last executing test programs:

8m7.69239767s ago: executing program 32 (id=419):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000500)={{0xffffffffffffffff, 0x0, 0x2ad80, &(0x7f0000000080)={@align=0x6, {0x8, 0xffbb, 0x6, 0x400}}, 0xfffffffa, 0x0, 0x0}, 0x0, 0x0})
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

6m33.711410468s ago: executing program 2 (id=1132):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272696467650000280002800c0023000206000000000000050025000000000005002400"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410)

6m33.421694406s ago: executing program 5 (id=1138):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0x4}, {0x6, 0xfe, 0x0, 0xfffffffd}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)

6m33.414934035s ago: executing program 2 (id=1139):
bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1}, 0x8}], 0x1, 0x102, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x3)

6m33.281371104s ago: executing program 5 (id=1140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc4}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0)

6m33.108022233s ago: executing program 5 (id=1144):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffb9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x698}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}}, 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)

6m32.979265584s ago: executing program 1 (id=1145):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r4=>r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f00000000c0)=0x6)

6m32.843474901s ago: executing program 5 (id=1146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

6m32.792836172s ago: executing program 1 (id=1147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

6m32.482623308s ago: executing program 1 (id=1148):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff1800000200ffff000100000000000000001e0e080012000200010000d200000000000021006c540203009f7eae02000000ad440200000000f52c000000cdff00000001020006bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

6m32.345215844s ago: executing program 2 (id=1149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0)

6m31.938355105s ago: executing program 5 (id=1150):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0x4}, {0x6, 0xfe, 0x0, 0xfffffffd}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)

6m31.845141929s ago: executing program 5 (id=1151):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x5c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "359f6ef711e7273db944a171b1d6421c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4)

6m31.82897716s ago: executing program 2 (id=1152):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x146)

6m31.769739652s ago: executing program 1 (id=1153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

6m31.707432918s ago: executing program 2 (id=1154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc4}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0)

6m31.694355851s ago: executing program 1 (id=1155):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbfc, {0x3}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, 0x0, &(0x7f0000000480)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r1, &(0x7f00000006c0), 0x0}, 0x20)

6m31.545237716s ago: executing program 1 (id=1156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000)

6m31.544598852s ago: executing program 2 (id=1157):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d2075a5625827d853a8b3f9d5fd4c6324518c9f9d93b9ced5500aeb511a2247"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065789368647200000c00028008000640000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xbc}}, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6m18.051885525s ago: executing program 33 (id=1141):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001f80)={0x2, 'dummy0\x00', {0x78}, 0x4})
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r3, 0x0, 0xffffffff000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x2, 0x8007, 0xff}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1080020}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040881}, 0x84)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$key(0xf, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001b00)={'vxcan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003fc0))
sendmmsg$inet(r2, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1, &(0x7f0000001b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004100)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000004280)}}], 0x3, 0xa1)
sendmsg$key(r7, 0x0, 0x0)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r4)
recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1}, 0x8}], 0x1, 0x102, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001940))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'netdevsim0\x00'})

6m17.99357945s ago: executing program 34 (id=1143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

6m16.554014554s ago: executing program 35 (id=1156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000)

6m16.516978973s ago: executing program 36 (id=1151):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x5c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "359f6ef711e7273db944a171b1d6421c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4)

6m15.565630404s ago: executing program 37 (id=1157):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d2075a5625827d853a8b3f9d5fd4c6324518c9f9d93b9ced5500aeb511a2247"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065789368647200000c00028008000640000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xbc}}, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m35.096838877s ago: executing program 4 (id=2648):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$igmp6(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2m34.967668211s ago: executing program 4 (id=2650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000"], 0x1a4}}, 0x0)

2m34.701669378s ago: executing program 4 (id=2652):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x1, 0x0, 0x0, 0x8, 0x30015}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214"], 0x5c}}, 0x0)

2m34.378642967s ago: executing program 4 (id=2658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)

