.652132][ T5092] Bluetooth: hci6: unexpected event 0x09 length: 8 > 3
[  393.091313][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  393.454683][ T9154] lo speed is unknown, defaulting to 1000
[  393.537471][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  393.857842][    T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  393.940776][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.968075][    T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  393.983114][    T9] usb 5-1: config 0 descriptor??
[  394.007429][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  394.187953][    T8] usb 2-1: Using ep0 maxpacket: 16
[  394.204248][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  394.228651][    T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  394.259244][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.310082][    T8] usb 2-1: config 0 descriptor??
[  394.547518][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.566781][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.606397][ T5092] Bluetooth: hci0: command tx timeout
[  394.764621][ T2823] hsr_slave_0: left promiscuous mode
[  394.790855][ T2823] hsr_slave_1: left promiscuous mode
[  394.811484][ T2823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.824546][ T2823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.859834][ T2823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.883510][ T2823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.992653][ T2823] veth1_macvtap: left promiscuous mode
[  395.004458][ T2823] veth0_macvtap: left promiscuous mode
[  395.014853][ T2823] veth1_vlan: left promiscuous mode
[  395.022303][ T2823] veth0_vlan: left promiscuous mode
[  395.836146][ T5515] usb 5-1: USB disconnect, device number 34
[  396.539344][ T2823] team0 (unregistering): Port device team_slave_1 removed
[  396.587651][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'.
[  396.643049][ T2823] team0 (unregistering): Port device team_slave_0 removed
[  396.804847][ T9188] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  397.780749][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'.
[  397.792780][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1034'.
[  397.803933][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1034'.
[  397.872609][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  397.894668][    T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  397.930702][    T8] usb 2-1: USB disconnect, device number 22
[  398.202682][ T9154] chnl_net:caif_netlink_parms(): no params data found
[  398.358103][    T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  398.457502][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.536447][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.567710][ T9154] bridge_slave_0: entered allmulticast mode
[  398.580946][ T9154] bridge_slave_0: entered promiscuous mode
[  398.670353][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.726282][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.743334][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.754989][ T9154] bridge_slave_1: entered allmulticast mode
[  398.762543][    T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  398.787677][ T9154] bridge_slave_1: entered promiscuous mode
[  398.822271][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  398.848489][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.858473][    T8] usb 2-1: Product: syz
[  398.863525][    T8] usb 2-1: Manufacturer: syz
[  398.868593][    T8] usb 2-1: SerialNumber: syz
[  398.893151][ T9154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.927354][ T9154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.095856][ T9199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  399.180805][ T9154] team0: Port device team_slave_0 added
[  399.226332][ T9154] team0: Port device team_slave_1 added
[  399.349660][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.377482][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.489828][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.517866][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.588037][ T9154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.630054][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.638010][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.707869][ T9154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.867196][ T9199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  399.875414][ T9154] hsr_slave_0: entered promiscuous mode
[  399.911767][ T9154] hsr_slave_1: entered promiscuous mode
[  400.146704][    T8] cdc_ncm 2-1:1.0: failed to get mac address
[  400.155004][    T8] cdc_ncm 2-1:1.0: bind() failure
[  400.196100][    T8] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  400.235475][    T8] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  400.262445][    T8] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  400.298860][    T8] usb 2-1: USB disconnect, device number 23
[  400.629240][ T9247] fuse: Unknown parameter 'fd0x0000000000000005'
[  400.674299][ T9241] loop4: detected capacity change from 0 to 32768
[  400.718736][ T9241] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1052 (9241)
[  400.735445][   T29] audit: type=1804 audit(1719289421.061:177): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1054" name="/root/syzkaller.MZpDUG/102/file0" dev="sda1" ino=1972 res=1 errno=0
[  400.766935][ T9241] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  400.797480][ T9241] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  400.828029][ T9241] BTRFS info (device loop4): using free-space-tree
[  401.485026][ T5086] Bluetooth: hci4: command 0x0406 tx timeout
[  402.126897][ T9154] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  402.251043][ T9154] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  402.285883][   T29] audit: type=1804 audit(1719289422.591:178): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1052" name="/root/syzkaller.fz66ns/263/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  402.317740][   T29] audit: type=1804 audit(1719289422.601:179): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1052" name="/root/syzkaller.fz66ns/263/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  402.349429][ T9154] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  402.412979][ T9154] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  402.768442][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'.
[  402.782033][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.974510][ T9154] 8021q: adding VLAN 0 to HW filter on device team0
[  403.035526][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.042825][ T5515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.124788][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.132079][ T5515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.846593][ T9282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  403.976296][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.191756][ T9154] veth0_vlan: entered promiscuous mode
[  404.244166][ T9154] veth1_vlan: entered promiscuous mode
[  404.361058][ T9154] veth0_macvtap: entered promiscuous mode
[  404.383220][ T9154] veth1_macvtap: entered promiscuous mode
[  404.398335][ T5137] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  404.446252][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.477514][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.494894][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.510605][ T9316] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1067'.
