last executing test programs:

23m7.285043498s ago: executing program 32 (id=90):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmmsg$unix(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0)

19m2.083538366s ago: executing program 33 (id=609):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff78, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040))
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8)
fcntl$setlease(r3, 0x400, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r4)
fcntl$getownex(r3, 0x10, 0x0)

18m54.369896432s ago: executing program 34 (id=621):
socket$nl_route(0x10, 0x3, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x20002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400))

9m28.558985047s ago: executing program 35 (id=2346):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x64, 0x0, 0x9c3fa077fa966179, 0x12, 0x3, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff7}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x4008000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000054)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x1d0, 0x12c, 0xffffffff, 0x12c, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_to_hsr\x00', 'veth1_vlan\x00', 0x0, 0x0, 0x4, 0x7fff, 0xb, 0xcd, {0x4}, {0x8}}}, @common=@ah={{0x30}, {[0x1, 0x1ff], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x1, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @multicast2, @gre_key=0xf, @port=0x4e22}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'geneve1\x00', {}, {0xff}, 0x11, 0x3, 0x2}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010102, @rand_addr=0x64010100, @gre_key=0x8, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e24, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

7m15.192896458s ago: executing program 36 (id=2780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4)

4m48.623820898s ago: executing program 0 (id=3503):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
gettid()
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x300)

4m48.471918966s ago: executing program 0 (id=3505):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1038, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x1008, 0x2, [@TCA_TCINDEX_ACT={0x1004, 0x7, [@m_xt={0x180, 0x17, 0x0, 0x0, {{0x7}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x55, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8"}}]}, {0x68, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1038}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m45.73597348s ago: executing program 7 (id=3515):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
gettid()
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x300)

4m44.877945075s ago: executing program 7 (id=3516):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0)

4m44.659529768s ago: executing program 7 (id=3520):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
epoll_create(0x103)
socket(0x10, 0x3, 0x0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)

4m44.514497041s ago: executing program 7 (id=3522):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x80000000000009, 0x14d080)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macvtap0\x00', 0x8}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00')
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x2000000000000003}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, 0x0)

4m41.874889549s ago: executing program 9 (id=3526):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
gettid()
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x300)

4m41.560933376s ago: executing program 9 (id=3528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @private1, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0xfdef)
unshare(0x2040400)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmmsg(r4, &(0x7f00000029c0), 0x400006d, 0x20000004)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x1, 0x4, 0x2, 0x106936dbc9bdddb1, @empty, @local, 0x10, 0x10, 0x3, 0x9}})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@func={0x5, 0x0, 0x0, 0xc, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x4, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @fwd={0xd}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x4}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000580)=""/116, 0x64, 0x74, 0x1, 0x10000}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x6e, &(0x7f0000000200)=""/110, 0x41100, 0x41, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x10, 0x1b11, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r7, r8, r1, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x84, 0x22880}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
mmap(&(0x7f0000414000/0x1000)=nil, 0x1000, 0x8, 0x3032, 0xffffffffffffffff, 0xffffd000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x2, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'})

4m39.699769229s ago: executing program 1 (id=3531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

4m39.614739968s ago: executing program 0 (id=3532):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
epoll_create(0x103)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)

4m39.361946262s ago: executing program 1 (id=3534):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

4m39.282358801s ago: executing program 7 (id=3535):
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0)

4m39.117512194s ago: executing program 1 (id=3537):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8c5863, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101a42, 0x15)
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c)
r1 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001640)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc3e2f21ddee78722, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfshat={'smackfshat', 0x3d, '::^'}}]}})
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000100), 0xc3a, 0x680c1)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000480)={&(0x7f0000000400)=[{0x5, 0x10, 0x1, &(0x7f0000000140)="bb"}, {0x92e0, 0xc00, 0x0, 0x0}], 0x2})
syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)

4m38.464025253s ago: executing program 9 (id=3538):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
gettid()
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x24, 0x11, 0x0, 0x1, [@nested={0x1f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f"]}]}]}, 0x38}], 0x1}, 0x300)

4m37.519442879s ago: executing program 0 (id=3539):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
syz_init_net_socket$ax25(0x3, 0x3, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}], 0x28}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

4m34.728647101s ago: executing program 1 (id=3540):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0xb, 0x1, 0xb57, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'})

4m34.457613544s ago: executing program 0 (id=3541):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x7, 0x5, 0x9, 0x428, 0x2, 0xffffffffffffffff, 0xf423f, 0x0, 0x7, 0x4, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000036000701fcffffff000081ae011ef1d708a11b"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000400), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4m34.321861226s ago: executing program 9 (id=3543):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0)

4m33.935343528s ago: executing program 9 (id=3544):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)

4m33.278288609s ago: executing program 1 (id=3546):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

4m33.267418173s ago: executing program 9 (id=3547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c20000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a)

4m32.647855052s ago: executing program 1 (id=3548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25080000001400080064756d6d793000"/34], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xd, 0x9, 0x800, 0x0, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x10, 0x10, 0xff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r10, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r12 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r12, 0x0, 0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
write$tun(r9, &(0x7f00000000c0)={@val={0x8, 0x6007}, @val={0x7, 0x3, 0x7, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36)

4m32.333914386s ago: executing program 7 (id=3549):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
epoll_create(0x103)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)

4m30.792333042s ago: executing program 0 (id=3550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8c5863, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101a42, 0x15)
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c)
r1 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001640)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc3e2f21ddee78722, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfshat={'smackfshat', 0x3d, '::^'}}]}})
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000100), 0xc3a, 0x680c1)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000480)={&(0x7f0000000400)=[{0x5, 0x10, 0x1, &(0x7f0000000140)="bb"}, {0x92e0, 0xc00, 0x0, 0x0}], 0x2})
syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)

4m17.989397904s ago: executing program 37 (id=3547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c20000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a)

4m17.46014717s ago: executing program 38 (id=3548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25080000001400080064756d6d793000"/34], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xd, 0x9, 0x800, 0x0, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x10, 0x10, 0xff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r10, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r12 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r12, 0x0, 0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
write$tun(r9, &(0x7f00000000c0)={@val={0x8, 0x6007}, @val={0x7, 0x3, 0x7, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36)

4m16.950687926s ago: executing program 39 (id=3549):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
epoll_create(0x103)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)

4m15.384190646s ago: executing program 40 (id=3550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8c5863, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101a42, 0x15)
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c)
r1 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001640)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc3e2f21ddee78722, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfshat={'smackfshat', 0x3d, '::^'}}]}})
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000100), 0xc3a, 0x680c1)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000480)={&(0x7f0000000400)=[{0x5, 0x10, 0x1, &(0x7f0000000140)="bb"}, {0x92e0, 0xc00, 0x0, 0x0}], 0x2})
syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)

2m41.129125032s ago: executing program 4 (id=3955):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000001c00), 0x4)
r4 = socket(0x29, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x119, 0x22, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001a40)="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", 0x142}, {&(0x7f0000000d00)="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", 0x270}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @remote}, 0x10)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000980)={@loopback, r6}, 0x14)
sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, 0xf, 0x6, 0xb81, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

2m40.195346348s ago: executing program 4 (id=3959):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x2c}}, 0x0)

2m39.899469937s ago: executing program 4 (id=3962):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x8000400)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES8=r0], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000005740), 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
unshare(0x60050100)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x2, 0x1, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x4, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x2}, 0x1, 0x1}], 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}}, 0x8)

2m39.318324479s ago: executing program 4 (id=3968):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff0500"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)

2m38.472030631s ago: executing program 4 (id=3973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

2m37.669349831s ago: executing program 4 (id=3980):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5)

2m22.167208331s ago: executing program 41 (id=3980):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5)

29.296350402s ago: executing program 3 (id=4359):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket(0x1e, 0x4, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

28.845228443s ago: executing program 3 (id=4365):
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

27.240187165s ago: executing program 3 (id=4370):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030003ae41d8c327bd700000000006010009000000000000000200750000fff0000800000000000000"], 0x30}, 0x1, 0x7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000580)={r4, 0x11, "62d0cfbf4ada5851dbfac5fe263ba5277b"}, &(0x7f0000000600)=0x19)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5}, 0x90)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)

26.968878158s ago: executing program 3 (id=4375):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfff7fffe, 0xfc, "268be1c8e80b598c3640000800"})
r1 = syz_open_pts(r0, 0x141601)
close(0x3)
fcntl$setstatus(r1, 0x4, 0x102800)

26.695877626s ago: executing program 3 (id=4378):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840)
write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="610507070305025da6fc0ebc7772b59056a8246544c6d92da360934ef236c273849d"], 0x18e)

26.267763592s ago: executing program 3 (id=4381):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setattr(0x0, 0x0, 0x0)

16.655492636s ago: executing program 5 (id=4406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)

16.567477895s ago: executing program 8 (id=4408):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000091)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd0000"], 0x184}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r4=>0x0, 0x29, 0x10, 0xbe, 0xdd0d, 0x2, @mcast2, @mcast2, 0x20, 0x80, 0x3, 0x5}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082dbd7000fcdbdf250200000008000800921414aa060001004e24000008000b00", @ANYRES32=r3, @ANYBLOB='\b\x00\v\x00', @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc041}, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

14.633567451s ago: executing program 8 (id=4414):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x11c}}, 0x0)

14.59096682s ago: executing program 5 (id=4415):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket(0x1e, 0x4, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

14.347444928s ago: executing program 8 (id=4417):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="91", 0x1}], 0x1}, 0x2004c885)
sendto$inet(r0, &(0x7f0000000800)="89376f", 0x3, 0xc09e, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

14.298524079s ago: executing program 5 (id=4418):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109", @ANYRES64], 0x0)

12.071364235s ago: executing program 8 (id=4421):
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe80000000000000000000"], 0xb8}}, 0x0)

11.707370186s ago: executing program 2 (id=4423):
socket(0xa, 0x5, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x13c)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="fc", 0x7}])

11.700124019s ago: executing program 8 (id=4424):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)

9.822478404s ago: executing program 8 (id=4425):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000091)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd0000"], 0x184}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
close(0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r6=>0x0, 0x29, 0x10, 0xbe, 0xdd0d, 0x2, @mcast2, @mcast2, 0x20, 0x80, 0x3, 0x5}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082dbd7000fcdbdf250200000008000800921414aa060001004e24000008000b00", @ANYRES32=r5, @ANYBLOB='\b\x00\v\x00', @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc041}, 0x40)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.749382653s ago: executing program 42 (id=4381):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setattr(0x0, 0x0, 0x0)

8.54341897s ago: executing program 5 (id=4428):
syz_usb_connect(0x4, 0x36, &(0x7f00000006c0)=ANY=[], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xd, 0x8, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x0, 0xf439})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0})

8.391507429s ago: executing program 2 (id=4429):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

8.044079789s ago: executing program 6 (id=4430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xf, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986f6", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

7.071911969s ago: executing program 2 (id=4431):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}, [@IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

6.952454272s ago: executing program 6 (id=4432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0xa)

4.994990759s ago: executing program 5 (id=4433):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000002680)="e7", 0x1)

4.990640123s ago: executing program 6 (id=4434):
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe80000000000000000000"], 0xb8}}, 0x0)

4.818917588s ago: executing program 2 (id=4435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000100299d7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200241e0100140003006e657464657673696d3000000000000014001680100001800c0005"], 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x0)

4.509676369s ago: executing program 6 (id=4436):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000054)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x3e4, 0x1d0, 0x12c, 0xffffffff, 0x12c, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x104, 0x12c, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_to_hsr\x00', 'veth1_vlan\x00', 0x0, 0x0, 0x4, 0x7fff, 0xb, 0xcd, {0x4}, {0x8}}}, @common=@ah={{0x2c}, {[0x1, 0x1ff], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x1, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @multicast2, @gre_key=0xf, @port=0x4e22}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'geneve1\x00', {}, {0xff}, 0x11, 0x3, 0x2}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010102, @rand_addr=0x64010100, @gre_key=0x8, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e24, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x440)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40000032, r5, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(r7, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})

4.360066051s ago: executing program 2 (id=4437):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109", @ANYRES64], 0x0)

1.648326371s ago: executing program 6 (id=4438):
socket(0xa, 0x5, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x13c)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="fc", 0x7}])

272.63273ms ago: executing program 5 (id=4439):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x40000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1)

78.797262ms ago: executing program 6 (id=4440):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@broadcast, @multicast2, @dev}, &(0x7f00000000c0)=0xc)
r1 = syz_open_procfs(0x0, 0x0)
read$FUSE(r1, &(0x7f0000006200)={0x2020}, 0x2020)
pread64(r1, &(0x7f0000000180)=""/220, 0xdc, 0x7)
read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x0, 0x7fff0001}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0xed, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0xed, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0xed, 0x7fff0000}]})

0s ago: executing program 2 (id=4441):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xf, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986f6", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

kernel console output (not intermixed with test programs):