2m34.027973887s ago: executing program 4 (id=2661):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0)

2m33.250024348s ago: executing program 4 (id=2665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
userfaultfd(0x80001)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r3, 0x0, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"})
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0xd7, [0x10000, 0xd, 0x0, 0x6, 0x6, 0x8], 0x0, &(0x7f00000000c0), &(0x7f0000000140)=""/215}, &(0x7f0000000280)=0x78)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x0, 0x2000, 0x0, 0x0}, {0x8000, 0x6000, 0x0, 0x0}], 0x2})

2m18.138154359s ago: executing program 38 (id=2665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
userfaultfd(0x80001)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r3, 0x0, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"})
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0xd7, [0x10000, 0xd, 0x0, 0x6, 0x6, 0x8], 0x0, &(0x7f00000000c0), &(0x7f0000000140)=""/215}, &(0x7f0000000280)=0x78)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x0, 0x2000, 0x0, 0x0}, {0x8000, 0x6000, 0x0, 0x0}], 0x2})

1m56.265281256s ago: executing program 7 (id=2862):
syz_emit_ethernet(0xd81, &(0x7f0000003780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xd4b, 0x3a, 0x0, @private2, @mcast2, {[@hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0x200, [0x8000000000000001, 0x8, 0x7fff, 0xe, 0x5, 0x81]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x91c, [0x1, 0x2, 0x5]}}]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x40, 0x80}, @dstopts={0xff, 0x26, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x4}}, @jumbo={0xc2, 0x4, 0xb}, @hao={0xc9, 0x10, @mcast2}, @generic={0xf4, 0xff, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x8, 0x0, 0xff, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x33, 0x167, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xb, 0xb25, "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"}]}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007008400"}}}}}}}, 0x0)

1m56.122824358s ago: executing program 7 (id=2863):
r0 = socket$kcm(0x2b, 0x1, 0x0)
listen(r0, 0x6)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0)
close(r0)

1m55.989540977s ago: executing program 7 (id=2865):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2043, 0x0, 0x0)

1m55.685186838s ago: executing program 7 (id=2867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4020010)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

1m55.268096744s ago: executing program 7 (id=2872):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff080012400000e54a050005000200000005000100060000000c0003006861"], 0x58}}, 0x80)

1m55.063543751s ago: executing program 7 (id=2876):
socket$inet(0x2, 0x803, 0x53792800)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000ed0000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x5c5a0000)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x80}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

1m39.888888505s ago: executing program 39 (id=2876):
socket$inet(0x2, 0x803, 0x53792800)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000ed0000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x5c5a0000)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x80}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

8.604012913s ago: executing program 6 (id=3668):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

8.292149882s ago: executing program 6 (id=3671):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@can_newroute={0x2c, 0x18, 0xf885a5fe37fdb9e7, 0x70bd2c, 0x25dfdbfd, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "92ed212072f9118e"}, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000068)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r3=>r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

7.810750543s ago: executing program 6 (id=3675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

7.313780795s ago: executing program 6 (id=3679):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

6.833717245s ago: executing program 6 (id=3684):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00')
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x2, 0xe8, &(0x7f0000000380)="8f3c8ca7c98533df09d217c95e34bfd2dcc5f67f181379efb10c093f600c0e7e5ee84605aa6e51abd73c0dafa35d1364e2b78615fc96dbe4e077592cd7c8836e7005352d39ad4afa3839297bf88d2c384ac56fca67efd53fb7871d39df00ebaf5171a530a9b2d6933fc7de25bd80b388c48a4308c8d81c29b44f9b4a174bf15b17eda44a86d4e43d11b7ee19ed98ba2a710fdeffab18e96f40b2c7126f306ddfa423c17d4e1ce04ca41cced2a6e5e72ebe799d18b9d6bf94e171c1eb90171020366f0fe9dbf1a904f724a11094f25baa0182b5f9386e88f7dba3c59cc7f8aa5e20608f9b992065a7"})
read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0xfffffff9)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8)
sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x14, @loopback, 0x1}, 0x72)
sendmmsg$sock(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x1, 0x48890)
shutdown(r3, 0x1)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x76}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