[  404.525807][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.535816][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.547436][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.566658][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.585478][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.595616][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.610215][ T9319] xt_TPROXY: Can be used only with -p tcp or -p udp
[  404.616863][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.620145][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.633698][ T5137] usb 1-1: Using ep0 maxpacket: 16
[  404.649857][ T5137] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  404.665012][ T5137] usb 1-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config
[  404.672521][ T5083] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  404.697399][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.713309][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.716164][ T5137] usb 1-1: config 0 has no interface number 0
[  404.731146][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.750575][ T5137] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  404.753697][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.784750][ T5137] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  404.785023][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.794193][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  404.813961][ T5137] usb 1-1: Product: syz
[  404.818252][ T5137] usb 1-1: SerialNumber: syz
[  404.825643][ T5137] usb 1-1: config 0 descriptor??
[  404.840276][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.856849][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.871323][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.887671][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.901810][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.978370][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.050354][ T9154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.097752][ T9154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.103226][ T9154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.103263][ T9154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.107174][ T9324] loop2: detected capacity change from 0 to 1764
[  405.434356][ T5137] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  405.513120][ T5137] usb 1-1: USB disconnect, device number 17
[  405.592630][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.631082][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.740313][ T9333] net_ratelimit: 116 callbacks suppressed
[  405.740339][ T9333] dccp_invalid_packet: P.Data Offset(100) too large
[  405.747509][ T3715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.774128][ T3715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.977755][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  406.956601][ T9338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  407.720514][ T9350] loop1: detected capacity change from 0 to 32768
[  407.736787][ T9350] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1079 (9350)
[  407.798046][ T9350] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  407.832319][ T9350] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  407.848906][ T9382] dccp_invalid_packet: P.Data Offset(100) too large
[  407.865166][ T9380] loop4: detected capacity change from 0 to 1764
[  407.874579][ T9350] BTRFS info (device loop1): using free-space-tree
[  408.077668][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.151276][   T29] audit: type=1804 audit(1719289428.471:180): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1079" name="/root/syzkaller.iaAAJn/87/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  408.280627][   T29] audit: type=1804 audit(1719289428.501:181): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1079" name="/root/syzkaller.iaAAJn/87/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  408.574967][ T8000] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  408.791191][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.962377][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.055325][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.209499][   T35] bridge_slave_1: left allmulticast mode
[  409.215206][   T35] bridge_slave_1: left promiscuous mode
[  409.221232][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.231420][   T35] bridge_slave_0: left allmulticast mode
[  409.237112][   T35] bridge_slave_0: left promiscuous mode
[  409.243494][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.815219][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.837538][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.859850][   T35] bond0 (unregistering): Released all slaves
[  410.077274][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  410.272885][ T9418] rdma_rxe: rxe_newlink: failed to add lo
[  410.279041][ T5137] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  410.459475][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'.
[  410.498041][ T5137] usb 2-1: Using ep0 maxpacket: 16
[  410.519079][ T5137] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  410.537370][ T5137] usb 2-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config
[  410.570259][ T5137] usb 2-1: config 0 has no interface number 0
[  410.583018][ T5137] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  410.649818][ T5137] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  410.679620][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  410.731861][ T5137] usb 2-1: Product: syz
[  410.744178][ T5137] usb 2-1: SerialNumber: syz
[  410.768759][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  410.780303][ T9437] dccp_invalid_packet: P.Data Offset(100) too large
[  410.813976][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  410.825835][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  410.826798][ T5137] usb 2-1: config 0 descriptor??
[  410.860513][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  410.875034][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  410.882845][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  410.961601][   T35] hsr_slave_0: left promiscuous mode
[  410.997725][   T35] hsr_slave_1: left promiscuous mode
[  411.018393][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.036344][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.047324][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.060204][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.143793][   T35] veth1_macvtap: left promiscuous mode
[  411.143895][   T35] veth0_macvtap: left promiscuous mode
[  411.144126][   T35] veth1_vlan: left promiscuous mode
[  411.144278][   T35] veth0_vlan: left promiscuous mode
[  411.265745][ T5137] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  411.293742][ T5137] usb 2-1: USB disconnect, device number 24
[  411.897430][ T9447] loop2: detected capacity change from 0 to 1764
[  412.475385][   T35] team0 (unregistering): Port device team_slave_1 removed
[  412.484931][ T9444] loop4: detected capacity change from 0 to 32768
[  412.528099][ T9444] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1099 (9444)
[  412.564130][ T9444] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  412.602422][ T9444] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  412.615475][ T9444] BTRFS info (device loop4): using free-space-tree
[  412.656133][   T35] team0 (unregistering): Port device team_slave_0 removed
[  412.908208][   T29] audit: type=1804 audit(1719289433.231:182): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1099" name="/root/syzkaller.fz66ns/271/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  413.053565][   T29] audit: type=1804 audit(1719289433.261:183): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1099" name="/root/syzkaller.fz66ns/271/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  413.784226][ T9463] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  414.365754][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1098'.
[  414.580348][ T9431] lo speed is unknown, defaulting to 1000
[  414.803280][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'.
[  414.948017][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  415.140262][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.200171][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.228003][    T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  415.268013][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.268674][ T5083] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  415.296664][    T9] usb 2-1: config 0 descriptor??
[  415.316761][    T9] usbhid 2-1:0.0: can't add hid device: -22
[  415.338180][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  415.402565][ T9431] chnl_net:caif_netlink_parms(): no params data found
[  415.696207][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'.