427][   T69] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.187800][   T69] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.188970][   T69] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.781168][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.781191][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.893275][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.893299][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1021.871656][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2515'.
[ 1022.038897][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'.
[ 1026.326139][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'.
[ 1030.332474][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2547'.
[ 1037.352955][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'.
[ 1037.476231][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2575'.
[ 1040.984897][T13759] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1041.137399][T13759] usb 7-1: Using ep0 maxpacket: 32
[ 1041.139998][T13759] usb 7-1: config 91 has an invalid interface number: 102 but max is 0
[ 1041.140033][T13759] usb 7-1: config 91 has no interface number 0
[ 1041.151785][T13759] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1041.151867][T13759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.151921][T13759] usb 7-1: Product: syz
[ 1041.151961][T13759] usb 7-1: Manufacturer: syz
[ 1041.152002][T13759] usb 7-1: SerialNumber: syz
[ 1041.444150][T13759] ems_usb 7-1:91.102 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[ 1041.444513][T13759] ems_usb 7-1:91.102: probe with driver ems_usb failed with error -22
[ 1041.521515][T13759] usb 7-1: USB disconnect, device number 19
[ 1043.223530][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2601'.
[ 1043.489300][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2603'.
[ 1046.338155][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'.
[ 1046.414479][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2620'.
[ 1048.326270][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2624'.
[ 1048.647114][T14845] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2626'.
[ 1049.725596][T14865] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2631'.
[ 1054.697877][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.109175][T14976] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2664'.
[ 1056.651319][T14986] netlink: 'syz.8.2666': attribute type 1 has an invalid length.
[ 1056.651652][T14986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1061.292248][T15070] netlink: 'syz.6.2691': attribute type 13 has an invalid length.
[ 1061.292271][T15070] netlink: 'syz.6.2691': attribute type 17 has an invalid length.
[ 1061.391681][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2691'.
[ 1061.819300][T15070] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1061.821427][T15070] 8021q: adding VLAN 0 to HW filter on device team0
[ 1061.919072][T15070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1062.271539][T15088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2698'.
[ 1063.890165][T13268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1063.914500][T13268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1063.917824][T13268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1063.934094][T13268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1063.942184][T13268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1066.005313][T13268] Bluetooth: hci1: command tx timeout
[ 1066.154909][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1066.309566][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1066.332570][    T9] usb 1-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.344172][    T9] usb 1-1: New USB device found, idVendor=0856, idProduct=bc03, bcdDevice=43.29
[ 1066.344256][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.344309][    T9] usb 1-1: Product: syz
[ 1066.344357][    T9] usb 1-1: Manufacturer: syz
[ 1066.344399][    T9] usb 1-1: SerialNumber: syz
[ 1066.626224][    T9] mos7840 1-1:247.0: required endpoints missing
[ 1066.836333][ T9390] usb 1-1: USB disconnect, device number 5
[ 1066.934638][ T1419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1067.278502][ T1419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1067.965627][ T1419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1068.044384][T15102] chnl_net:caif_netlink_parms(): no params data found
[ 1068.087229][T13268] Bluetooth: hci1: command tx timeout
[ 1068.486151][ T1419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1068.522247][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2733'.
[ 1068.847109][T13776] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1068.929450][T15225] netlink: 'syz.6.2735': attribute type 1 has an invalid length.
[ 1068.929499][T15225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1068.992070][T15102] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.994247][T15102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.994455][T15102] bridge_slave_0: entered allmulticast mode
[ 1069.007525][T13776] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1069.024167][T13776] usb 1-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.037118][T13776] usb 1-1: New USB device found, idVendor=0856, idProduct=bc03, bcdDevice=43.29
[ 1069.037141][T13776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.037156][T13776] usb 1-1: Product: syz
[ 1069.037166][T13776] usb 1-1: Manufacturer: syz
[ 1069.037177][T13776] usb 1-1: SerialNumber: syz
[ 1069.100281][T15102] bridge_slave_0: entered promiscuous mode
[ 1069.413786][T13776] mos7840 1-1:247.0: required endpoints missing
[ 1069.584381][T15102] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1069.584509][T15102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.603381][T15102] bridge_slave_1: entered allmulticast mode
[ 1069.616718][T15102] bridge_slave_1: entered promiscuous mode
[ 1069.621807][T13776] usb 1-1: USB disconnect, device number 6
[ 1069.648483][ T1457] netdevsim netdevsim1 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.882192][ T1127] netdevsim netdevsim1 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.957260][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1069.960216][ T1127] netdevsim netdevsim1 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.012037][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1070.164954][T13268] Bluetooth: hci1: command tx timeout
[ 1070.247995][ T3599] netdevsim netdevsim1 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.271577][T15102] team0: Port device team_slave_0 added
[ 1070.300783][T15102] team0: Port device team_slave_1 added
[ 1071.453468][ T1419] bond0 (unregistering): Released all slaves
[ 1071.921514][ T1419] IPVS: stopping master sync thread 10560 ...
[ 1072.245105][T13268] Bluetooth: hci1: command tx timeout
[ 1083.735107][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2745'.
[ 1083.746388][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1083.746438][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.746511][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1084.008098][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.008117][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.008147][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.460123][T15302] netlink: 'syz.7.2754': attribute type 1 has an invalid length.
[ 1084.460308][T15302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1085.434256][T15102] hsr_slave_0: entered promiscuous mode
[ 1085.463229][T15102] hsr_slave_1: entered promiscuous mode
[ 1085.466155][T15102] debugfs: 'hsr0' already exists in 'hsr'
[ 1085.466229][T15102] Cannot create hsr debugfs directory
[ 1085.726127][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'.
[ 1100.140898][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[ 1100.598206][T15382] netlink: 'syz.0.2773': attribute type 1 has an invalid length.
[ 1100.598247][T15382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1101.629375][T15102] netdevsim netdevsim1 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.992862][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2781'.
[ 1103.063736][ T1419] IPVS: stop unused estimator thread 0...
[ 1103.103825][T15102] netdevsim netdevsim1 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1106.400943][T15457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'.
[ 1107.936591][T13268] Bluetooth: hci0: command 0x0406 tx timeout
[ 1116.098806][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.934205][T13268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1116.979482][T13268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1116.980776][T13268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1116.981867][T13268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1116.982910][T13268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1117.245406][T15435] tipc: Started in network mode
[ 1117.245441][T15435] tipc: Node identity 6ea534a30b2c, cluster identity 4711
[ 1117.245629][T15435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1117.271222][T15438] tipc: Resetting bearer <eth:syzkaller0>
[ 1117.549851][T15102] netdevsim netdevsim1 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.830374][T15432] tipc: Disabling bearer <eth:syzkaller0>
[ 1117.969080][T15478] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2797'.
[ 1119.405070][ T5808] Bluetooth: hci4: command tx timeout
[ 1120.438613][T15102] netdevsim netdevsim1 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.560503][T15510] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2807'.
[ 1120.679441][T15513] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1121.444964][ T5808] Bluetooth: hci4: command tx timeout
[ 1121.487302][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'.
[ 1122.988596][T15558] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2815'.
[ 1123.162317][T15102] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1123.193622][T15575] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1123.477291][T15102] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1123.524922][ T5808] Bluetooth: hci4: command tx timeout
[ 1123.709638][T15102] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1123.852372][T15462] chnl_net:caif_netlink_parms(): no params data found
[ 1124.125752][T13268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1124.144546][T13268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1124.170950][T13268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1124.183068][T13268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1124.184359][T13268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1124.785111][T15462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1124.785382][T15462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1124.785635][T15462] bridge_slave_0: entered allmulticast mode
[ 1124.789242][T15462] bridge_slave_0: entered promiscuous mode
[ 1124.792845][T15462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1124.793061][T15462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1124.793246][T15462] bridge_slave_1: entered allmulticast mode
[ 1124.804087][T15462] bridge_slave_1: entered promiscuous mode
[ 1125.057449][T15626] netlink: 'syz.7.2831': attribute type 9 has an invalid length.
[ 1125.471021][T15462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1125.604846][ T5808] Bluetooth: hci4: command tx timeout
[ 1125.798130][T15462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1126.107841][T15645] bond1: option miimon: invalid value (18446744073709551607)
[ 1126.107867][T15645] bond1: option miimon: allowed values 0 - 2147483647
[ 1126.180561][T15645] bond1 (unregistering): Released all slaves
[ 1126.245702][ T5808] Bluetooth: hci2: command tx timeout
[ 1126.287899][T15462] team0: Port device team_slave_0 added
[ 1126.344016][T15462] team0: Port device team_slave_1 added
[ 1127.189746][T15462] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1127.189765][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1127.189795][T15462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1127.193268][T15673] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2846'.
[ 1127.290275][T15462] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1127.290294][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1127.290324][T15462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1128.205972][T15688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1128.205991][T15688] IPv6: NLM_F_CREATE should be set when creating new route
[ 1128.206049][T15688] IPv6: NLM_F_CREATE should be set when creating new route
[ 1128.206083][T15688] IPv6: NLM_F_CREATE should be set when creating new route
[ 1128.325013][ T5808] Bluetooth: hci2: command tx timeout
[ 1128.343620][T15692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2853'.
[ 1128.385750][T15462] hsr_slave_0: entered promiscuous mode
[ 1128.392476][T15462] hsr_slave_1: entered promiscuous mode
[ 1128.393450][T15462] debugfs: 'hsr0' already exists in 'hsr'
[ 1128.393477][T15462] Cannot create hsr debugfs directory
[ 1128.898059][   T12] netdevsim netdevsim1 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.063947][   T12] netdevsim netdevsim1 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.197537][T15604] chnl_net:caif_netlink_parms(): no params data found
[ 1129.212645][ T1114] netdevsim netdevsim1 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.225562][T15712] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1129.367537][T15715] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2862'.
[ 1129.498475][   T12] netdevsim netdevsim1 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.558861][ T3599] bridge_slave_1: left allmulticast mode
[ 1129.558883][ T3599] bridge_slave_1: left promiscuous mode
[ 1129.559058][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.646188][ T3599] bridge_slave_0: left allmulticast mode
[ 1129.646212][ T3599] bridge_slave_0: left promiscuous mode
[ 1129.646418][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1130.016171][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1130.135775][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1130.217667][ T3599] bond0 (unregistering): Released all slaves
[ 1130.420745][ T5808] Bluetooth: hci2: command tx timeout
[ 1130.997039][ T3599] hsr_slave_0: left promiscuous mode
[ 1131.056257][ T3599] hsr_slave_1: left promiscuous mode
[ 1131.057311][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1131.106257][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1131.565895][ T3599] team0 (unregistering): Port device team_slave_1 removed
[ 1131.616495][ T3599] team0 (unregistering): Port device team_slave_0 removed
[ 1131.900103][T15604] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1131.900236][T15604] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1131.900474][T15604] bridge_slave_0: entered allmulticast mode
[ 1131.903199][T15604] bridge_slave_0: entered promiscuous mode
[ 1132.107499][T15604] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.107702][T15604] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.107946][T15604] bridge_slave_1: entered allmulticast mode
[ 1132.141495][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2881'.
[ 1132.142817][T15604] bridge_slave_1: entered promiscuous mode
[ 1132.761200][ T5808] Bluetooth: hci2: command tx timeout
[ 1132.791910][T15777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1133.664926][T15462] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1133.802798][T15604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1133.813747][T15462] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1133.879388][T15604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1133.937619][T15462] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1134.107383][T15462] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1134.176639][T15604] team0: Port device team_slave_0 added
[ 1134.284592][T15604] team0: Port device team_slave_1 added
[ 1134.408143][T15604] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1134.408159][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.408184][T15604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1134.467924][T15604] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1134.467946][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.467979][T15604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1134.801819][T15604] hsr_slave_0: entered promiscuous mode
[ 1134.803280][T15604] hsr_slave_1: entered promiscuous mode
[ 1134.804223][T15604] debugfs: 'hsr0' already exists in 'hsr'
[ 1134.804250][T15604] Cannot create hsr debugfs directory
[ 1136.419577][T15604] netdevsim netdevsim1 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.441049][T15462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1137.479019][T15462] 8021q: adding VLAN 0 to HW filter on device team0