5.458829838s ago: executing program 9 (id=3693):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500)="68e0dbe391d7a4bdb47f8e21326c1aa928aebcac4c4385c9b3378ac2", 0x0}, 0x20)

5.045809333s ago: executing program 9 (id=3695):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0)

2.921809436s ago: executing program 9 (id=3712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.861818321s ago: executing program 8 (id=3713):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251f0000000a00"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8042)

2.850625028s ago: executing program 3 (id=3715):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20)

2.657176778s ago: executing program 3 (id=3716):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x88400, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r3 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000000)=0x2f9d)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

2.634555901s ago: executing program 8 (id=3717):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet6(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000240)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.633850209s ago: executing program 9 (id=3718):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB='<\x000'], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4)

2.363763132s ago: executing program 9 (id=3720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}})

2.270168135s ago: executing program 8 (id=3722):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/37, 0x25}, 0x2100)
r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x4, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000001400)={0x2, @vbi={0xed07, 0x9, 0x200, 0x47425247, [0x4, 0x4], [0x8, 0x5], 0x108}})
r2 = syz_open_dev$swradio(&(0x7f0000001500), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000001540)=0x80000001)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000001580)=0x10, 0x4)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0), 0x14580, 0x0)
syz_open_dev$video4linux(0x0, 0x4, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000001640)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000016c0)={0xc, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000001700)={0x48, 0x2, r5})
r6 = accept$nfc_llcp(r0, &(0x7f0000001780), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001840)=<r7=>0x0)
connect$nfc_llcp(r6, &(0x7f0000001880)={0x27, r7, 0xffffffffffffffff, 0x3, 0x40, 0x1, "d10cc94aa9091f8f52e9e771b05d73bf15880b9e5a947b01873bfdd1c10eb3f00597d4bfaa1ae020bc8d2fe8e9cc2491f92a4ee72661615b2897f30b01d43e", 0x1a}, 0x60)
ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000001900))
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000001940))
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000019c0)={0x2, "2926ec"}, 0x6)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000001a00)={0x0, <r8=>0x0, 0x7})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r3, 0xc028644b, &(0x7f0000001a40)={r8, 0xffff, 0x460000, 0x0, 0x5, 0x0, 0x100, 0xcf66})
r9 = fsmount(r3, 0x1, 0x70)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f0000001b80)={{r6}, 0x0, 0x0, @unused=[0x3, 0xffff, 0x7f, 0x3], @name="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"})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002b80), 0x2, 0x2}}, 0x20)
syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_conf_req={{0x4, 0x6, 0xb}, {0x82, 0xd248, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x3}]}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x9, 0x6}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x7, 0xd, 0x7, 0x8}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x5, 0x3, 0x2, 0x200}}]}}, 0x38)
sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x20000011)
socket$netlink(0x10, 0x3, 0xb)

2.083919733s ago: executing program 3 (id=3724):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)

2.060646611s ago: executing program 6 (id=3725):
socket(0x10, 0x2, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

1.393419727s ago: executing program 8 (id=3726):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20)

1.393259136s ago: executing program 3 (id=3727):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251f0000000a00"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8042)

1.301046931s ago: executing program 3 (id=3728):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500)="68e0dbe391d7a4bdb47f8e21326c1aa928aebcac4c4385c9b3378ac2", 0x0}, 0x20)

1.209780403s ago: executing program 8 (id=3730):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB='<\x000'], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4)