[  415.716334][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.732069][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.751316][ T9431] bridge_slave_0: entered allmulticast mode
[  415.770591][ T9431] bridge_slave_0: entered promiscuous mode
[  415.797722][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.822119][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.840609][ T9431] bridge_slave_1: entered allmulticast mode
[  415.856772][ T9431] bridge_slave_1: entered promiscuous mode
[  415.948290][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.969617][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.025774][ T9431] team0: Port device team_slave_0 added
[  416.056141][ T9431] team0: Port device team_slave_1 added
[  416.102869][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.110420][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  416.154918][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.189416][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.213134][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  416.255121][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.381677][ T9431] hsr_slave_0: entered promiscuous mode
[  416.406339][ T9431] hsr_slave_1: entered promiscuous mode
[  417.192373][ T9500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.205523][   T29] audit: type=1804 audit(1719289437.511:184): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1112" name="/root/syzkaller.MZpDUG/116/bus" dev="sda1" ino=1972 res=1 errno=0
[  417.584481][ T9527] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1115'.
[  417.626156][ T9527] xt_TPROXY: Can be used only with -p tcp or -p udp
[  417.627272][ T9431] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  417.659089][ T5515] usb 2-1: USB disconnect, device number 25
[  417.678654][ T9431] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  417.704021][ T9431] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  417.729301][ T9431] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  417.997990][ T1792] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  418.017201][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.046121][ T9431] 8021q: adding VLAN 0 to HW filter on device team0
[  418.094754][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.102021][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.140353][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.147567][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.187516][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1120'.
[  418.217297][ T1792] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  418.234988][ T1792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.282207][ T1792] usb 1-1: config 0 descriptor??
[  418.432704][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'.
[  418.620252][ T1792] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  418.629330][ T1792] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  418.637592][ T1792] [drm:udl_init] *ERROR* Selecting channel failed
[  418.659680][ T1792] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  418.671891][ T1792] [drm] Initialized udl on minor 2
[  418.682938][ T1792] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  418.702979][ T1792] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  418.721922][ T5515] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  418.737683][ T1792] usb 1-1: USB disconnect, device number 18
[  418.746417][ T5515] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  418.895712][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.035691][ T9533] loop1: detected capacity change from 0 to 32768
[  419.082288][ T9533] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1117 (9533)
[  419.084307][ T9431] veth0_vlan: entered promiscuous mode
[  419.124710][ T9431] veth1_vlan: entered promiscuous mode
[  419.155113][ T9533] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  419.172550][ T9533] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  419.190606][ T9533] BTRFS info (device loop1): using free-space-tree
[  419.259612][ T9431] veth0_macvtap: entered promiscuous mode
[  419.281661][ T9431] veth1_macvtap: entered promiscuous mode
[  419.319815][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.330666][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.343022][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.355682][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.366202][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.377530][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.387687][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.399151][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.410889][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.422100][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.435751][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.450596][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.473218][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.493492][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.515224][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.555734][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.577018][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.597308][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.611956][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.623972][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.635210][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.661610][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.732719][ T9572] wg2: entered promiscuous mode
[  419.770781][ T9572] wg2: entered allmulticast mode
[  419.851466][ T9431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.896962][ T9431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.918973][ T9431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.931337][   T29] audit: type=1804 audit(1719289440.251:185): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1117" name="/root/syzkaller.iaAAJn/92/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  420.003749][ T9431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.046737][   T29] audit: type=1804 audit(1719289440.251:186): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1117" name="/root/syzkaller.iaAAJn/92/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  420.288243][ T9590] loop2: detected capacity change from 0 to 1024
[  420.372059][ T9590] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  420.470207][ T9590] System zones: 0-1, 3-12
[  420.609449][ T9590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.826731][ T9574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  421.170042][ T7656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.216832][ T2823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.257929][ T2823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.394781][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.416166][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.522107][ T9618] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1133'.
[  422.571099][ T9618] xt_TPROXY: Can be used only with -p tcp or -p udp
[  423.139319][ T9631] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1136'.
[  423.384294][ T8000] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  423.604975][ T9635] loop4: detected capacity change from 0 to 1024
[  423.709003][ T9635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  423.747233][ T9635] System zones: 0-1, 3-12
[  423.783366][ T9635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.510605][ T5083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.687114][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.943495][ T9653] wg2: entered promiscuous mode
[  425.004558][ T9653] wg2: entered allmulticast mode
[  425.187275][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.705562][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.862472][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.012217][   T51] bridge_slave_1: left allmulticast mode
[  426.018118][   T51] bridge_slave_1: left promiscuous mode
[  426.023920][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.034086][   T51] bridge_slave_0: left allmulticast mode
[  426.040322][   T51] bridge_slave_0: left promiscuous mode
[  426.046284][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.493391][ T9665] loop1: detected capacity change from 0 to 256
[  426.514416][ T9666] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1147'.
[  426.539252][ T9665] exfat: Deprecated parameter 'namecase'
[  426.545097][ T9665] exfat: Deprecated parameter 'namecase'
[  426.603143][ T9665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  427.080058][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  427.173951][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.192550][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  427.204692][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  427.214975][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  427.224077][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  427.232145][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  427.240965][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  427.282085][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.290938][ T5131] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  427.308712][   T51] bond0 (unregistering): Released all slaves
[  427.340218][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'.