[ 1137.603917][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1137.627911][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1137.653255][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1137.653402][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1137.994510][T15604] netdevsim netdevsim1 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.279510][T15604] netdevsim netdevsim1 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1139.037752][T15604] netdevsim netdevsim1 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1139.074863][T15864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1139.203225][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1141.152705][T15604] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1142.028762][T15604] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1142.343949][T15604] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1142.412010][T15604] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1142.870933][T15462] veth0_vlan: entered promiscuous mode
[ 1142.983238][T15462] veth1_vlan: entered promiscuous mode
[ 1143.494542][T15462] veth0_macvtap: entered promiscuous mode
[ 1143.681088][T15604] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1144.145999][T15462] veth1_macvtap: entered promiscuous mode
[ 1144.237649][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1144.327647][T15604] 8021q: adding VLAN 0 to HW filter on device team0
[ 1144.374631][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1144.454369][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1144.454510][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1144.495914][ T1457] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1144.495968][ T1457] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1144.496008][ T1457] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1144.496045][ T1457] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1144.557775][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1144.557985][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1144.983857][T15958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1146.778326][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1146.778349][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.009285][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.009309][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.394113][T15604] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1147.556452][T15604] veth0_vlan: entered promiscuous mode
[ 1147.565329][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2793'.
[ 1148.716699][T15604] veth1_vlan: entered promiscuous mode
[ 1149.105476][T15604] veth0_macvtap: entered promiscuous mode
[ 1149.128293][T15604] veth1_macvtap: entered promiscuous mode
[ 1150.010317][T15604] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1150.042217][T15604] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1150.097993][ T1227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.163178][ T1227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.221027][ T1227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.222593][ T1227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.513564][T16032] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2930'.
[ 1150.555992][T16032] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1151.181817][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.181841][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1151.405591][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.405616][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1152.592520][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2938'.
[ 1155.823949][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2951'.
[ 1164.313484][T16262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3009'.
[ 1164.327388][T16262] IPVS: Error connecting to the multicast addr
[ 1164.338507][T16267] team_slave_0: entered promiscuous mode
[ 1164.338557][T16267] team_slave_1: entered promiscuous mode
[ 1164.355847][T16265] team_slave_0: left promiscuous mode
[ 1164.355956][T16265] team_slave_1: left promiscuous mode
[ 1166.278056][T16307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3025'.
[ 1166.541930][T16315] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1168.258616][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3040'.
[ 1168.455892][T16344] IPVS: Error connecting to the multicast addr
[ 1170.215034][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3054'.
[ 1170.218416][T16381] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1170.520381][T16388] syz_tun: entered allmulticast mode
[ 1171.061782][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3067'.
[ 1174.663649][T16461] syzkaller1: entered promiscuous mode
[ 1174.663679][T16461] syzkaller1: entered allmulticast mode
[ 1174.712441][T16473] syz_tun: entered allmulticast mode
[ 1175.869512][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3099'.
[ 1176.398421][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3102'.
[ 1176.500007][T16511] syz_tun: entered allmulticast mode
[ 1177.596391][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.422539][T16535] syzkaller1: entered promiscuous mode
[ 1178.422568][T16535] syzkaller1: entered allmulticast mode
[ 1178.479232][ T5958] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1178.504037][T16545] netlink: 'syz.9.3117': attribute type 13 has an invalid length.
[ 1178.504064][T16545] netlink: 'syz.9.3117': attribute type 17 has an invalid length.
[ 1178.614882][ T5958] usb 8-1: device descriptor read/64, error -71
[ 1178.854917][ T5958] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1178.985014][ T5958] usb 8-1: device descriptor read/64, error -71
[ 1179.072066][T16544] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.082002][T16544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.095374][ T5958] usb usb8-port1: attempt power cycle
[ 1179.445802][ T5958] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[ 1179.467808][ T5958] usb 8-1: device descriptor read/8, error -71
[ 1179.705225][ T5958] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[ 1179.726653][ T5958] usb 8-1: device descriptor read/8, error -71
[ 1179.840370][ T5958] usb usb8-port1: unable to enumerate USB device
[ 1180.038203][T16544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1180.100413][T16544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1181.387255][T16573] netlink: 'syz.7.3120': attribute type 1 has an invalid length.
[ 1181.387302][T16573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1182.353759][T16545] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1182.369077][T16545] 8021q: adding VLAN 0 to HW filter on device team0
[ 1182.435540][T16545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1182.611001][ T1127] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.625177][T16586] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3124'.
[ 1182.749420][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3126'.
[ 1182.796051][ T1127] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.840579][ T1127] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.842562][   T57] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1183.324222][T16601] syzkaller1: entered promiscuous mode
[ 1183.324249][T16601] syzkaller1: entered allmulticast mode
[ 1183.794866][T13758] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1183.945956][T13758] usb 2-1: Using ep0 maxpacket: 32
[ 1183.947598][T13758] usb 2-1: no configurations
[ 1183.947624][T13758] usb 2-1: can't read configurations, error -22
[ 1183.999178][T16618] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3137'.
[ 1184.074827][T13758] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1184.082689][ T5808] Bluetooth: hci2: link tx timeout
[ 1184.083092][ T5808] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1184.224851][T13758] usb 2-1: Using ep0 maxpacket: 32
[ 1184.228101][T13758] usb 2-1: no configurations
[ 1184.228116][T13758] usb 2-1: can't read configurations, error -22
[ 1184.228497][T13758] usb usb2-port1: attempt power cycle
[ 1184.370881][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3141'.
[ 1184.588621][T13758] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1184.596689][T16632] netlink: 'syz.0.3142': attribute type 1 has an invalid length.
[ 1184.596767][T16632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1184.625586][T13758] usb 2-1: Using ep0 maxpacket: 32
[ 1184.626382][T13758] usb 2-1: no configurations
[ 1184.626397][T13758] usb 2-1: can't read configurations, error -22
[ 1184.755012][T13758] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1184.775897][T13758] usb 2-1: Using ep0 maxpacket: 32
[ 1184.777026][T13758] usb 2-1: no configurations
[ 1184.777044][T13758] usb 2-1: can't read configurations, error -22
[ 1184.777743][T13758] usb usb2-port1: unable to enumerate USB device
[ 1185.361790][T16642] syzkaller1: entered promiscuous mode
[ 1185.361810][T16642] syzkaller1: entered allmulticast mode
[ 1185.635467][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3149'.
[ 1185.635488][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3149'.
[ 1185.745129][T16648] syz_tun: entered allmulticast mode
[ 1186.164937][ T5808] Bluetooth: hci2: command 0x0406 tx timeout
[ 1186.395151][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3155'.
[ 1186.936871][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'.
[ 1186.936900][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'.
[ 1187.122174][T16678] syzkaller1: entered promiscuous mode
[ 1187.122200][T16678] syzkaller1: entered allmulticast mode
[ 1187.779731][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'.
[ 1188.085318][T16706] netlink: 'syz.1.3171': attribute type 1 has an invalid length.
[ 1188.085359][T16706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1188.110118][T16556] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1188.217547][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3173'.
[ 1188.341934][T16556] usb 1-1: Using ep0 maxpacket: 32
[ 1188.342784][T16556] usb 1-1: no configurations
[ 1188.342806][T16556] usb 1-1: can't read configurations, error -22
[ 1188.507160][T16556] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1188.573232][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3174'.
[ 1188.573259][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3174'.
[ 1188.664940][T16556] usb 1-1: Using ep0 maxpacket: 32
[ 1188.666319][T16556] usb 1-1: no configurations
[ 1188.666337][T16556] usb 1-1: can't read configurations, error -22
[ 1188.666728][T16556] usb usb1-port1: attempt power cycle
[ 1189.024929][T16556] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1189.053362][T16556] usb 1-1: Using ep0 maxpacket: 32
[ 1189.054470][T16556] usb 1-1: no configurations
[ 1189.054489][T16556] usb 1-1: can't read configurations, error -22
[ 1189.299612][T16556] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1189.834529][T16556] usb 1-1: Using ep0 maxpacket: 32
[ 1189.837200][T16556] usb 1-1: no configurations
[ 1189.837221][T16556] usb 1-1: can't read configurations, error -22
[ 1189.837572][T16556] usb usb1-port1: unable to enumerate USB device
[ 1190.353231][T16728] syzkaller1: entered promiscuous mode
[ 1190.353259][T16728] syzkaller1: entered allmulticast mode
[ 1192.345863][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3188'.
[ 1193.966122][T16760] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1198.899877][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3201'.
[ 1199.224878][ T5958] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1199.595894][ T5958] usb 2-1: Using ep0 maxpacket: 32
[ 1200.575588][ T5958] usb 2-1: no configurations
[ 1200.575608][ T5958] usb 2-1: can't read configurations, error -22
[ 1200.770347][ T5958] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1201.565004][ T5958] usb 2-1: Using ep0 maxpacket: 32
[ 1201.566087][ T5958] usb 2-1: no configurations
[ 1201.566105][ T5958] usb 2-1: can't read configurations, error -22
[ 1201.566621][ T5958] usb usb2-port1: attempt power cycle
[ 1201.782198][T16826] netlink: 'syz.8.3203': attribute type 1 has an invalid length.
[ 1201.782243][T16826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1201.974814][ T5958] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1201.996578][ T5958] usb 2-1: Using ep0 maxpacket: 32
[ 1201.997623][ T5958] usb 2-1: no configurations
[ 1201.997641][ T5958] usb 2-1: can't read configurations, error -22
[ 1202.124876][ T5958] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1202.145732][ T5958] usb 2-1: Using ep0 maxpacket: 32
[ 1202.146546][ T5958] usb 2-1: no configurations
[ 1202.146563][ T5958] usb 2-1: can't read configurations, error -22
[ 1202.146910][ T5958] usb usb2-port1: unable to enumerate USB device
[ 1204.365276][T16847] syzkaller0: entered promiscuous mode
[ 1204.365303][T16847] syzkaller0: entered allmulticast mode
[ 1205.037135][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3218'.
[ 1208.606382][T16863] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1208.606427][T16863] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1208.606449][T16863] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1209.144811][ T5813] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1209.294875][ T5813] usb 2-1: Using ep0 maxpacket: 32
[ 1209.297162][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.297208][ T5813] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1209.300169][ T5813] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1209.300202][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.300223][ T5813] usb 2-1: Product: syz
[ 1209.300239][ T5813] usb 2-1: Manufacturer: syz
[ 1209.300255][ T5813] usb 2-1: SerialNumber: syz
[ 1209.379552][ T5813] usb 2-1: config 0 descriptor??
[ 1209.795220][ T5813] usb 2-1: USB disconnect, device number 14
[ 1215.360242][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'.
[ 1215.568477][T16913] syzkaller0: entered promiscuous mode
[ 1215.568506][T16913] syzkaller0: entered allmulticast mode
[ 1216.137436][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3242'.
[ 1216.459791][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3245'.
[ 1216.966717][T16556] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1217.068675][T16955] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1217.180214][T16556] usb 9-1: Using ep0 maxpacket: 32
[ 1217.197719][T16556] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1217.197740][T16556] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1217.228636][T16556] usb 9-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1217.228674][T16556] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.228690][T16556] usb 9-1: Product: syz
[ 1217.228700][T16556] usb 9-1: Manufacturer: syz
[ 1217.228711][T16556] usb 9-1: SerialNumber: syz
[ 1217.265852][T16556] usb 9-1: config 0 descriptor??
[ 1217.485567][T13758] usb 9-1: USB disconnect, device number 2
[ 1217.699033][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3255'.
[ 1217.728774][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3254'.
[ 1218.576658][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3259'.
[ 1219.281778][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'.
[ 1219.553085][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3272'.
[ 1219.635398][T16556] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1219.808004][T16556] usb 1-1: Using ep0 maxpacket: 32
[ 1219.814567][T16556] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.814603][T16556] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1219.843042][T16556] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1219.843083][T16556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.843104][T16556] usb 1-1: Product: syz
[ 1219.843119][T16556] usb 1-1: Manufacturer: syz
[ 1219.843134][T16556] usb 1-1: SerialNumber: syz
[ 1219.898780][T16556] usb 1-1: config 0 descriptor??
[ 1220.135119][T16556] usb 1-1: USB disconnect, device number 11
[ 1221.144028][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3282'.
[ 1221.540732][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3287'.
[ 1221.740046][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3289'.
[ 1223.077961][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3296'.
[ 1223.917790][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3305'.
[ 1224.011310][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'.
[ 1224.184980][T13758] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[ 1224.334810][T13758] usb 8-1: Using ep0 maxpacket: 32
[ 1224.337260][T13758] usb 8-1: config 91 has an invalid descriptor of length 0, skipping remainder of the config
[ 1224.337289][T13758] usb 8-1: config 91 has 0 interfaces, different from the descriptor's value: 1
[ 1224.340063][T13758] usb 8-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1224.340093][T13758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.340115][T13758] usb 8-1: Product: syz
[ 1224.340131][T13758] usb 8-1: Manufacturer: syz
[ 1224.340146][T13758] usb 8-1: SerialNumber: syz
[ 1224.719571][T13758] usb 8-1: USB disconnect, device number 32
[ 1228.095682][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3322'.
[ 1230.594910][ T9877] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1230.754852][ T9877] usb 1-1: Using ep0 maxpacket: 32
[ 1230.758665][ T9877] usb 1-1: config 91 has an invalid descriptor of length 0, skipping remainder of the config
[ 1230.758694][ T9877] usb 1-1: config 91 has 0 interfaces, different from the descriptor's value: 1
[ 1230.762389][ T9877] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1230.762418][ T9877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.762440][ T9877] usb 1-1: Product: syz
[ 1230.762455][ T9877] usb 1-1: Manufacturer: syz