1.105577077s ago: executing program 9 (id=3731):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1.084816765s ago: executing program 3 (id=3732):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet6(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000240)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.047574523s ago: executing program 8 (id=3733):
memfd_create(&(0x7f0000000c40)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xf8\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262<k\xa8\x88\x01\x00fhD\xe7\xb6\x17\x80\x95\xa8\x1e\t\xb01KB\xcb\x00\x1e\x7fE\x7f\x02\x00\x00\x00y<nGR\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"u\xf4>-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfd\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cL\x8aC\x81\x16tZ\xff\x9b\x066U\x8f-\x9c\xa3B\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00x}Y\xa3T\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa8\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xab\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01|&\"a\xd1\x91\xb9\xb1\xa9\x11\x91\x86\x92\xd8\xd5\x02~\x9b\x83\xc70\xd1)y\xd2V\x97\xfe\xcf\xffj\x1ey\x89E<K5\x95\xc9\xba\x11\n\xde\xfe#\x00V\n\xc2L\xf7Q\x97)\xc2\xa4*\x8c\x10W\xcdi\x82\xb1\x103\x03Y\x91/\x84\xf1ud<z\xd6<\xfe\xe1{\xd4\x98/\xf4\xee0\x17\x03J\xc4\xa6\xb7\xd7\xe6\x90\x13\xac\x02\xc6dD\xceT\xd3\xad\xef\x99\x11\xe5\xaf\xa5\xdbb\xe5\xc1\xd5\x058|2\x80\x88M1K\xe3\x8d\x1b\x03\xa8;(\x9d%\xecq\xe5iN\x9b\xb0ZD[\xce\x1f\x8d\xb6/\x83i\xd9K\x86.\xe6\\\rh\xe4\xd9\xd7\x92Ys\xfd\r\x9c\xf2\xa2\xbe\xa3\x1dlM\r\xdf\xd0\x89\x0e\x16k/Z\xea\xe4\x94\xf8//\xe8\xac\x8eu8T\xf7\tt\xc8\xfb\xa2\bS\xf2>\x97\xa9\xef\xectKAL\\\xb8\t\xf8\x1b\xc5y@\xc0', 0x6)
io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents64(r3, &(0x7f0000000500)=""/166, 0xa6)

893.702048ms ago: executing program 0 (id=3735):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x88400, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r3 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000000)=0x2f9d)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

833.572525ms ago: executing program 0 (id=3736):
socket$inet6(0xa, 0x80001, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket(0x2, 0x3, 0xff)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$inet6(0xa, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x11, 0x3, 0xff)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
socket(0x10, 0x3, 0x0)
socket(0x11, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
r0 = socket(0x11, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x20)

729.724796ms ago: executing program 0 (id=3737):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

711.675917ms ago: executing program 0 (id=3738):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251f0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8042)

652.124866ms ago: executing program 0 (id=3739):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea2feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a1", 0xf1}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="42e013913edbeb", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001e00)="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", 0x405}, {0x0}], 0x2, &(0x7f0000000a40)}}], 0x3, 0x2090)

0s ago: executing program 0 (id=3740):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f0000000300)="f901f1d321ce9dafa7fda7da", 0xc}, {0x0}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000000500)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000005c0)="c6a19f723c5b8c82ea8bf6f4c4e5", 0xe}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000000440)="cd52c0f13f0c6ef1edbe7308207ef41c62b4ccc50ff79cca8c", 0x19}], 0x3}}], 0x3, 0x4040040)

kernel console output (not intermixed with test programs):

etdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.291644][   T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.291683][   T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  357.597591][T10513] lec:lec_atm_close: lec0: Shut down!
[  358.362291][T10585] __nla_validate_parse: 1 callbacks suppressed
[  358.362343][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1559'.
[  358.365999][T10589] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1560'.
[  358.468375][T10578] syzkaller1: entered promiscuous mode
[  358.468403][T10578] syzkaller1: entered allmulticast mode
[  358.624056][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1563'.
[  358.948690][T10598] bridge1: entered promiscuous mode
[  358.948719][T10598] bridge1: entered allmulticast mode
[  359.299174][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1570'.
[  359.299209][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1570'.
[  359.526586][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1573'.
[  359.790636][T10622] bridge0: port 3(team0) entered disabled state
[  359.799046][T10622] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.820749][T10622] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.528363][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'.
[  360.579932][T10636] bridge1: entered promiscuous mode
[  360.579959][T10636] bridge1: entered allmulticast mode
[  360.637981][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1578'.
[  360.983035][ T5982] IPVS: starting estimator thread 0...
[  361.021346][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1583'.
[  361.021381][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1583'.
[  361.077529][T10654] IPVS: using max 8 ests per chain, 19200 per kthread
[  363.248025][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms
[  363.248064][    C0] lec:lec_tx_timeout: lec0
[  363.248232][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  364.119059][T10742] __nla_validate_parse: 4 callbacks suppressed
[  364.119081][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  364.120440][T10742] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.122334][T10742] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.555482][T10753] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1616'.
[  365.316704][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1624'.
[  365.361244][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'.
[  366.443157][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1640'.
[  366.443195][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1640'.
[  367.038469][T10835] syz_tun: entered promiscuous mode
[  367.038755][T10835] vlan2: entered promiscuous mode
[  367.514530][T10853] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1652'.
[  367.884991][T10551] Set syz1 is full, maxelem 65536 reached
[  368.635924][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1665'.
[  368.822546][T10903] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  368.874170][T10903] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  368.916688][T10895] netlink: 'syz.7.1665': attribute type 2 has an invalid length.
[  368.916712][T10895] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1665'.
[  368.948172][T10895] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.007323][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms
[  369.007357][    C0] lec:lec_tx_timeout: lec0
[  369.007675][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  369.252470][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1670'.
[  369.549280][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1675'.
[  369.922735][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1681'.
[  370.246071][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1687'.
[  370.278612][T10960] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  370.314205][T10960] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  371.521742][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1700'.
[  372.718265][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1714'.
[  373.262506][T11062] syzkaller0: entered promiscuous mode
[  373.262530][T11062] syzkaller0: entered allmulticast mode
[  373.412367][T11068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.438033][T11062] tipc: Resetting bearer <eth:syzkaller0>
[  373.465561][T11060] tipc: Resetting bearer <eth:syzkaller0>
[  373.592000][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'.
[  373.665060][T11060] tipc: Disabling bearer <eth:syzkaller0>
[  373.713420][T11040] lec:lec_atm_close: lec0: Shut down!
[  374.520817][T11112] netlink: 'syz.7.1732': attribute type 29 has an invalid length.
[  374.549195][T11112] netlink: 'syz.7.1732': attribute type 29 has an invalid length.
[  374.550118][T11112] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1732'.
[  374.639606][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1731'.
[  374.639631][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1731'.
[  374.639657][T11115] netlink: 'syz.8.1731': attribute type 4 has an invalid length.
[  374.933176][ T1573] IPVS: starting estimator thread 0...
[  375.017504][T11127] IPVS: using max 9 ests per chain, 21600 per kthread
[  375.697772][T11160] netlink: 548 bytes leftover after parsing attributes in process `syz.9.1745'.
[  375.737555][T11154] netlink: 'syz.9.1745': attribute type 29 has an invalid length.
[  375.777869][T11156] netlink: 'syz.9.1745': attribute type 29 has an invalid length.
[  376.522548][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'.
[  378.216404][T11246] syzkaller0: entered promiscuous mode