[  427.487882][ T5131] usb 2-1: Using ep0 maxpacket: 16
[  427.519977][ T5131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  427.555833][ T5131] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  427.577689][ T5131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  427.607841][ T5131] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  427.639291][ T9664] loop4: detected capacity change from 0 to 32768
[  427.671315][ T5131] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75
[  427.682240][ T9664] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1148 (9664)
[  427.695304][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5
[  427.705878][ T5131] usb 2-1: SerialNumber: syz
[  427.716550][ T9664] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  427.741451][ T5131] usb-storage 2-1:1.0: USB Mass Storage device detected
[  427.748065][ T5138] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  427.748569][ T9664] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  427.758274][ T9676] lo speed is unknown, defaulting to 1000
[  427.768127][ T9664] BTRFS info (device loop4): using free-space-tree
[  427.790278][ T9682] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1151'.
[  427.800333][ T5131] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1
[  427.849519][ T5131] scsi host1: usb-storage 2-1:1.0
[  427.911320][ T9682] xt_TPROXY: Can be used only with -p tcp or -p udp
[  427.970943][ T5138] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  427.993707][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.051714][ T5138] usb 1-1: config 0 descriptor??
[  428.143396][ T5131] usb 2-1: USB disconnect, device number 26
[  428.157895][   T29] audit: type=1804 audit(1719289448.461:187): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1148" name="/root/syzkaller.fz66ns/286/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  428.241831][   T29] audit: type=1804 audit(1719289448.521:188): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1148" name="/root/syzkaller.fz66ns/286/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  428.492173][ T5138] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  428.499437][ T5138] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[  428.748596][ T5138] usb 1-1: USB disconnect, device number 19
[  428.838816][   T51] hsr_slave_0: left promiscuous mode
[  428.869897][   T51] hsr_slave_1: left promiscuous mode
[  428.876729][ T9708] loop2: detected capacity change from 0 to 1024
[  428.883641][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.898467][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.926371][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  429.008898][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.057944][ T9708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  429.066194][ T9708] System zones: 0-1, 3-12
[  429.117305][   T51] veth1_macvtap: left promiscuous mode
[  429.131816][   T51] veth0_macvtap: left promiscuous mode
[  429.145731][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.160762][   T51] veth1_vlan: left promiscuous mode
[  429.318241][ T5086] Bluetooth: hci0: command tx timeout
[  429.344207][   T51] veth0_vlan: left promiscuous mode
[  429.746889][ T7656] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.878247][ T5138] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  430.103076][ T5138] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  430.120507][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.168983][ T5138] usb 2-1: config 0 descriptor??
[  431.240493][ T9729] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1159'.
[  431.404045][ T5086] Bluetooth: hci0: command tx timeout
[  431.430563][ T5138] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  431.461609][ T5138] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  431.482978][ T5083] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  431.499746][ T5138] [drm:udl_init] *ERROR* Selecting channel failed
[  431.596873][ T5138] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  431.614777][ T5138] [drm] Initialized udl on minor 2
[  431.643278][ T5138] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  431.667578][ T5138] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  431.732525][ T5138] usb 2-1: USB disconnect, device number 27
[  431.739151][    T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  431.774226][    T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  432.071843][ T9741] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1162'.
[  432.174646][ T9741] xt_TPROXY: Can be used only with -p tcp or -p udp
[  432.303632][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'.
[  432.462199][   T29] audit: type=1326 audit(1719289452.781:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc761775d39 code=0x0
[  432.599362][   T51] team0 (unregistering): Port device team_slave_1 removed
[  432.705553][   T51] team0 (unregistering): Port device team_slave_0 removed
[  433.479244][ T5086] Bluetooth: hci0: command tx timeout
[  433.572781][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'.
[  433.582706][ T9732] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  433.619607][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1163'.
[  433.797242][ T9755] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  434.083296][ T9676] chnl_net:caif_netlink_parms(): no params data found
[  434.171594][ T5515] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  434.366552][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.380950][ T5515] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  434.388119][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.397549][ T9676] bridge_slave_0: entered allmulticast mode
[  434.403520][ T5515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.414911][ T9676] bridge_slave_0: entered promiscuous mode
[  434.421335][ T5515] usb 2-1: config 0 descriptor??