[ 1230.762478][ T9877] usb 1-1: SerialNumber: syz
[ 1231.075797][ T9877] usb 1-1: USB disconnect, device number 12
[ 1235.685014][ T5889] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[ 1235.864791][ T5889] usb 8-1: Using ep0 maxpacket: 32
[ 1235.871294][ T5889] usb 8-1: config 91 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.871316][ T5889] usb 8-1: config 91 has 0 interfaces, different from the descriptor's value: 1
[ 1235.925202][ T5889] usb 8-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1235.925236][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.925258][ T5889] usb 8-1: Product: syz
[ 1235.925274][ T5889] usb 8-1: Manufacturer: syz
[ 1235.925291][ T5889] usb 8-1: SerialNumber: syz
[ 1236.232161][ T5889] usb 8-1: USB disconnect, device number 33
[ 1238.992048][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1241.044934][T17260] Bluetooth: hci4: command 0x0406 tx timeout
[ 1245.477384][T17381] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1246.321234][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'.
[ 1249.248118][T17445] syzkaller0: entered promiscuous mode
[ 1249.248138][T17445] syzkaller0: entered allmulticast mode
[ 1251.110175][T16559] IPVS: starting estimator thread 0...
[ 1251.194936][T17487] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1251.381412][T17492] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3445'.
[ 1251.649536][T17500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3449'.
[ 1251.652018][T17500] IPVS: Error connecting to the multicast addr
[ 1253.631448][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'.
[ 1253.795110][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3462'.
[ 1254.259521][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3464'.
[ 1257.564490][T17572] picdev_read: 77 callbacks suppressed
[ 1257.564513][T17572] kvm: pic: non byte read
[ 1257.564590][T17572] kvm: pic: non byte read
[ 1257.565228][T17572] kvm: pic: non byte read
[ 1257.565409][T17572] kvm: pic: non byte read
[ 1257.565564][T17572] kvm: pic: non byte read
[ 1257.565711][T17572] kvm: pic: non byte read
[ 1257.565868][T17572] kvm: pic: non byte read
[ 1257.566005][T17572] kvm: pic: non byte read
[ 1257.566148][T17572] kvm: pic: non byte read
[ 1257.566298][T17572] kvm: pic: non byte read
[ 1257.627962][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3476'.
[ 1257.752470][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3475'.
[ 1259.880978][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'.
[ 1260.569265][T17631] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3492'.
[ 1260.569471][T17631] bridge_slave_1: default FDB implementation only supports local addresses
[ 1260.790094][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3495'.
[ 1264.407310][T17691] bridge1: entered promiscuous mode
[ 1264.407365][T17691] bridge1: entered allmulticast mode
[ 1266.839508][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3509'.
[ 1267.144854][T13268] Bluetooth: hci2: link tx timeout
[ 1267.144876][T13268] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1267.185346][T17260] Bluetooth: hci2: link tx timeout
[ 1267.185367][T17260] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1268.099895][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3523'.
[ 1269.205187][T17260] Bluetooth: hci2: command 0x0406 tx timeout
[ 1272.507264][T17787] bridge2: entered promiscuous mode
[ 1272.507284][T17787] bridge2: entered allmulticast mode
[ 1273.045800][T17790] syz_tun: entered allmulticast mode
[ 1273.132452][T17788] syz_tun: left allmulticast mode
[ 1274.237776][ T5813] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1276.464842][ T5813] usb 2-1: Using ep0 maxpacket: 32
[ 1276.507030][ T5813] usb 2-1: device descriptor read/all, error -71
[ 1277.835964][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'.
[ 1279.221433][T17849] syzkaller0: entered promiscuous mode
[ 1279.550812][T17860] syzkaller1: entered promiscuous mode
[ 1279.550832][T17860] syzkaller1: entered allmulticast mode
[ 1281.734802][T11842] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1281.888217][T11842] usb 1-1: Using ep0 maxpacket: 32
[ 1282.056173][T11842] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1282.056260][T11842] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1282.056288][T11842] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1282.056324][T11842] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1282.056349][T11842] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1282.911140][T11842] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1282.911173][T11842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.911194][T11842] usb 1-1: Product: syz
[ 1282.911209][T11842] usb 1-1: Manufacturer: syz
[ 1282.911223][T11842] usb 1-1: SerialNumber: syz
[ 1283.033512][T11842] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[ 1283.033617][T11842] imon 1-1:155.0: unable to initialize intf0, err -90
[ 1283.033635][T11842] imon:imon_probe: failed to initialize context!
[ 1283.033649][T11842] imon 1-1:155.0: unable to register, err -19
[ 1294.162157][T17260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1294.173899][T17260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1294.183985][T17260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1294.195972][T17260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1294.197955][T17260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1294.681369][T17260] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1294.684238][T17260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1294.697338][T17260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1294.734278][T17260] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1294.758014][T17260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1295.160981][T13268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1295.164456][T13268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1295.209808][T13268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1295.211803][T13268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1295.212541][T13268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1296.326013][T17260] Bluetooth: hci1: command tx timeout
[ 1296.533876][T13758] usb 1-1: USB disconnect, device number 13
[ 1296.774060][T17907] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[ 1296.811559][T17260] Bluetooth: hci6: command tx timeout
[ 1297.068725][T13268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1297.072033][T13268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1297.073374][T13268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1297.127117][T13268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1297.146299][T13268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1297.178434][T17848] syz_tun (unregistering): left allmulticast mode
[ 1297.375146][T13268] Bluetooth: hci7: command tx timeout
[ 1297.916052][T17865] syz_tun (unregistering): left allmulticast mode
[ 1298.138664][T17859] syz_tun (unregistering): left allmulticast mode
[ 1298.405046][T13268] Bluetooth: hci1: command tx timeout
[ 1298.895091][T13268] Bluetooth: hci6: command tx timeout
[ 1298.990547][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.204899][T13268] Bluetooth: hci4: command tx timeout
[ 1299.299214][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.444922][T13268] Bluetooth: hci7: command tx timeout
[ 1299.639506][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.003136][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.418934][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.484921][T13268] Bluetooth: hci1: command tx timeout
[ 1300.640768][T17901] chnl_net:caif_netlink_parms(): no params data found
[ 1300.675706][   T80] netdevsim netdevsim1 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.753892][T17894] chnl_net:caif_netlink_parms(): no params data found
[ 1300.830043][T17898] chnl_net:caif_netlink_parms(): no params data found
[ 1300.848806][   T80] netdevsim netdevsim1 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.965040][T13268] Bluetooth: hci6: command tx timeout
[ 1301.051438][ T1364] netdevsim netdevsim1 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[ 1301.065289][T17908] chnl_net:caif_netlink_parms(): no params data found
[ 1301.186208][ T1364] netdevsim netdevsim1 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[ 1301.284487][   T41] bridge_slave_1: left allmulticast mode
[ 1301.284511][   T41] bridge_slave_1: left promiscuous mode
[ 1301.284851][T13268] Bluetooth: hci4: command tx timeout
[ 1301.302174][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1301.347470][   T41] bridge_slave_0: left allmulticast mode
[ 1301.347495][   T41] bridge_slave_0: left promiscuous mode
[ 1301.347698][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1301.525101][T13268] Bluetooth: hci7: command tx timeout
[ 1302.305729][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1302.365616][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1302.408526][   T41] bond0 (unregistering): Released all slaves
[ 1302.562934][T17901] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1302.563051][T17901] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1302.563278][T17901] bridge_slave_0: entered allmulticast mode
[ 1302.565931][T17901] bridge_slave_0: entered promiscuous mode
[ 1302.574767][T13268] Bluetooth: hci1: command tx timeout
[ 1302.672169][T17901] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1302.672287][T17901] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1302.672454][T17901] bridge_slave_1: entered allmulticast mode
[ 1302.699423][T17901] bridge_slave_1: entered promiscuous mode
[ 1302.759521][   T41] IPVS: stopping master sync thread 16315 ...
[ 1302.787512][T17894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1302.787623][T17894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1302.787801][T17894] bridge_slave_0: entered allmulticast mode
[ 1302.790131][T17894] bridge_slave_0: entered promiscuous mode
[ 1302.818899][T17898] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1302.818985][T17898] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1302.819171][T17898] bridge_slave_0: entered allmulticast mode
[ 1302.821121][T17898] bridge_slave_0: entered promiscuous mode
[ 1303.049495][T13268] Bluetooth: hci6: command tx timeout
[ 1303.247607][T17894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.247706][T17894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.247923][T17894] bridge_slave_1: entered allmulticast mode
[ 1303.249817][T17894] bridge_slave_1: entered promiscuous mode
[ 1303.308313][T17898] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.308436][T17898] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.308637][T17898] bridge_slave_1: entered allmulticast mode
[ 1303.311462][T17898] bridge_slave_1: entered promiscuous mode
[ 1303.365026][T13268] Bluetooth: hci4: command tx timeout
[ 1303.372720][T17901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1303.454326][T17908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.454426][T17908] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1303.454771][T17908] bridge_slave_0: entered allmulticast mode
[ 1303.484537][T17908] bridge_slave_0: entered promiscuous mode
[ 1303.510957][T17901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1303.605212][T13268] Bluetooth: hci7: command tx timeout
[ 1303.627565][T17908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.627692][T17908] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.627917][T17908] bridge_slave_1: entered allmulticast mode
[ 1303.629927][T17908] bridge_slave_1: entered promiscuous mode
[ 1303.870384][T17894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1303.982005][T17898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1304.012289][T17894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.064087][T17898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.129105][T17901] team0: Port device team_slave_0 added
[ 1304.224255][T17908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1304.253590][T17901] team0: Port device team_slave_1 added
[ 1304.303325][T17908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.315467][T17894] team0: Port device team_slave_0 added
[ 1304.426770][   T41] hsr_slave_0: left promiscuous mode
[ 1304.445033][   T41] hsr_slave_1: left promiscuous mode
[ 1304.446000][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1304.446040][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1304.495926][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1304.495949][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1304.596856][   T41] veth1_macvtap: left promiscuous mode
[ 1304.596932][   T41] veth0_macvtap: left promiscuous mode
[ 1304.597111][   T41] veth1_vlan: left promiscuous mode
[ 1304.597228][   T41] veth0_vlan: left promiscuous mode
[ 1305.369436][   T41] team0 (unregistering): Port device team_slave_1 removed
[ 1305.405620][   T41] team0 (unregistering): Port device team_slave_0 removed
[ 1305.444882][T13268] Bluetooth: hci4: command tx timeout
[ 1305.625617][T17898] team0: Port device team_slave_0 added
[ 1305.647690][T17894] team0: Port device team_slave_1 added
[ 1305.826552][T17898] team0: Port device team_slave_1 added
[ 1305.860961][T17901] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1305.860981][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1305.861010][T17901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1305.913672][T17908] team0: Port device team_slave_0 added
[ 1305.950159][T17901] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1305.950178][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1305.950212][T17901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1306.009190][T17908] team0: Port device team_slave_1 added
[ 1306.022671][T17894] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1306.022685][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1306.022706][T17894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1306.063414][T17898] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1306.063492][T17898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1306.063580][T17898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1306.140886][T17894] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1306.140899][T17894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1306.140921][T17894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1306.142602][T17898] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1306.142615][T17898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1306.142636][T17898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1306.301365][T17908] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1306.301379][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1306.301400][T17908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1306.380176][T17908] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1306.380205][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1306.380237][T17908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1306.471844][T17901] hsr_slave_0: entered promiscuous mode
[ 1306.473367][T17901] hsr_slave_1: entered promiscuous mode
[ 1306.474356][T17901] debugfs: 'hsr0' already exists in 'hsr'
[ 1306.474383][T17901] Cannot create hsr debugfs directory
[ 1306.669129][T17894] hsr_slave_0: entered promiscuous mode
[ 1306.681343][T17894] hsr_slave_1: entered promiscuous mode
[ 1306.682126][T17894] debugfs: 'hsr0' already exists in 'hsr'
[ 1306.682152][T17894] Cannot create hsr debugfs directory
[ 1306.707952][T17962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3560'.
[ 1306.929423][T17898] hsr_slave_0: entered promiscuous mode
[ 1306.930561][T17898] hsr_slave_1: entered promiscuous mode
[ 1306.931311][T17898] debugfs: 'hsr0' already exists in 'hsr'
[ 1306.931328][T17898] Cannot create hsr debugfs directory
[ 1307.186933][T17908] hsr_slave_0: entered promiscuous mode
[ 1307.188071][T17908] hsr_slave_1: entered promiscuous mode
[ 1307.189508][T17908] debugfs: 'hsr0' already exists in 'hsr'
[ 1307.189527][T17908] Cannot create hsr debugfs directory
[ 1307.572789][   T41] IPVS: stop unused estimator thread 0...
[ 1308.233692][T17966] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[ 1309.462939][T17901] netdevsim netdevsim3 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1309.767759][T17979] netlink: 'syz.8.3565': attribute type 27 has an invalid length.
[ 1309.789999][T17901] netdevsim netdevsim3 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.070640][T17979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1310.071453][T17979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.586344][T17979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1310.594008][T17979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1311.688061][T17980] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1311.689474][T17980] 8021q: adding VLAN 0 to HW filter on device team0
[ 1311.715392][T17980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1311.805841][   T41] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.847958][T17984] netlink: 'syz.8.3566': attribute type 4 has an invalid length.
[ 1311.900173][T17986] netlink: 'syz.8.3566': attribute type 4 has an invalid length.