[  378.216433][T11246] syzkaller0: entered allmulticast mode
[  378.635189][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  378.927465][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms
[  378.927506][    C0] lec:lec_tx_timeout: lec0
[  378.929424][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  379.256916][T11292] netlink: 388 bytes leftover after parsing attributes in process `syz.8.1790'.
[  379.312590][T11257] lec:lec_atm_close: lec0: Shut down!
[  379.352291][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'.
[  380.283789][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1801'.
[  380.466185][T11327] netlink: 388 bytes leftover after parsing attributes in process `syz.8.1803'.
[  381.180535][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1809'.
[  381.311145][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'.
[  381.615010][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1819'.
[  384.927385][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms
[  384.927421][    C0] lec:lec_tx_timeout: lec0
[  384.927550][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  389.937363][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  389.937414][    C0] lec:lec_tx_timeout: lec0
[  389.937558][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  391.055902][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1827'.
[  392.186073][T11409] ipvlan2: entered promiscuous mode
[  392.241919][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1838'.
[  392.985955][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1846'.
[  392.986226][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1846'.
[  393.405065][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1850'.
[  393.505755][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1851'.
[  393.595329][T11447] vlan2: entered promiscuous mode
[  393.595353][T11447] bridge0: entered promiscuous mode
[  394.386073][T11477] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1861'.
[  394.791502][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'.
[  394.873093][T11496] vlan2: entered promiscuous mode
[  394.947342][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  394.947377][    C0] lec:lec_tx_timeout: lec0
[  394.947496][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  397.519597][T11485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  397.867992][T11574] syzkaller0: entered promiscuous mode
[  397.868020][T11574] syzkaller0: entered allmulticast mode
[  398.329689][T11594] netlink: 'syz.4.1889': attribute type 1 has an invalid length.
[  398.449930][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'.
[  398.803003][T11594] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.949210][T11597] 8021q: adding VLAN 0 to HW filter on device batadv1
[  398.954643][T11597] bond0: (slave batadv1): making interface the new active one
[  398.967770][T11597] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  399.267945][T11599] bond0 (unregistering): (slave batadv1): Releasing active interface
[  399.311771][T11599] bond0 (unregistering): Released all slaves
[  399.957336][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  399.957372][    C0] lec:lec_tx_timeout: lec0
[  399.957452][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  400.576912][T11629] bridge0: port 3(team0) entered disabled state
[  400.587059][T11629] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.596986][T11629] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.430155][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.447273][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.717425][ T3180] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.717562][ T3180] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.727739][ T3180] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.727771][ T3180] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.727860][ T3180] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.727895][ T3180] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.727931][ T3180] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.727956][ T3180] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.096240][T11660] bridge1: entered promiscuous mode
[  403.096268][T11660] bridge1: entered allmulticast mode
[  403.119946][T11660] team0: Port device bridge1 added
[  404.234951][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1921'.
[  404.551490][T11690] bridge2: entered promiscuous mode
[  404.551523][T11690] bridge2: entered allmulticast mode
[  404.555290][T11690] team0: Port device bridge2 added
[  404.684596][T11692] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 !
[  404.967341][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  404.967387][    C0] lec:lec_tx_timeout: lec0
[  404.970230][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  405.521362][T11711] netlink: 'syz.4.1934': attribute type 29 has an invalid length.
[  405.537806][T11711] netlink: 'syz.4.1934': attribute type 29 has an invalid length.
[  405.759854][T11715] bridge2: entered promiscuous mode
[  405.759881][T11715] bridge2: entered allmulticast mode
[  405.766404][T11715] team0: Port device bridge2 added
[  406.294671][T11684] Bluetooth: hci7: command 0x0406 tx timeout
[  406.294707][T11684] Bluetooth: hci6: command 0x0406 tx timeout
[  406.294732][T11684] Bluetooth: hci2: command 0x0406 tx timeout
[  406.294983][T11683] Bluetooth: hci8: command 0x0406 tx timeout
[  406.528331][T11740] netlink: 'syz.4.1946': attribute type 29 has an invalid length.
[  406.537961][T11740] netlink: 'syz.4.1946': attribute type 29 has an invalid length.