[  434.430318][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.453926][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.488138][ T9676] bridge_slave_1: entered allmulticast mode
[  434.508046][ T9676] bridge_slave_1: entered promiscuous mode
[  434.549065][ T5138] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  434.640160][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.671985][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.760309][ T5138] usb 1-1: config 253 has an invalid interface number: 174 but max is 1
[  434.779769][ T5138] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  434.800855][ T9676] team0: Port device team_slave_0 added
[  434.817962][ T5138] usb 1-1: config 253 has 1 interface, different from the descriptor's value: 2
[  434.827194][ T5138] usb 1-1: config 253 has no interface number 0
[  434.840274][ T9676] team0: Port device team_slave_1 added
[  434.846245][ T5138] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  434.867647][ T5515] gs_usb 2-1:0.0: Couldn't get device config: (err=-121)
[  434.884627][ T5515] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[  434.885446][ T5138] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  434.940916][ T5138] usb 1-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  434.953018][ T5138] usb 1-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  434.965652][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.973432][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.007253][ T5138] usb 1-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0
[  435.020653][ T5138] usb 1-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  435.034143][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.045947][ T5138] usb 1-1: config 253 interface 174 has no altsetting 0
[  435.053161][ T5138] usb 1-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e
[  435.065193][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.072415][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.082228][ T5515] usb 2-1: USB disconnect, device number 28
[  435.083769][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.130993][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.335829][ T9676] hsr_slave_0: entered promiscuous mode
[  435.338196][ T5138] usb 1-1: string descriptor 0 read error: -71
[  435.363913][ T9676] hsr_slave_1: entered promiscuous mode
[  435.368425][ T5138] usb 1-1: USB disconnect, device number 20
[  435.406824][ T9776] loop4: detected capacity change from 0 to 32768
[  435.445508][ T9776] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1172 (9776)
[  435.497696][ T9776] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  435.514566][ T9776] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  435.538038][ T9776] BTRFS info (device loop4): using free-space-tree
[  435.557960][ T5086] Bluetooth: hci0: command tx timeout
[  435.578071][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  435.776629][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  435.807126][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.845756][ T9793] loop1: detected capacity change from 0 to 2048
[  435.860570][    T9] usb 3-1: config 0 descriptor??
[  435.889499][ T9793] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  435.903796][ T9793] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  435.917485][   T29] audit: type=1804 audit(1719289456.241:190): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1172" name="/root/syzkaller.fz66ns/291/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  435.966668][ T9793] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  436.030291][   T29] audit: type=1804 audit(1719289456.271:191): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1172" name="/root/syzkaller.fz66ns/291/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  436.056298][ T9793] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  436.103106][ T9793] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  436.124907][ T9793] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  436.236797][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'.
[  436.318975][    T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  436.321794][ T9793] loop1: detected capacity change from 0 to 164
[  436.327684][    T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  436.347973][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  436.367046][    T9] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  436.375170][    T9] [drm] Initialized udl on minor 2
[  436.385223][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  436.393798][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  436.404316][ T5137] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  436.415382][    T9] usb 3-1: USB disconnect, device number 12
[  436.423017][ T5137] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  437.588358][ T9676] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  437.632218][ T9676] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  437.663539][ T9676] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  437.698520][ T9676] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  438.274281][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.479722][ T9676] 8021q: adding VLAN 0 to HW filter on device team0
[  438.572171][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.579511][ T5515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.640352][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.647578][ T5515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.909230][ T9818] loop1: detected capacity change from 0 to 1024
[  438.932834][ T9818] hfsplus: unable to parse mount options
[  439.062390][ T9818] tmpfs: Bad value for 'mpol'
[  439.089200][ T5083] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  439.626699][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.967256][ T9676] veth0_vlan: entered promiscuous mode
[  439.969904][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  440.021431][ T9676] veth1_vlan: entered promiscuous mode
[  440.101660][ T9676] veth0_macvtap: entered promiscuous mode
[  440.134855][ T9676] veth1_macvtap: entered promiscuous mode
[  440.304182][    T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  440.328421][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.349830][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.526697][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  440.533311][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  440.540020][    T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  440.552702][    T9] usb 2-1: config 0 descriptor??
[  440.633343][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.687298][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.769062][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.791087][    T8] usb 5-1: Using ep0 maxpacket: 16
[  441.239884][    T9] gs_usb 2-1:0.0: Couldn't get device config: (err=-121)
[  441.247148][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.259302][    T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[  441.274064][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.284679][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.315489][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  441.342702][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.378625][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.407969][    T8] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=6b.04
[  441.417420][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.431336][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.457942][    T8] usb 5-1: Product: syz
[  441.478261][    T9] usb 2-1: USB disconnect, device number 29
[  441.488063][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.518149][    T8] usb 5-1: Manufacturer: syz
[  441.522812][    T8] usb 5-1: SerialNumber: syz
[  441.567421][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.586654][    T8] usb 5-1: config 0 descriptor??
[  441.599343][    T8] gspca_main: conex-2.14.0 probing 0572:0041
[  441.618397][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.640646][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.663591][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.697100][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.717614][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.748487][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.766168][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.806888][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.827465][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.843232][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.860019][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.915940][ T9676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.935799][ T9676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.959058][ T9676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.975593][ T9676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.058302][    T8] usb 5-1: USB disconnect, device number 35
[  442.256258][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.298019][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.346126][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.388988][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.998480][ T5136] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  443.230723][ T5136] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  443.269519][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.325233][ T5136] usb 2-1: config 0 descriptor??
[  443.670891][ T5136] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  443.684906][ T5136] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  443.695207][ T5136] [drm:udl_init] *ERROR* Selecting channel failed
[  443.736556][ T5136] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  443.745005][ T5136] [drm] Initialized udl on minor 2
[  443.752297][ T5136] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  443.775458][ T5136] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  443.787706][ T5215] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  443.801564][ T5136] usb 2-1: USB disconnect, device number 30
[  443.818517][ T5215] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  443.826505][ T5215] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  444.107742][ T1059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.158499][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'.