[ 1311.998823][T17901] netdevsim netdevsim3 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.077400][   T41] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.142410][   T41] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.157954][   T41] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.254077][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3567'.
[ 1312.254118][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3567'.
[ 1312.403308][T17901] netdevsim netdevsim3 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1312.479080][T17997] bridge0: entered promiscuous mode
[ 1312.481763][T17997] ip6gretap0: entered promiscuous mode
[ 1312.482847][T17997] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[ 1312.665647][T18008] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3568'.
[ 1312.999347][T17894] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.289417][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3569'.
[ 1313.357933][T17894] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1313.711946][T17894] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.010348][T17894] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.482221][T17898] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.797910][T17898] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.123232][T17898] netdevsim netdevsim5 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.153134][T18063] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3575'.
[ 1315.412001][T17898] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.924486][T17908] netdevsim netdevsim2 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.260151][T18095] netlink: 'syz.8.3578': attribute type 1 has an invalid length.
[ 1316.260176][T18095] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3578'.
[ 1316.296362][T17908] netdevsim netdevsim2 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.012058][T17908] netdevsim netdevsim2 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.301888][T17908] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.351676][T18100] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3580'.
[ 1317.709034][T17901] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1317.766870][T17901] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1317.822353][T17901] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1317.967572][T17901] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1318.189109][T17894] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1318.229851][T17894] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1318.298398][T17894] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1318.350037][T17894] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1318.696708][T17898] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1318.751720][T17898] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1318.824531][T17898] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1318.943395][T17898] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1319.382559][T17908] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1319.431807][T17908] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1319.474032][T17908] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1319.516430][T17908] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1319.676173][T17901] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1319.809731][T17901] 8021q: adding VLAN 0 to HW filter on device team0
[ 1319.853183][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.853325][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1319.881773][T17894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1319.926561][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1319.926654][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1320.009124][T17894] 8021q: adding VLAN 0 to HW filter on device team0
[ 1320.048750][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1320.048918][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1320.070392][T17898] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1320.112806][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1320.112975][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1320.193064][T17898] 8021q: adding VLAN 0 to HW filter on device team0
[ 1320.219806][T17908] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1320.256807][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1320.258550][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1320.314602][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1320.317440][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1320.370767][T17908] 8021q: adding VLAN 0 to HW filter on device team0
[ 1320.427153][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1320.439599][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1320.512533][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1320.516768][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1320.870383][T17901] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1321.296188][T17901] veth0_vlan: entered promiscuous mode
[ 1321.330912][T17894] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1321.393532][T17901] veth1_vlan: entered promiscuous mode
[ 1321.487995][T17898] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1321.605121][T17908] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1321.653933][T17901] veth0_macvtap: entered promiscuous mode
[ 1321.700063][T17901] veth1_macvtap: entered promiscuous mode
[ 1321.903440][T17901] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1321.959069][T17901] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1322.011593][T17908] veth0_vlan: entered promiscuous mode
[ 1322.014358][T15876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.023766][T15876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.026658][T15876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.057652][T15876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.217138][T17908] veth1_vlan: entered promiscuous mode
[ 1322.608552][ T1364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1322.608575][ T1364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1322.740854][T17908] veth0_macvtap: entered promiscuous mode
[ 1322.790116][T17908] veth1_macvtap: entered promiscuous mode
[ 1322.800670][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1322.800692][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1322.846796][T17898] veth0_vlan: entered promiscuous mode
[ 1322.873414][T17894] veth0_vlan: entered promiscuous mode
[ 1322.933637][T17898] veth1_vlan: entered promiscuous mode
[ 1322.960409][T17894] veth1_vlan: entered promiscuous mode
[ 1323.010790][T17908] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1323.077773][T17908] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1323.156389][ T6399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.173933][ T6399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.197183][ T6399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.216945][   T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.555549][T17894] veth0_macvtap: entered promiscuous mode
[ 1323.580072][T17898] veth0_macvtap: entered promiscuous mode
[ 1323.643214][T17894] veth1_macvtap: entered promiscuous mode
[ 1323.772180][T17898] veth1_macvtap: entered promiscuous mode
[ 1323.923883][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'.
[ 1323.923923][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'.
[ 1323.990426][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1323.990449][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.029847][T17894] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1324.079804][T17894] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1324.096921][T17898] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1324.158165][T17898] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1324.175885][T15876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.180700][T15876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.184427][T15876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.214169][T15876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.229452][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1324.229475][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.260366][T15876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.285548][T15876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.290370][T15876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.301070][T15876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.941825][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1324.941847][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1325.067108][T15876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.067131][T15876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1325.487950][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.487970][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1325.631109][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.631133][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1325.771030][T18268] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 
Ï€Ôxµ…üô–)%ë�	]ÓÙ.˜>„n÷6�‡#
[ 1329.003396][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3613'.
[ 1335.252084][T18386] netlink: zone id is out of range
[ 1335.252102][T18386] netlink: zone id is out of range
[ 1335.252111][T18386] netlink: zone id is out of range
[ 1335.252120][T18386] netlink: zone id is out of range
[ 1335.252129][T18386] netlink: zone id is out of range
[ 1335.252138][T18386] netlink: zone id is out of range
[ 1335.252147][T18386] netlink: zone id is out of range
[ 1335.252156][T18386] netlink: zone id is out of range
[ 1335.252164][T18386] netlink: zone id is out of range
[ 1335.252173][T18386] netlink: zone id is out of range
[ 1335.496961][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'.
[ 1337.012261][T18415] team_slave_0: entered promiscuous mode
[ 1337.052474][T18415] team_slave_1: entered promiscuous mode
[ 1337.128159][T18415] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1337.194077][T18411] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1337.698840][T18439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3658'.
[ 1338.104228][T18449] netlink: 'syz.3.3662': attribute type 4 has an invalid length.
[ 1339.241807][T18486] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3672'.
[ 1339.559436][T18491] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1340.180542][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3679'.
[ 1340.617582][T18517] tipc: Started in network mode
[ 1340.617615][T18517] tipc: Node identity 2e85ca92f18c, cluster identity 4711
[ 1340.617811][T18517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1340.618498][T18517] syzkaller0: entered promiscuous mode
[ 1340.618521][T18517] syzkaller0: entered allmulticast mode
[ 1340.788793][T18520] tipc: Resetting bearer <eth:syzkaller0>
[ 1340.885081][T18516] tipc: Resetting bearer <eth:syzkaller0>
[ 1341.185614][T18516] tipc: Disabling bearer <eth:syzkaller0>
[ 1341.386330][T18535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'.
[ 1341.933147][T18554] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[ 1342.725854][T18573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3701'.
[ 1343.297531][T18598] netlink: 'syz.4.3709': attribute type 1 has an invalid length.
[ 1343.297554][T18598] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3709'.
[ 1343.673628][T18615] netlink: 'syz.4.3713': attribute type 13 has an invalid length.
[ 1343.673655][T18615] netlink: 'syz.4.3713': attribute type 17 has an invalid length.
[ 1344.256722][T18610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1344.258658][T18610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1344.983648][T18610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1345.007248][T18610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1346.309466][T18615] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1346.311602][T18615] 8021q: adding VLAN 0 to HW filter on device team0
[ 1346.399073][T18615] net_ratelimit: 1050 callbacks suppressed
[ 1346.399084][T18615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1346.399178][T18618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3715'.
[ 1346.534367][T11231] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.583579][T11231] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.674817][T11231] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.778210][T11231] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.158986][T18694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3734'.
[ 1350.525881][T18740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3746'.
[ 1350.525923][T18740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3746'.
[ 1350.680090][T18740] ip6gretap0: entered promiscuous mode
[ 1350.696952][T18740] syz_tun: entered promiscuous mode
[ 1350.702829][T18740] debugfs: 'hsr1' already exists in 'hsr'
[ 1350.702849][T18740] Cannot create hsr debugfs directory
[ 1351.023425][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3747'.
[ 1351.112841][T18748] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3749'.
[ 1351.112964][T18748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3749'.
[ 1352.427574][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3760'.
[ 1353.156635][T18802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3765'.
[ 1353.156664][T18802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3765'.
[ 1353.223823][T18802] ip6gretap0: entered promiscuous mode
[ 1353.263976][T18802] syz_tun: entered promiscuous mode
[ 1353.275315][T18802] debugfs: 'hsr1' already exists in 'hsr'
[ 1353.275359][T18802] Cannot create hsr debugfs directory
[ 1355.119804][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'.
[ 1357.913738][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'.
[ 1359.698699][T18909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3796'.
[ 1360.372527][T18926] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3800'.
[ 1360.816441][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3801'.
[ 1360.816551][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3801'.
[ 1360.867612][T18932] bridge0: entered promiscuous mode
[ 1360.983787][T18932] bridge0: left promiscuous mode
[ 1361.865405][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.813913][T18970] netlink: 'syz.2.3811': attribute type 39 has an invalid length.
[ 1365.542939][T19026] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3828'.
[ 1365.780372][T19033] tipc: Started in network mode
[ 1365.780395][T19033] tipc: Node identity 4246, cluster identity 4711
[ 1365.780407][T19033] tipc: Node number set to 16966
[ 1367.316628][T19073] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3841'.
[ 1368.468964][T19090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1368.469819][T19090] syzkaller0: entered promiscuous mode
[ 1368.470057][T19090] syzkaller0: entered allmulticast mode
[ 1369.320148][T19088] tipc: Resetting bearer <eth:syzkaller0>
[ 1369.878962][T19088] tipc: Disabling bearer <eth:syzkaller0>
[ 1370.166505][ T5813] tipc: Node number set to 3741960850
[ 1370.190475][T19126] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3854'.
[ 1371.173304][T13268] Bluetooth: hci4: link tx timeout
[ 1371.173766][T13268] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1372.884008][T19192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3874'.
[ 1372.884059][T19192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3874'.
[ 1373.204907][T13268] Bluetooth: hci4: command 0x0406 tx timeout
[ 1375.241887][T19233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1375.244104][T19226] syzkaller0: entered promiscuous mode
[ 1375.244132][T19226] syzkaller0: entered allmulticast mode
[ 1375.327106][T19225] tipc: Resetting bearer <eth:syzkaller0>
[ 1375.627245][T19225] tipc: Disabling bearer <eth:syzkaller0>
[ 1376.548476][T19259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1376.563109][T19256] syzkaller0: entered promiscuous mode
[ 1376.563155][T19256] syzkaller0: entered allmulticast mode
[ 1376.647593][T19256] tipc: Resetting bearer <eth:syzkaller0>
[ 1376.694971][T19255] tipc: Resetting bearer <eth:syzkaller0>
[ 1376.895446][T19255] tipc: Disabling bearer <eth:syzkaller0>
[ 1377.394888][ T9390] IPVS: starting estimator thread 0...
[ 1377.429109][T19285] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3895'.
[ 1377.494845][T19286] IPVS: using max 7 ests per chain, 16800 per kthread
[ 1377.646606][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3899'.
[ 1380.008575][T19329] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.3905'.
[ 1380.008606][T19329] openvswitch: netlink: Flow key attr not present in new flow.
[ 1380.781184][T19296] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3900'.
[ 1380.781378][T19296] bridge_slave_1: default FDB implementation only supports local addresses
[ 1381.339901][T19338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1381.340863][T19338] syzkaller0: entered promiscuous mode
[ 1381.340888][T19338] syzkaller0: entered allmulticast mode
[ 1381.375135][T19338] tipc: Resetting bearer <eth:syzkaller0>
[ 1381.485116][T19337] tipc: Resetting bearer <eth:syzkaller0>
[ 1381.510582][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'.
[ 1381.713570][T19337] tipc: Disabling bearer <eth:syzkaller0>
[ 1381.862187][T19353] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3912'.