[  444.590317][ T1059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.800953][ T1059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.980474][ T1059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.309410][ T1059] bridge_slave_1: left allmulticast mode
[  445.315089][ T1059] bridge_slave_1: left promiscuous mode
[  445.348109][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.390097][ T1059] bridge_slave_0: left allmulticast mode
[  445.395799][ T1059] bridge_slave_0: left promiscuous mode
[  445.418064][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.308498][ T1792] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  446.692131][ T1792] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  446.725261][ T1792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.781347][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.782302][ T1792] usb 1-1: config 0 descriptor??
[  446.816755][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.896993][ T1059] bond0 (unregistering): Released all slaves
[  447.260057][ T1792] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  447.277871][ T1792] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[  447.302996][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  447.328304][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  447.337602][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  447.352331][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  447.361709][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  447.370808][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  447.421647][ T9905] xt_TCPMSS: Only works on TCP SYN packets
[  447.430452][ T5515] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  447.482358][ T1792] usb 1-1: USB disconnect, device number 21
[  447.667391][ T9899] lo speed is unknown, defaulting to 1000
[  447.682532][ T5515] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.716900][ T5515] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  447.748000][ T5515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  447.756063][ T5515] usb 5-1: SerialNumber: syz
[  447.802046][ T5515] cdc_ether 5-1:1.0: skipping garbage
[  447.816988][ T5515] usb 5-1: bad CDC descriptors
[  448.050030][ T5515] usb 5-1: USB disconnect, device number 36
[  448.178484][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[  448.247171][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[  448.307850][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'.
[  449.112349][ T9918] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1211'.
[  449.148632][ T1059] hsr_slave_0: left promiscuous mode
[  449.214262][ T1059] hsr_slave_1: left promiscuous mode
[  449.221313][ T9920] xt_TPROXY: Can be used only with -p tcp or -p udp
[  449.269509][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.308091][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.349237][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.382392][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.426387][ T1059] veth1_macvtap: left promiscuous mode
[  449.432129][ T1059] veth0_macvtap: left promiscuous mode
[  449.438003][ T1059] veth1_vlan: left promiscuous mode
[  449.443375][ T1059] veth0_vlan: left promiscuous mode
[  449.478651][ T5092] Bluetooth: hci0: command tx timeout
[  449.560950][ T9930] loop2: detected capacity change from 0 to 128
[  449.624325][ T9930] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  449.673947][ T9930] ext4 filesystem being mounted at /root/syzkaller.MZpDUG/145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  449.919503][   T29] audit: type=1800 audit(1719289470.251:192): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1214" name="bus" dev="loop2" ino=12 res=0 errno=0
[  449.982837][   T29] audit: type=1800 audit(1719289470.281:193): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1214" name="bus" dev="loop2" ino=12 res=0 errno=0
[  450.038171][ T5137] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  450.051081][ T7656] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  450.240872][ T5137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.275203][ T5137] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  450.302114][ T5137] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  450.320190][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.341147][ T5137] usb 2-1: Product: syz
[  450.345460][ T5137] usb 2-1: Manufacturer: syz
[  450.361532][ T5137] usb 2-1: SerialNumber: syz
[  450.584418][ T9935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  450.647936][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  450.869511][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  450.887891][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.919159][    T9] usb 3-1: config 0 descriptor??
[  451.246889][ T9935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  451.401845][    T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  451.423525][    T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  451.438269][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  451.483414][ T5137] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  451.497263][    T9] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  451.507937][ T5137] cdc_ncm 2-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048
[  451.525560][    T9] [drm] Initialized udl on minor 2
[  451.530928][ T5137] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  451.537701][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  451.558079][ T5092] Bluetooth: hci0: command tx timeout
[  451.565886][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  451.580378][ T5136] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  451.598502][    T9] usb 3-1: USB disconnect, device number 13
[  451.604804][ T5136] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  451.672551][ T1059] team0 (unregistering): Port device team_slave_1 removed
[  451.696070][ T5137] cdc_ncm 2-1:1.0: setting tx_max = 28
[  451.881434][ T1059] team0 (unregistering): Port device team_slave_0 removed
[  453.130306][ T5137] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  453.226396][ T5137] usb 2-1: USB disconnect, device number 31
[  453.252474][ T5137] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  453.347529][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'.
[  453.384923][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'.
[  453.428687][ T5137] ------------[ cut here ]------------
[  453.434301][ T5137] ODEBUG: free active (active state 0) object: ffff88802d8f9180 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xb90
[  453.489022][ T5137] WARNING: CPU: 0 PID: 5137 at lib/debugobjects.c:517 debug_print_object+0x17a/0x1f0
[  453.499044][ T5137] Modules linked in:
[  453.503041][ T5137] CPU: 0 PID: 5137 Comm: kworker/0:6 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
[  453.514864][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  453.526081][ T5137] Workqueue: usb_hub_wq hub_event
[  453.531644][ T5137] RIP: 0010:debug_print_object+0x17a/0x1f0
[  453.537474][ T5137] Code: e8 fb a5 4a fd 4c 8b 0b 48 c7 c7 80 21 1f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 6b 72 aa fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 1c 71 fe 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[  453.557260][ T5137] RSP: 0018:ffffc90004657258 EFLAGS: 00010282
[  453.563400][ T5137] RAX: e38f237ffaa51500 RBX: ffffffff8bc9e420 RCX: 0000000000040000
[  453.571497][ T5137] RDX: ffffc900120b9000 RSI: 000000000002a697 RDI: 000000000002a698
[  453.579579][ T5137] RBP: ffffffff8c1f2300 R08: ffffffff81585742 R09: fffffbfff1c39994
[  453.587601][ T5137] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000000
[  453.595697][ T5137] R13: ffffffff8c1f2218 R14: dffffc0000000000 R15: ffff88802d8f9180
[  453.603758][ T5137] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  453.613481][ T5137] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.620912][ T5137] CR2: 00007fbea30cfd38 CR3: 0000000028f36000 CR4: 00000000003506f0
[  453.628997][ T5137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  453.636981][ T5137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  453.645468][ T5137] Call Trace:
[  453.648925][ T5137]  <TASK>
[  453.651873][ T5137]  ? __warn+0x163/0x4e0
[  453.656049][ T5137]  ? debug_print_object+0x17a/0x1f0
[  453.661348][ T5137]  ? report_bug+0x2b3/0x500
[  453.665880][ T5137]  ? debug_print_object+0x17a/0x1f0
[  453.671298][ T5137]  ? handle_bug+0x3e/0x70
[  453.675639][ T5137]  ? exc_invalid_op+0x1a/0x50
[  453.680439][ T5137]  ? asm_exc_invalid_op+0x1a/0x20
[  453.685514][ T5137]  ? __warn_printk+0x292/0x360
[  453.690417][ T5137]  ? debug_print_object+0x17a/0x1f0
[  453.695675][ T5137]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  453.701730][ T5137]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  453.707668][ T5137]  debug_check_no_obj_freed+0x45b/0x580
[  453.714317][ T5137]  ? lockdep_hardirqs_on+0x99/0x150
[  453.720373][ T5137]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  453.726516][ T5137]  ? device_release+0x99/0x1c0
[  453.731490][ T5137]  kfree+0x10f/0x360
[  453.735431][ T5137]  ? __pfx_netdev_release+0x10/0x10
[  453.740794][ T5137]  device_release+0x99/0x1c0
[  453.745406][ T5137]  kobject_put+0x22f/0x480
[  453.749944][ T5137]  usb_unbind_interface+0x25e/0x940
[  453.755342][ T5137]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  453.761148][ T5137]  ? __pfx_usb_unbind_interface+0x10/0x10
[  453.766900][ T5137]  device_release_driver_internal+0x503/0x7c0
[  453.773137][ T5137]  bus_remove_device+0x34f/0x420
[  453.778136][ T5137]  device_del+0x57a/0x9b0
[  453.782485][ T5137]  ? kfree+0x149/0x360
[  453.786602][ T5137]  ? __pfx_device_del+0x10/0x10
[  453.791562][ T5137]  ? kobject_put+0x44a/0x480
[  453.796206][ T5137]  usb_disable_device+0x3bf/0x850
[  453.801780][ T5137]  usb_disconnect+0x340/0x950
[  453.806516][ T5137]  hub_event+0x1eb9/0x5150
[  453.811069][ T5137]  ? debug_object_deactivate+0x2d5/0x390
[  453.817471][ T5137]  ? __pfx_hub_event+0x10/0x10
[  453.822837][ T5137]  ? __pfx_lock_acquire+0x10/0x10
[  453.828028][ T5137]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  453.834024][ T5137]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  453.840428][ T5137]  ? process_scheduled_works+0x945/0x1830
[  453.846412][ T5137]  process_scheduled_works+0xa2c/0x1830
[  453.852086][ T5137]  ? __pfx_process_scheduled_works+0x10/0x10
[  453.858168][ T5137]  ? assign_work+0x364/0x3d0
[  453.862770][ T5137]  worker_thread+0x86d/0xd70
[  453.867373][ T5137]  ? __kthread_parkme+0x169/0x1d0
[  453.872472][ T5137]  ? __pfx_worker_thread+0x10/0x10
[  453.877586][ T5137]  kthread+0x2f0/0x390
[  453.881760][ T5137]  ? __pfx_worker_thread+0x10/0x10
[  453.886907][ T5137]  ? __pfx_kthread+0x10/0x10
[  453.891609][ T5137]  ret_from_fork+0x4b/0x80
[  453.896052][ T5137]  ? __pfx_kthread+0x10/0x10