[ 1381.935349][T19345] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1382.005660][T19346] bond1: entered promiscuous mode
[ 1382.005683][T19346] bond1: entered allmulticast mode
[ 1382.010102][T19346] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1382.012322][T19346] team0: Port device bond1 added
[ 1382.481639][T19367] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3916'.
[ 1382.481933][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3916'.
[ 1382.603384][T19378] netlink: 'syz.8.3918': attribute type 4 has an invalid length.
[ 1382.756380][T19381] netlink: 'syz.4.3919': attribute type 8 has an invalid length.
[ 1382.756404][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3919'.
[ 1383.223756][T19381] bond0: entered promiscuous mode
[ 1383.223795][T19381] bond_slave_0: entered promiscuous mode
[ 1383.224135][T19381] bond_slave_1: entered promiscuous mode
[ 1383.242924][T19381] gretap0: entered promiscuous mode
[ 1383.375004][T19381] bond0: left promiscuous mode
[ 1383.375036][T19381] bond_slave_0: left promiscuous mode
[ 1383.375317][T19381] bond_slave_1: left promiscuous mode
[ 1383.583856][T19401] netlink: 7076 bytes leftover after parsing attributes in process `syz.5.3925'.
[ 1383.583884][T19401] openvswitch: netlink: Flow key attr not present in new flow.
[ 1383.684219][T19381] gretap0: left promiscuous mode
[ 1384.004178][T19407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3926'.
[ 1384.004217][T19407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3926'.
[ 1384.041975][T19407] ip6gretap0: entered promiscuous mode
[ 1384.090382][T19407] syz_tun: entered promiscuous mode
[ 1384.101552][T19407] debugfs: 'hsr1' already exists in 'hsr'
[ 1384.101581][T19407] Cannot create hsr debugfs directory
[ 1385.476540][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3928'.
[ 1385.723995][T19426] netlink: 'syz.8.3931': attribute type 4 has an invalid length.
[ 1385.908190][T19420] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3930'.
[ 1385.908413][T19420] bridge_slave_1: default FDB implementation only supports local addresses
[ 1385.908596][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3930'.
[ 1386.383665][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'.
[ 1388.239857][T19468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3943'.
[ 1388.239899][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'.
[ 1388.389820][T19474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3944'.
[ 1388.919435][T19475] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3945'.
[ 1388.919632][T19475] bridge_slave_1: default FDB implementation only supports local addresses
[ 1388.919858][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3945'.
[ 1389.153654][T19492] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3947'.
[ 1390.619661][T19512] netlink: 7076 bytes leftover after parsing attributes in process `syz.8.3952'.
[ 1390.619689][T19512] openvswitch: netlink: Flow key attr not present in new flow.
[ 1391.005724][T19520] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3956'.
[ 1391.100585][T19522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3956'.
[ 1391.488360][T19521] veth1_to_bond: entered allmulticast mode
[ 1391.491148][T19518] veth1_to_bond: left allmulticast mode
[ 1391.625327][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3957'.
[ 1391.625368][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'.
[ 1392.319445][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3962'.
[ 1392.892008][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'.
[ 1393.335377][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3968'.
[ 1394.484363][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'.
[ 1394.716286][T19623] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3981'.
[ 1394.872544][T19620] syzkaller0: entered promiscuous mode
[ 1394.872575][T19620] syzkaller0: entered allmulticast mode
[ 1397.857551][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3993'.
[ 1410.232111][T13268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1410.254987][T13268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1410.257974][T13268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1410.263104][T13268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1410.263910][T13268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1410.649153][T19693] Bluetooth: MGMT ver 1.23
[ 1410.981157][T19700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4001'.
[ 1411.122154][T19700] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1411.200454][T19706] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1412.635860][T17260] Bluetooth: hci2: command tx timeout
[ 1412.864713][T17894] syz_tun (unregistering): left promiscuous mode
[ 1412.971696][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4009'.
[ 1413.195577][T19682] chnl_net:caif_netlink_parms(): no params data found
[ 1413.658905][T19746] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4011'.
[ 1414.212167][T19758] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4015'.
[ 1414.398729][T19758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1414.424961][T19758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1414.646958][T17260] Bluetooth: hci2: command tx timeout
[ 1414.935442][T19777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4017'.
[ 1414.935514][T19777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4017'.
[ 1415.322662][T19682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1415.324161][T19682] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1415.343730][T19682] bridge_slave_0: entered allmulticast mode
[ 1415.358315][T19682] bridge_slave_0: entered promiscuous mode
[ 1415.384914][T19682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1415.385005][T19682] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1415.385325][T19682] bridge_slave_1: entered allmulticast mode
[ 1415.390934][T19682] bridge_slave_1: entered promiscuous mode
[ 1415.779639][T19788] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4019'.
[ 1415.915895][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4021'.
[ 1415.996609][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4023'.
[ 1416.073506][T19682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1416.158346][T19792] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1416.248558][T19797] bond1: entered promiscuous mode
[ 1416.248591][T19797] bond1: entered allmulticast mode
[ 1416.271574][T19797] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1416.302484][T19797] team0: Port device bond1 added
[ 1416.332067][T19801] ip6gretap1: entered promiscuous mode
[ 1416.332187][T19801] ip6gretap1: entered allmulticast mode
[ 1416.333623][T19801] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1416.358470][T19682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1416.718973][T19682] team0: Port device team_slave_0 added
[ 1416.743364][T19682] team0: Port device team_slave_1 added
[ 1416.811559][T17260] Bluetooth: hci2: command tx timeout
[ 1416.878210][T19682] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1416.878237][T19682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1416.878284][T19682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1416.885201][T19682] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1416.885220][T19682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1416.885253][T19682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1418.020605][ T9390] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1418.106054][   T80] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.194896][ T9390] usb 3-1: Using ep0 maxpacket: 8
[ 1418.212628][ T9390] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1418.212665][ T9390] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1418.212692][ T9390] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1418.212727][ T9390] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1418.212756][ T9390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.311708][ T9390] usb 3-1: config 0 descriptor??
[ 1418.731309][ T9390] usbhid 3-1:0.0: can't add hid device: -71
[ 1418.731444][ T9390] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1418.740937][T19682] hsr_slave_0: entered promiscuous mode
[ 1418.842548][T19682] hsr_slave_1: entered promiscuous mode
[ 1418.868408][ T9390] usb 3-1: USB disconnect, device number 3
[ 1418.870663][T19682] debugfs: 'hsr0' already exists in 'hsr'
[ 1418.870685][T19682] Cannot create hsr debugfs directory
[ 1418.874422][ T6939] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.889725][T19841] Bluetooth: hci2: command tx timeout
[ 1419.070357][   T80] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1419.246691][T19855] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4033'.
[ 1420.250174][T19841] Bluetooth: hci6: command 0x0406 tx timeout
[ 1420.251968][T19841] Bluetooth: hci7: command 0x0406 tx timeout
[ 1420.514206][T11231] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[ 1420.603472][   T12] bridge_slave_1: left allmulticast mode
[ 1420.603511][   T12] bridge_slave_1: left promiscuous mode
[ 1420.603762][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1420.661570][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'.
[ 1420.721455][   T12] bridge_slave_0: left allmulticast mode
[ 1420.721486][   T12] bridge_slave_0: left promiscuous mode
[ 1420.721738][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.154933][   T12] ip6gretap0 (unregistering): left promiscuous mode
[ 1421.795966][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1421.885694][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1421.926081][   T12] bond0 (unregistering): Released all slaves
[ 1421.998561][T19867] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1423.367338][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1425.301575][T19923] Process accounting resumed
[ 1425.530787][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4049'.
[ 1426.032898][T19934] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1426.146249][T19937] bond2: entered promiscuous mode
[ 1426.146282][T19937] bond2: entered allmulticast mode
[ 1429.656091][T19974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4060'.
[ 1429.779610][   T12] hsr_slave_0: left promiscuous mode
[ 1429.797915][T19980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'.
[ 1429.816098][   T12] hsr_slave_1: left promiscuous mode
[ 1429.817276][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1429.866479][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1431.743110][T20011] netlink: 11 bytes leftover after parsing attributes in process `syz.8.4066'.
[ 1432.126442][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1432.176571][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1433.366430][T19980] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1433.458439][T19983] bond3: entered promiscuous mode
[ 1433.458470][T19983] bond3: entered allmulticast mode
[ 1433.734478][T20045] netlink: 'syz.3.4074': attribute type 8 has an invalid length.
[ 1433.734504][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4074'.
[ 1433.768665][T20045] bond0: entered promiscuous mode
[ 1433.768690][T20045] bond_slave_0: entered promiscuous mode
[ 1433.769402][T20045] bond_slave_1: entered promiscuous mode
[ 1433.815689][T20045] gretap0: entered promiscuous mode
[ 1433.818601][T20045] hsr2: entered promiscuous mode
[ 1435.197841][T20054] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4076'.
[ 1435.338454][T20064] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4079'.
[ 1435.588429][T20069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4081'.
[ 1436.196003][T20069] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1436.366780][T20076] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1436.414765][ T5958] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1436.529815][T20093] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4084'.
[ 1436.574767][ T5958] usb 4-1: Using ep0 maxpacket: 16
[ 1436.614957][ T5958] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1436.614999][ T5958] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1436.615024][ T5958] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1436.615051][ T5958] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1436.703991][ T5958] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[ 1436.704025][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.704046][ T5958] usb 4-1: Product: syz
[ 1436.704061][ T5958] usb 4-1: Manufacturer: syz
[ 1436.704077][ T5958] usb 4-1: SerialNumber: syz
[ 1437.027737][ T5958] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[ 1437.155333][T19682] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1437.225010][ T5958] usb 4-1: USB disconnect, device number 3
[ 1437.229584][ T5958] usblp0: removed
[ 1437.674031][T19682] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1437.839109][T19682] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1437.841264][   T12] IPVS: stop unused estimator thread 0...
[ 1437.920247][T19682] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1439.143744][T20122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4090'.
[ 1439.601334][T19682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1439.683950][T19682] 8021q: adding VLAN 0 to HW filter on device team0
[ 1439.728489][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1439.733838][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1439.809719][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1440.094974][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1441.178392][T20147] syzkaller0: entered promiscuous mode
[ 1441.178421][T20147] syzkaller0: entered allmulticast mode
[ 1441.822952][T20156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4099'.
[ 1442.246604][T20165] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4101'.
[ 1442.671235][T19682] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1442.805019][T13758] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1442.977091][T20189] input: syz1 as /devices/virtual/input/input6
[ 1443.001490][T13758] usb 9-1: Using ep0 maxpacket: 8
[ 1443.189079][T13758] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1443.189118][T13758] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1443.189155][T13758] usb 9-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[ 1443.189179][T13758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.555246][T20191] syzkaller0: entered promiscuous mode
[ 1444.555321][T20191] syzkaller0: entered allmulticast mode
[ 1445.839647][T13758] usb 9-1: config 0 descriptor??
[ 1446.409643][T13758] usb 9-1: can't set config #0, error -71
[ 1447.295514][T13758] usb 9-1: USB disconnect, device number 3
[ 1447.431522][T20209] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4111'.
[ 1447.913296][T20219] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4113'.
[ 1448.098045][T19682] veth0_vlan: entered promiscuous mode
[ 1448.125460][T19682] veth1_vlan: entered promiscuous mode
[ 1448.199048][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4116'.
[ 1448.282754][T19682] veth0_macvtap: entered promiscuous mode
[ 1448.328068][T19682] veth1_macvtap: entered promiscuous mode
[ 1448.381844][T19682] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1448.490617][T19682] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1448.555795][ T6399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1448.563764][ T6399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1448.614499][ T6399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1448.625287][   T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1449.138682][T20246] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4122'.
[ 1449.161749][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1449.161766][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1449.383389][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1449.383413][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1449.403417][ T5813] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1449.531683][T20250] syzkaller0: entered promiscuous mode
[ 1449.531703][T20250] syzkaller0: entered allmulticast mode
[ 1449.577207][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1449.577244][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1449.577267][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1449.580312][ T5813] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1449.580344][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1449.580365][ T5813] usb 6-1: Product: syz
[ 1449.580379][ T5813] usb 6-1: Manufacturer: syz
[ 1449.580394][ T5813] usb 6-1: SerialNumber: syz
[ 1449.675932][ T5813] usb 6-1: config 0 descriptor??
[ 1449.700916][ T5813] adutux 6-1:0.0: interrupt endpoints not found
[ 1449.889569][ T5958] usb 6-1: USB disconnect, device number 2
[ 1450.088313][T20254] pim6reg: entered allmulticast mode
[ 1452.297623][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1452.530846][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1452.530906][ T5813] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1452.530932][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.605400][ T5813] usb 4-1: config 0 descriptor??
[ 1452.652669][ T5813] pwc: Askey VC010 type 2 USB webcam detected.