[  453.900747][ T5137]  ret_from_fork_asm+0x1a/0x30
[  453.905561][ T5137]  </TASK>
[  453.908790][ T5137] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  453.916094][ T5137] CPU: 0 PID: 5137 Comm: kworker/0:6 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
[  453.926272][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  453.936367][ T5137] Workqueue: usb_hub_wq hub_event
[  453.941427][ T5137] Call Trace:
[  453.944717][ T5137]  <TASK>
[  453.947676][ T5137]  dump_stack_lvl+0x241/0x360
[  453.952380][ T5137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.957598][ T5137]  ? __pfx__printk+0x10/0x10
[  453.962200][ T5137]  ? _printk+0xd5/0x120
[  453.966403][ T5137]  ? vscnprintf+0x5d/0x90
[  453.970748][ T5137]  panic+0x349/0x860
[  453.974661][ T5137]  ? __warn+0x172/0x4e0
[  453.978831][ T5137]  ? __pfx_panic+0x10/0x10
[  453.983260][ T5137]  ? show_trace_log_lvl+0x4e6/0x520
[  453.988504][ T5137]  ? ret_from_fork_asm+0x1a/0x30
[  453.993468][ T5137]  __warn+0x346/0x4e0
[  453.997467][ T5137]  ? debug_print_object+0x17a/0x1f0
[  454.002685][ T5137]  report_bug+0x2b3/0x500
[  454.007037][ T5137]  ? debug_print_object+0x17a/0x1f0
[  454.012256][ T5137]  handle_bug+0x3e/0x70
[  454.016417][ T5137]  exc_invalid_op+0x1a/0x50
[  454.020935][ T5137]  asm_exc_invalid_op+0x1a/0x20
[  454.025815][ T5137] RIP: 0010:debug_print_object+0x17a/0x1f0
[  454.031667][ T5137] Code: e8 fb a5 4a fd 4c 8b 0b 48 c7 c7 80 21 1f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 6b 72 aa fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 1c 71 fe 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[  454.051287][ T5137] RSP: 0018:ffffc90004657258 EFLAGS: 00010282
[  454.057367][ T5137] RAX: e38f237ffaa51500 RBX: ffffffff8bc9e420 RCX: 0000000000040000
[  454.065350][ T5137] RDX: ffffc900120b9000 RSI: 000000000002a697 RDI: 000000000002a698
[  454.073346][ T5137] RBP: ffffffff8c1f2300 R08: ffffffff81585742 R09: fffffbfff1c39994
[  454.081326][ T5137] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000000
[  454.089322][ T5137] R13: ffffffff8c1f2218 R14: dffffc0000000000 R15: ffff88802d8f9180
[  454.097312][ T5137]  ? __warn_printk+0x292/0x360
[  454.102102][ T5137]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  454.108007][ T5137]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  454.113936][ T5137]  debug_check_no_obj_freed+0x45b/0x580
[  454.119513][ T5137]  ? lockdep_hardirqs_on+0x99/0x150
[  454.124778][ T5137]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  454.130886][ T5137]  ? device_release+0x99/0x1c0
[  454.135665][ T5137]  kfree+0x10f/0x360
[  454.139575][ T5137]  ? __pfx_netdev_release+0x10/0x10
[  454.144807][ T5137]  device_release+0x99/0x1c0
[  454.149410][ T5137]  kobject_put+0x22f/0x480
[  454.153846][ T5137]  usb_unbind_interface+0x25e/0x940
[  454.159065][ T5137]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  454.164805][ T5137]  ? __pfx_usb_unbind_interface+0x10/0x10
[  454.170619][ T5137]  device_release_driver_internal+0x503/0x7c0
[  454.176704][ T5137]  bus_remove_device+0x34f/0x420
[  454.181662][ T5137]  device_del+0x57a/0x9b0
[  454.186000][ T5137]  ? kfree+0x149/0x360
[  454.190081][ T5137]  ? __pfx_device_del+0x10/0x10
[  454.194947][ T5137]  ? kobject_put+0x44a/0x480
[  454.199588][ T5137]  usb_disable_device+0x3bf/0x850
[  454.204628][ T5137]  usb_disconnect+0x340/0x950
[  454.209329][ T5137]  hub_event+0x1eb9/0x5150
[  454.213772][ T5137]  ? debug_object_deactivate+0x2d5/0x390
[  454.219452][ T5137]  ? __pfx_hub_event+0x10/0x10
[  454.224227][ T5137]  ? __pfx_lock_acquire+0x10/0x10
[  454.229354][ T5137]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  454.235347][ T5137]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  454.241696][ T5137]  ? process_scheduled_works+0x945/0x1830
[  454.247599][ T5137]  process_scheduled_works+0xa2c/0x1830
[  454.253192][ T5137]  ? __pfx_process_scheduled_works+0x10/0x10
[  454.259200][ T5137]  ? assign_work+0x364/0x3d0
[  454.263806][ T5137]  worker_thread+0x86d/0xd70
[  454.268430][ T5137]  ? __kthread_parkme+0x169/0x1d0
[  454.273471][ T5137]  ? __pfx_worker_thread+0x10/0x10
[  454.278602][ T5137]  kthread+0x2f0/0x390
[  454.282709][ T5137]  ? __pfx_worker_thread+0x10/0x10
[  454.287832][ T5137]  ? __pfx_kthread+0x10/0x10
[  454.292434][ T5137]  ret_from_fork+0x4b/0x80
[  454.296873][ T5137]  ? __pfx_kthread+0x10/0x10
[  454.301478][ T5137]  ret_from_fork_asm+0x1a/0x30
[  454.306277][ T5137]  </TASK>
[  454.309602][ T5137] Kernel Offset: disabled
[  454.314016][ T5137] Rebooting in 86400 seconds..