[ 1452.850714][T20295] syzkaller0: entered promiscuous mode
[ 1452.850746][T20295] syzkaller0: entered allmulticast mode
[ 1453.034851][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1453.042205][ T5813] pwc: recv_control_msg error -32 req 02 val 2700
[ 1453.048762][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1453.060523][ T5813] pwc: recv_control_msg error -32 req 04 val 1000
[ 1453.061648][ T5813] pwc: recv_control_msg error -32 req 04 val 1300
[ 1453.067378][ T5813] pwc: recv_control_msg error -32 req 04 val 1400
[ 1453.084855][ T5813] pwc: recv_control_msg error -32 req 02 val 2000
[ 1453.088335][ T5813] pwc: recv_control_msg error -32 req 02 val 2100
[ 1453.094349][ T5813] pwc: recv_control_msg error -32 req 04 val 1500
[ 1453.298382][ T5813] pwc: recv_control_msg error -71 req 02 val 2400
[ 1453.299090][ T5813] pwc: recv_control_msg error -71 req 02 val 2600
[ 1453.299711][ T5813] pwc: recv_control_msg error -71 req 02 val 2900
[ 1453.300191][ T5813] pwc: recv_control_msg error -71 req 02 val 2800
[ 1453.301812][ T5813] pwc: recv_control_msg error -71 req 04 val 1100
[ 1453.302300][ T5813] pwc: recv_control_msg error -71 req 04 val 1200
[ 1453.567670][ T5813] pwc: Registered as video103.
[ 1453.613559][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[ 1453.792432][ T5813] usb 4-1: USB disconnect, device number 4
[ 1454.483992][T20331] loop2: detected capacity change from 0 to 7
[ 1454.558718][T20337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4149'.
[ 1454.558768][T20337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4149'.
[ 1454.733787][T20331] Dev loop2: unable to read RDB block 7
[ 1454.733850][T20331]  loop2: unable to read partition table
[ 1454.734071][T20331] loop2: partition table beyond EOD, truncated
[ 1454.734117][T20331] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1457.019776][T20362] VFS: Mount too revealing
[ 1461.617202][T20388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4162'.
[ 1461.617243][T20388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4162'.
[ 1462.971146][T20424] netlink: 'syz.8.4172': attribute type 10 has an invalid length.
[ 1462.971163][T20427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4173'.
[ 1462.971194][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4173'.
[ 1463.037062][T20424] 8021q: adding VLAN 0 to HW filter on device team0
[ 1463.071124][T20424] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1463.592999][T16559] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1463.776474][T16559] usb 4-1: Using ep0 maxpacket: 8
[ 1463.779609][T16559] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1463.779643][T16559] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1463.779667][T16559] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1463.779706][T16559] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1463.779818][T16559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1463.844982][T16559] usb 4-1: config 0 descriptor??
[ 1464.279506][T16559] usbhid 4-1:0.0: can't add hid device: -71
[ 1464.279640][T16559] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1464.299478][ T5813] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1464.304838][T16559] usb 4-1: USB disconnect, device number 5
[ 1464.444731][ T5813] usb 3-1: Using ep0 maxpacket: 8
[ 1464.447261][ T5813] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1464.447296][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1464.447331][ T5813] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[ 1464.447355][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1464.507416][ T5813] usb 3-1: config 0 descriptor??
[ 1465.884921][ T5813] usbhid 3-1:0.0: can't add hid device: -71
[ 1465.885053][ T5813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1465.934747][ T5813] usb 3-1: USB disconnect, device number 4
[ 1467.976260][T20518] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4195'.
[ 1467.976304][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4195'.
[ 1468.271709][ T5813] IPVS: starting estimator thread 0...
[ 1468.457808][T20525] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1468.824912][ T5813] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1468.874765][ T9877] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1468.980000][ T5813] usb 6-1: Using ep0 maxpacket: 8
[ 1469.885136][ T5813] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1469.885171][ T5813] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1469.885196][ T5813] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1469.885229][ T5813] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1469.885253][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.890559][ T5813] usb 6-1: config 0 descriptor??
[ 1469.904673][ T9877] usb 3-1: Using ep0 maxpacket: 8
[ 1469.953009][ T9877] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1469.953047][ T9877] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1469.953083][ T9877] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[ 1469.953120][ T9877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.015504][ T9877] usb 3-1: config 0 descriptor??
[ 1470.645640][ T5813] usbhid 6-1:0.0: can't add hid device: -71
[ 1470.645840][ T5813] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1471.609123][ T9877] usbhid 3-1:0.0: can't add hid device: -71
[ 1471.609257][ T9877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1471.695459][ T9877] usb 3-1: USB disconnect, device number 5
[ 1471.811643][ T5813] usb 6-1: USB disconnect, device number 3
[ 1472.391597][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4210'.
[ 1472.391638][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4210'.
[ 1473.078810][T20578] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4213'.
[ 1473.827574][T20599] netlink: 'syz.8.4219': attribute type 10 has an invalid length.
[ 1474.984910][ T5958] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1475.012433][T20615] input: syz1 as /devices/virtual/input/input8
[ 1475.044854][ T9877] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1475.196922][ T9877] usb 7-1: Using ep0 maxpacket: 8
[ 1475.241161][ T9877] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1475.241237][ T9877] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1475.241357][ T9877] usb 7-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[ 1475.241419][ T9877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1475.335512][ T9877] usb 7-1: config 0 descriptor??
[ 1475.814896][ T5958] usb 4-1: Using ep0 maxpacket: 8
[ 1475.863865][ T5958] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1475.863900][ T5958] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1475.863924][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1475.863963][ T5958] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1475.863988][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.487569][ T9877] usbhid 7-1:0.0: can't add hid device: -71
[ 1479.487710][ T9877] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1481.074261][ T5958] usb 4-1: config 0 descriptor??
[ 1481.075270][ T5958] usb 4-1: can't set config #0, error -71
[ 1481.084691][ T5958] usb 4-1: USB disconnect, device number 6
[ 1481.165273][ T9877] usb 7-1: USB disconnect, device number 20
[ 1483.364450][T20674] netlink: 'syz.3.4236': attribute type 10 has an invalid length.
[ 1483.414252][T20674] 8021q: adding VLAN 0 to HW filter on device team0
[ 1484.911529][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.964821][T20674] team0: entered promiscuous mode
[ 1484.964845][T20674] team_slave_0: entered promiscuous mode
[ 1484.965090][T20674] team_slave_1: entered promiscuous mode
[ 1485.004855][ T5880] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1485.005732][T20674] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1485.169123][ T5880] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1485.172237][ T5880] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 1485.172268][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.172290][ T5880] usb 9-1: Product: syz
[ 1485.172305][ T5880] usb 9-1: Manufacturer: syz
[ 1485.172320][ T5880] usb 9-1: SerialNumber: syz
[ 1485.286990][ T5880] usb 9-1: config 0 descriptor??
[ 1485.399966][ T5880] powermate 9-1:0.0: probe with driver powermate failed with error -22
[ 1485.450168][T20685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4227'.
[ 1485.514429][ T5880] usb 9-1: USB disconnect, device number 4
[ 1485.811017][T20685] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1485.824535][T20685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1485.889641][T20688] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4240'.
[ 1489.371835][T20734] netlink: 'syz.6.4250': attribute type 10 has an invalid length.
[ 1489.385773][T20734] 8021q: adding VLAN 0 to HW filter on device team0
[ 1489.388854][T20734] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1493.804700][ T5880] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1494.825045][ T5880] usb 4-1: Using ep0 maxpacket: 32
[ 1494.827437][ T5880] usb 4-1: config 91 has an invalid interface number: 102 but max is 0
[ 1494.827465][ T5880] usb 4-1: config 91 has no interface number 0
[ 1494.830026][ T5880] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1494.830057][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.830076][ T5880] usb 4-1: Product: syz
[ 1494.830091][ T5880] usb 4-1: Manufacturer: syz
[ 1494.830106][ T5880] usb 4-1: SerialNumber: syz
[ 1495.112434][ T5880] ems_usb 4-1:91.102 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[ 1495.112791][ T5880] ems_usb 4-1:91.102: probe with driver ems_usb failed with error -22
[ 1495.160395][ T5880] usb 4-1: USB disconnect, device number 7
[ 1495.205418][T20759] udevd[20759]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory
[ 1495.205614][T20759] udevd[20759]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory
[ 1499.316469][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4269'.
[ 1500.802792][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4276'.
[ 1501.256231][ T5958] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1504.704774][ T5958] usb 4-1: Using ep0 maxpacket: 8
[ 1504.984442][ T5958] usb 4-1: device descriptor read/all, error -71
[ 1505.244710][T13760] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1505.605689][T13760] usb 6-1: Using ep0 maxpacket: 32
[ 1505.611953][T13760] usb 6-1: config 91 has an invalid interface number: 102 but max is 0
[ 1505.611987][T13760] usb 6-1: config 91 has no interface number 0
[ 1505.665890][T13760] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1505.665919][T13760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1505.665938][T13760] usb 6-1: Product: syz
[ 1505.665949][T13760] usb 6-1: Manufacturer: syz
[ 1505.665962][T13760] usb 6-1: SerialNumber: syz
[ 1506.751186][T13760] usb 6-1: can't set config #91, error -71
[ 1506.788864][T13760] usb 6-1: USB disconnect, device number 4
[ 1507.075726][T20899] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4292'.
[ 1507.254238][T20906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4294'.
[ 1507.415255][T11842] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1508.136985][T11842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.137047][T11842] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1508.137073][T11842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.146920][T11842] usb 4-1: config 0 descriptor??
[ 1508.157475][T11842] pwc: Askey VC010 type 2 USB webcam detected.
[ 1508.598464][T11842] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1508.602579][T11842] pwc: recv_control_msg error -32 req 02 val 2700
[ 1508.622488][T11842] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1508.633596][T11842] pwc: recv_control_msg error -32 req 04 val 1000
[ 1508.643893][T11842] pwc: recv_control_msg error -32 req 04 val 1300
[ 1508.658059][T11842] pwc: recv_control_msg error -32 req 04 val 1400
[ 1508.665303][T11842] pwc: recv_control_msg error -32 req 02 val 2000
[ 1508.682853][T11842] pwc: recv_control_msg error -32 req 02 val 2100
[ 1508.683579][T11842] pwc: recv_control_msg error -32 req 04 val 1500
[ 1508.885138][T11842] pwc: recv_control_msg error -71 req 02 val 2400
[ 1508.885629][T11842] pwc: recv_control_msg error -71 req 02 val 2600
[ 1508.886105][T11842] pwc: recv_control_msg error -71 req 02 val 2900
[ 1508.886555][T11842] pwc: recv_control_msg error -71 req 02 val 2800
[ 1508.896841][T11842] pwc: recv_control_msg error -71 req 04 val 1100
[ 1508.897367][T11842] pwc: recv_control_msg error -71 req 04 val 1200
[ 1509.007683][T11842] pwc: Registered as video103.
[ 1509.012400][T11842] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9
[ 1509.371623][T11842] usb 4-1: USB disconnect, device number 10
[ 1511.588174][T20961] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4308'.
[ 1512.036288][T11842] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1512.135623][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4310'.
[ 1512.171445][T20961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1512.175236][T20961] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1512.214641][T11842] usb 4-1: Using ep0 maxpacket: 32
[ 1512.217453][T11842] usb 4-1: config 91 has an invalid interface number: 102 but max is 0
[ 1512.217482][T11842] usb 4-1: config 91 has no interface number 0
[ 1512.221065][T11842] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1512.221099][T11842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.221121][T11842] usb 4-1: Product: syz
[ 1512.221137][T11842] usb 4-1: Manufacturer: syz
[ 1512.221152][T11842] usb 4-1: SerialNumber: syz
[ 1512.231607][T20961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1512.231922][T20961] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1512.534766][T11842] ems_usb 4-1:91.102 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[ 1512.537234][T11842] ems_usb 4-1:91.102: probe with driver ems_usb failed with error -22
[ 1512.645449][T11842] usb 4-1: USB disconnect, device number 11
[ 1514.263299][T21017] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4319'.
[ 1516.643083][T21049] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4325'.
[ 1516.874707][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1516.919644][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4332'.
[ 1517.215395][ T5880] usb 4-1: Using ep0 maxpacket: 32
[ 1517.676612][ T5880] usb 4-1: config 91 has an invalid interface number: 102 but max is 0
[ 1517.676841][ T5880] usb 4-1: config 91 has no interface number 0
[ 1517.872816][ T5880] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1517.872851][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.872873][ T5880] usb 4-1: Product: syz
[ 1517.872889][ T5880] usb 4-1: Manufacturer: syz
[ 1517.872905][ T5880] usb 4-1: SerialNumber: syz
[ 1518.157028][ T5880] ems_usb 4-1:91.102 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[ 1518.163252][ T5880] ems_usb 4-1:91.102: probe with driver ems_usb failed with error -22
[ 1518.238533][ T5880] usb 4-1: USB disconnect, device number 12
[ 1520.137782][T21108] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4345'.
[ 1521.123378][T21120] loop2: detected capacity change from 0 to 7
[ 1521.198403][T21120] Dev loop2: unable to read RDB block 7
[ 1521.198444][T21120]  loop2: unable to read partition table
[ 1521.198600][T21120] loop2: partition table beyond EOD, truncated
[ 1521.198655][T21120] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1522.796778][T21152] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4359'.
[ 1522.886345][T21159] tipc: Started in network mode
[ 1522.886380][T21159] tipc: Node identity 62434f7b599b, cluster identity 4711
[ 1522.886606][T21159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1522.891411][T21159] syzkaller0: entered promiscuous mode
[ 1522.891437][T21159] syzkaller0: entered allmulticast mode
[ 1524.044764][T13760] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1524.044968][T11842] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1524.074073][T21165] tipc: Resetting bearer <eth:syzkaller0>
[ 1524.127374][T21157] tipc: Resetting bearer <eth:syzkaller0>
[ 1524.177770][T13760] usb 6-1: device descriptor read/64, error -71
[ 1524.191256][T11842] usb 9-1: device descriptor read/64, error -71
[ 1524.350082][T21157] tipc: Disabling bearer <eth:syzkaller0>
[ 1524.414697][T13760] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1524.468889][T11842] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1524.544750][T13760] usb 6-1: device descriptor read/64, error -71
[ 1524.546708][ T9877] tipc: Node number set to 1004031867
[ 1524.594667][T11842] usb 9-1: device descriptor read/64, error -71
[ 1524.655017][T13760] usb usb6-port1: attempt power cycle
[ 1524.707938][T11842] usb usb9-port1: attempt power cycle
[ 1524.996145][T13760] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[ 1525.015622][T13760] usb 6-1: device descriptor read/8, error -71
[ 1525.045450][T11842] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1525.065458][T11842] usb 9-1: device descriptor read/8, error -71
[ 1525.245460][T21219] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4376'.
[ 1525.264101][T13760] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 1525.297618][T13760] usb 6-1: device descriptor read/8, error -71
[ 1525.304836][T11842] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1525.328085][T11842] usb 9-1: device descriptor read/8, error -71
[ 1525.389496][T21218] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4377'.
[ 1525.411211][T13760] usb usb6-port1: unable to enumerate USB device
[ 1525.438480][T11842] usb usb9-port1: unable to enumerate USB device
[ 1526.554139][T21253] netlink: 'syz.6.4386': attribute type 10 has an invalid length.
[ 1527.461459][T21264] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4389'.
[ 1531.026019][ T5958] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1531.543020][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.543049][ T5958] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1531.543089][ T5958] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1531.543112][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.620320][ T5958] usb 3-1: config 0 descriptor??
[ 1531.914812][ T5889] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1532.027670][T21299] netlink: 'syz.5.4400': attribute type 10 has an invalid length.
[ 1532.028220][T21299] team_slave_0: left promiscuous mode
[ 1532.028443][T21299] team_slave_1: left promiscuous mode
[ 1532.078228][ T5889] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1532.078271][ T5889] usb 9-1: can't read configurations, error -61
[ 1532.214788][ T5889] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1532.377650][ T5889] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1532.377693][ T5889] usb 9-1: can't read configurations, error -61
[ 1532.378144][ T5889] usb usb9-port1: attempt power cycle
[ 1532.714727][ T5889] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 1532.755478][ T5889] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1532.755507][ T5889] usb 9-1: can't read configurations, error -61
[ 1532.924830][ T5889] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[ 1533.143973][ T5889] usb 9-1: unable to read config index 0 descriptor/start: -61
[ 1533.144013][ T5889] usb 9-1: can't read configurations, error -61
[ 1533.144431][ T5889] usb usb9-port1: unable to enumerate USB device
[ 1534.157642][T21322] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4404'.
[ 1534.157680][T21322] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4404'.
[ 1534.629489][ T5958] usb 3-1: USB disconnect, device number 6
[ 1535.538991][T21334] syzkaller0: entered promiscuous mode
[ 1535.539019][T21334] syzkaller0: entered allmulticast mode
[ 1537.482210][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4415'.
[ 1537.482237][T21359] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4415'.
[ 1537.944758][ T5958] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[ 1538.504139][T13268] Bluetooth: hci4: command 0x0406 tx timeout
[ 1539.262496][ T5958] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1539.262538][ T5958] usb 6-1: can't read configurations, error -61
[ 1539.414741][ T5958] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[ 1539.844890][ T5958] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1539.844934][ T5958] usb 6-1: can't read configurations, error -61
[ 1539.845364][ T5958] usb usb6-port1: attempt power cycle
[ 1540.288951][ T5958] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1540.323412][ T5958] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1540.323455][ T5958] usb 6-1: can't read configurations, error -61
[ 1542.179283][ T5958] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1543.296728][ T5958] usb 6-1: device descriptor read/8, error -71
[ 1543.514756][ T5958] usb usb6-port1: unable to enumerate USB device
[ 1545.110400][T21414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4431'.
[ 1545.200044][T13268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1545.226261][T13268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1545.227986][T13268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1545.230339][T13268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1545.232083][T13268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1546.631111][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.834256][T21414] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1547.310551][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4435'.
[ 1547.360533][T11842] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1547.391373][T21431] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1547.510264][T17260] Bluetooth: hci1: command tx timeout
[ 1547.552846][T11842] usb 6-1: Using ep0 maxpacket: 8
[ 1547.555479][T11842] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[ 1547.555539][T11842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1547.555569][T11842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1547.555596][T11842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1547.555623][T11842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1547.555648][T11842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1547.555693][T11842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1547.555718][T11842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.071201][ T5889] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[ 1549.072474][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[ 1549.146214][T11842] usb 6-1: usb_control_msg returned -32
[ 1549.146269][T11842] usbtmc 6-1:16.0: can't read capabilities
[ 1549.722104][T17260] Bluetooth: hci1: command tx timeout
[ 1550.352687][ T5889] usb 3-1: device descriptor read/64, error -32
[ 1550.630550][ T5889] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1551.634646][T16556] usb 6-1: USB disconnect, device number 13
[ 1551.805993][ T5889] usb 3-1: device descriptor read/all, error -71
[ 1551.810267][ T5889] usb usb3-port1: attempt power cycle
[ 1551.887104][ T5889] ==================================================================
[ 1551.887121][ T5889] BUG: KASAN: slab-use-after-free in rtlock_slowlock_locked+0x3460/0x3c80
[ 1551.887344][ T5889] Read of size 8 at addr ffff88802915c8f8 by task kworker/1:6/5889
[ 1551.887364][ T5889] 
[ 1551.887393][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1551.887425][ T5889] Tainted: [L]=SOFTLOCKUP
[ 1551.887433][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1551.887449][ T5889] Workqueue: usb_hub_wq hub_event
[ 1551.887573][ T5889] Call Trace:
[ 1551.887581][ T5889]  <TASK>
[ 1551.887591][ T5889]  dump_stack_lvl+0xe8/0x150
[ 1551.887660][ T5889]  print_report+0xba/0x230
[ 1551.887699][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
[ 1551.887726][ T5889]  kasan_report+0x117/0x150
[ 1551.887807][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1551.887850][ T5889]  rtlock_slowlock_locked+0x3460/0x3c80
[ 1551.887891][ T5889]  ? rtlock_slowlock_locked+0xfb/0x3c80
[ 1551.887919][ T5889]  ? rtlock_slowlock_locked+0x2a8/0x3c80
[ 1551.887953][ T5889]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[ 1551.887992][ T5889]  ? rcu_is_watching+0x15/0xb0
[ 1551.888045][ T5889]  rt_spin_lock+0x165/0x400
[ 1551.888072][ T5889]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1551.888107][ T5889]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1551.888136][ T5889]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1551.888166][ T5889]  raw_queue_event+0x39/0x2e0
[ 1551.888255][ T5889]  gadget_d[ 1551.888255][ T5889]  gadget_disconnect+0x51/0xe0
[ 1551.888281][ T5889]  set_link_state+0xc0a/0x1220
[ 1551.888344][ T5889]  dummy_hub_control+0xafc/0x1a00
[ 1551.888374][ T5889]  ? usb_hcd_submit_urb+0x786/0x1b50
[ 1551.888417][ T5889]  usb_hcd_submit_urb+0xdbe/0x1b50
[ 1551.888452][ T5889]  usb_start_wait_urb+0x13f/0x5b0
[ 1551.888477][ T5889]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1551.888509][ T5889]  usb_control_msg+0x234/0x3e0
[ 1551.888534][ T5889]  hub_event+0x2dc0/0x4f60
[ 1551.888587][ T5889]  ? __pfx_hub_event+0x10/0x10
[ 1551.888614][ T5889]  ? preempt_schedule_thunk+0x16/0x30
[ 1551.888639][ T5889]  ? process_scheduled_works+0xa8d/0x18c0
[ 1551.888682][ T5889]  ? process_scheduled_works+0xa8d/0x18c0
[ 1551.888714][ T5889]  process_scheduled_works+0xb6e/0x18c0
[ 1551.888760][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1551.888795][ T5889]  ? assign_work+0x3d5/0x5e0
[ 1551.888851][ T5889]  worker_thread+0xa53/0xfc0
[ 1551.888899][ T5889]  kthread+0x388/0x470
[ 1551.888923][ T5889]  ? __pfx_worker_thread+0x10/0x10
[ 1551.888954][ T5889]  ? __pfx_kthread+0x10/0x10
[ 1551.888977][ T5889]  ret_from_fork+0x51e/0xb90
[ 1551.889024][ T5889]  ? __pfx_ret_from_fork+0x10/0x10
[ 1551.889054][ T5889]  ? __switch_to+0xc7d/0x1450
[ 1551.889098][ T5889]  ? __pfx_kthread+0x10/0x10
[ 1551.889121][ T5889]  ret_from_fork_asm+0x1a/0x30
[ 1551.889152][ T5889]  </TASK>
[ 1551.889161][ T5889] 
[ 1551.889166][ T5889] Allocated by task 21437:
[ 1551.889198][ T5889]  kasan_save_track+0x3e/0x80
[ 1551.889261][ T5889]  __kasan_kmalloc+0x93/0xb0
[ 1551.889291][ T5889]  __kmalloc_cache_noprof+0x3a6/0x690
[ 1551.889367][ T5889]  raw_open+0x8d/0x530
[ 1551.889387][ T5889]  misc_open+0x2de/0x350
[ 1551.889464][ T5889]  chrdev_open+0x4d0/0x5f0
[ 1551.889524][ T5889]  do_dentry_open+0x83d/0x13e0
[ 1551.889568][ T5889]  vfs_open+0x3b/0x350
[ 1551.889589][ T5889]  path_openat+0x2e43/0x38a0
[ 1551.889669][ T5889]  do_file_open+0x23e/0x4a0
[ 1551.889700][ T5889]  do_sys_openat2+0x113/0x200
[ 1551.889724][ T5889]  __x64_sys_openat+0x138/0x170
[ 1551.889749][ T5889]  do_syscall_64+0x14d/0xf80
[ 1551.889808][ T5889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.889855][ T5889] 
[ 1551.889860][ T5889] Freed by task 21433:
[ 1551.889870][ T5889]  kasan_save_track+0x3e/0x80
[ 1551.889898][ T5889]  kasan_save_free_info+0x46/0x50
[ 1551.889950][ T5889]  __kasan_slab_free+0x5c/0x80
[ 1551.889980][ T5889]  kfree+0x1c1/0x6c0
[ 1551.890007][ T5889]  raw_release+0x191/0x260
[ 1551.890028][ T5889]  __fput+0x461/0xa90
[ 1551.890050][ T5889]  task_work_run+0x1d9/0x270
[ 1551.890072][ T5889]  do_exit+0x70f/0x23c0
[ 1551.890099][ T5889]  do_group_exit+0x21b/0x2d0
[ 1551.890120][ T5889]  get_signal+0x125c/0x1310
[ 1551.890146][ T5889]  arch_do_signal_or_restart+0xbc/0x830
[ 1551.890173][ T5889]  exit_to_user_mode_loop+0x86/0x480
[ 1551.890224][ T5889]  do_syscall_64+0x32d/0xf80
[ 1551.890243][ T5889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.890263][ T5889] 
[ 1551.890268][ T5889] The buggy address belongs to the object at ffff88802915c000
[ 1551.890268][ T5889]  which belongs to the cache kmalloc-4k of size 4096
[ 1551.890288][ T5889] The buggy address is located 2296 bytes inside of
[ 1551.890288][ T5889]  freed 4096-byte region [ffff88802915c000, ffff88802915d000)
[ 1551.890312][ T5889] 
[ 1551.890318][ T5889] The buggy address belongs to the physical page:
[ 1551.890336][ T5889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29158
[ 1551.890357][ T5889] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1551.890376][ T5889] flags: 0x80000000000040(head|node=0|zone=1)
[ 1551.890403][ T5889] page_type: f5(slab)
[ 1551.890424][ T5889] raw: 0080000000000040 ffff88813fe1a140 dead000000000100 dead000000000122
[ 1551.890442][ T5889] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1551.890463][ T5889] head: 0080000000000040 ffff88813fe1a140 dead000000000100 dead000000000122
[ 1551.890481][ T5889] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1551.890501][ T5889] head: 0080000000000003 ffffea0000a45601 00000000ffffffff 00000000ffffffff
[ 1551.890518][ T5889] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1551.890530][ T5889] page dumped because: kasan: bad access detected
[ 1551.890549][ T5889] page_owner tracks the page as allocated
[ 1551.890557][ T5889] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1127, tgid 1127 (kworker/u8:8), ts 767843199709, free_ts 762770032970
[ 1551.890596][ T5889]  post_alloc_hook+0x231/0x280
[ 1551.890679][ T5889]  get_page_from_freelist+0x28bb/0x2950
[ 1551.890702][ T5889]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1551.890723][ T5889]  allocate_slab+0x77/0x660
[ 1551.890747][ T5889]  refill_objects+0x334/0x3c0
[ 1551.890770][ T5889]  __pcs_replace_empty_main+0x35c/0x710
[ 1551.890796][ T5889]  __kmalloc_node_track_caller_noprof+0x60b/0x7e0
[ 1551.890839][ T5889]  __alloc_skb+0x2c1/0x7d0
[ 1551.890922][ T5889]  nsim_dev_trap_report_work+0x29f/0xbc0
[ 1551.890979][ T5889]  process_scheduled_works+0xb6e/0x18c0
[ 1551.891007][ T5889]  worker_thread+0xa53/0xfc0
[ 1551.891036][ T5889]  kthread+0x388/0x470
[ 1551.891056][ T5889]  ret_from_fork+0x51e/0xb90
[ 1551.891085][ T5889]  ret_from_fork_asm+0x1a/0x30
[ 1551.891103][ T5889] page last free pid 1364 tgid 1364 stack trace:
[ 1551.891117][ T5889]  __free_frozen_pages+0xfe3/0x1170
[ 1551.891148][ T5889]  __slab_free+0x24f/0x2a0
[ 1551.891165][ T5889]  qlist_free_all+0x97/0x100
[ 1551.891193][ T5889]  kasan_quarantine_reduce+0x148/0x160
[ 1551.891222][ T5889]  __kasan_slab_alloc+0x22/0x80
[ 1551.891251][ T5889]  kmem_cache_alloc_lru_noprof+0x33c/0x680
[ 1551.891281][ T5889]  sock_alloc_inode+0x28/0xc0
[ 1551.891339][ T5889]  alloc_inode+0x6a/0x1b0
[ 1551.891443][ T5889]  __sock_create+0x12d/0x9d0
[ 1551.891490][ T5889]  rds_tcp_conn_path_connect+0x2d7/0x930
[ 1551.891555][ T5889]  rds_connect_worker+0x1d8/0x290
[ 1551.891638][ T5889]  process_scheduled_works+0xb6e/0x18c0
[ 1551.891668][ T5889]  worker_thread+0xa53/0xfc0
[ 1551.891696][ T5889]  kthread+0x388/0x470
[ 1551.891715][ T5889]  ret_from_fork+0x51e/0xb90
[ 1551.891743][ T5889]  ret_from_fork_asm+0x1a/0x30
[ 1551.891762][ T5889] 
[ 1551.891768][ T5889] Memory state around the buggy address:
[ 1551.891780][ T5889]  ffff88802915c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1551.891794][ T5889]  ffff88802915c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1551.891809][ T5889] >ffff88802915c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1551.891827][ T5889]                                                                 ^
[ 1551.891840][ T5889]  ffff88802915c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1551.891854][ T5889]  ffff88802915c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1551.891866][ T5889] ==================================================================
[ 1551.944813][T17260] Bluetooth: hci1: command tx timeout
[ 1552.091969][ T5889] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1552.091995][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1552.092026][ T5889] Tainted: [L]=SOFTLOCKUP
[ 1552.092034][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1552.092050][ T5889] Workqueue: usb_hub_wq hub_event
[ 1552.092080][ T5889] Call Trace:
[ 1552.092089][ T5889]  <TASK>
[ 1552.092098][ T5889]  vpanic+0x56c/0xa60
[ 1552.092135][ T5889]  ? __pfx_vpanic+0x10/0x10
[ 1552.092173][ T5889]  panic+0xc5/0xd0
[ 1552.092215][ T5889]  ? __pfx_panic+0x10/0x10
[ 1552.092248][ T5889]  ? preempt_schedule_thunk+0x16/0x30
[ 1552.092277][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
[ 1552.092308][ T5889]  ? preempt_schedule_thunk+0x16/0x30
[ 1552.092335][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
[ 1552.092364][ T5889]  check_panic_on_warn+0x89/0xb0
[ 1552.092389][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
[ 1552.092419][ T5889]  end_report+0x73/0x180
[ 1552.092439][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
[ 1552.092467][ T5889]  kasan_report+0x128/0x150
[ 1552.092489][ T5889]  ? rtlock_slowlock_locked+0x3460/0x3c80
[ 1552.092524][ T5889]  rtlock_slowlock_locked+0x3460/0x3c80
[ 1552.092566][ T5889]  ? rtlock_slowlock_locked+0xfb/0x3c80
[ 1552.092595][ T5889]  ? rtlock_slowlock_locked+0x2a8/0x3c80
[ 1552.092631][ T5889]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[ 1552.092669][ T5889]  ? rcu_is_watching+0x15/0xb0
[ 1552.092697][ T5889]  rt_spin_lock+0x165/0x400
[ 1552.092723][ T5889]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1552.092760][ T5889]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1552.092790][ T5889]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1552.092822][ T5889]  raw_queue_event+0x39/0x2e0
[ 1552.092850][ T5889]  gadget_disconnect+0x51/0xe0
[ 1552.092875][ T5889]  set_link_state+0xc0a/0x1220
[ 1552.092908][ T5889]  dummy_hub_control+0xafc/0x1a00
[ 1552.092936][ T5889]  ? usb_hcd_submit_urb+0x786/0x1b50
[ 1552.092968][ T5889]  usb_hcd_submit_urb+0xdbe/0x1b50
[ 1552.093001][ T5889]  usb_start_wait_urb+0x13f/0x5b0
[ 1552.093027][ T5889]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1552.093060][ T5889]  usb_control_msg+0x234/0x3e0
[ 1552.093085][ T5889]  hub_event+0x2dc0/0x4f60
[ 1552.093139][ T5889]  ? __pfx_hub_event+0x10/0x10
[ 1552.093166][ T5889]  ? preempt_schedule_thunk+0x16/0x30
[ 1552.093201][ T5889]  ? process_scheduled_works+0xa8d/0x18c0
[ 1552.093231][ T5889]  ? process_scheduled_works+0xa8d/0x18c0
[ 1552.093264][ T5889]  process_scheduled_works+0xb6e/0x18c0
[ 1552.093313][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1552.093348][ T5889]  ? assign_work+0x3d5/0x5e0
[ 1552.093381][ T5889]  worker_thread+0xa53/0xfc0
[ 1552.093427][ T5889]  kthread+0x388/0x470
[ 1552.093450][ T5889]  ? __pfx_worker_thread+0x10/0x10
[ 1552.093480][ T5889]  ? __pfx_kthread+0x10/0x10
[ 1552.093503][ T5889]  ret_from_fork+0x51e/0xb90
[ 1552.093536][ T5889]  ? __pfx_ret_from_fork+0x10/0x10
[ 1552.093566][ T5889]  ? __switch_to+0xc7d/0x1450
[ 1552.093594][ T5889]  ? __pfx_kthread+0x10/0x10
[ 1552.093618][ T5889]  ret_from_fork_asm+0x1a/0x30
[ 1552.093648][ T5889]  </TASK>
[ 1552.094264][ T5889] Kernel Offset: disabled