[  407.250664][T11762] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  408.049721][T11777] netlink: 'syz.7.1962': attribute type 29 has an invalid length.
[  408.054423][T11777] netlink: 'syz.7.1962': attribute type 29 has an invalid length.
[  408.365696][T11791] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1967'.
[  408.637708][T11801] netlink: 'syz.9.1971': attribute type 1 has an invalid length.
[  408.683977][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1971'.
[  408.948957][T11801] 8021q: adding VLAN 0 to HW filter on device bond1
[  409.168093][T11807] bond1 (unregistering): Released all slaves
[  409.646177][T11820] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1978'.
[  409.671211][T11820] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1978'.
[  409.671765][T11820] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1978'.
[  409.761293][T11823] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  409.902203][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1980'.
[  409.902364][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1980'.
[  409.903225][T11827] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1980'.
[  409.982596][T11829] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1981'.
[  409.987385][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  409.987458][    C0] lec:lec_tx_timeout: lec0
[  409.987763][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  410.158077][T11827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.229196][T11827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.283588][T11827] bond0 (unregistering): Released all slaves
[  410.949060][T11825] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  410.949086][T11825] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  410.982980][T11846] netlink: 'syz.9.1986': attribute type 1 has an invalid length.
[  411.120264][T11825] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  411.120289][T11825] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  411.145795][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1986'.
[  411.192125][T11846] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.312617][T11825] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  411.312643][T11825] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  411.368172][T11853] 8021q: adding VLAN 0 to HW filter on device batadv1
[  411.387095][T11853] bond0: (slave batadv1): making interface the new active one
[  411.400731][T11853] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  411.469617][T11825] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  411.469644][T11825] Bluetooth: hci8: Error when powering off device on rfkill (-4)
[  411.617754][T11825] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  411.617779][T11825] Bluetooth: hci9: Error when powering off device on rfkill (-4)
[  411.642415][T11854] bond0 (unregistering): (slave batadv1): Releasing active interface
[  411.684757][T11854] bond0 (unregistering): Released all slaves
[  412.117497][T11873] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1992'.
[  412.295495][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'.
[  414.836346][T11921] __nla_validate_parse: 1 callbacks suppressed
[  414.836366][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2003'.
[  414.946599][T11924] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2004'.
[  414.997296][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  414.997333][    C0] lec:lec_tx_timeout: lec0
[  414.997435][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  415.173286][T11928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2005'.
[  415.244148][T11928] vlan2: entered promiscuous mode
[  415.679397][T11944] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2008'.
[  415.680550][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2008'.
[  415.680771][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2008'.
[  415.850332][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2010'.
[  416.730490][T11977] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2015'.
[  416.769605][T11976] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2017'.
[  416.840706][T11976] vlan2: entered promiscuous mode
[  416.840732][T11976] bridge0: entered promiscuous mode
[  419.182749][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2034'.
[  419.971659][T12062] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2042'.
[  420.007325][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  420.007359][    C0] lec:lec_tx_timeout: lec0
[  420.007595][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  420.012784][T12062] vlan2: entered promiscuous mode
[  420.012798][T12062] bridge0: entered promiscuous mode
[  420.174078][T12071] tipc: Failed to remove unknown binding: 66,0,0/0:2452215177/2452215179
[  420.174117][T12071] tipc: Failed to remove unknown binding: 66,0,0/0:2452215177/2452215178
[  420.174736][T12071] tipc: Failed to remove unknown binding: 66,0,0/0:2452215177/2452215179
[  420.174770][T12071] tipc: Failed to remove unknown binding: 66,0,0/0:2452215177/2452215178
[  420.846109][T12085] syzkaller0: entered promiscuous mode
[  420.846136][T12085] syzkaller0: entered allmulticast mode
[  421.724998][T12104] tipc: Failed to remove unknown binding: 66,0,0/0:1786038385/1786038387
[  421.725037][T12104] tipc: Failed to remove unknown binding: 66,0,0/0:1786038385/1786038386
[  421.725646][T12104] tipc: Failed to remove unknown binding: 66,0,0/0:1786038385/1786038387
[  421.725680][T12104] tipc: Failed to remove unknown binding: 66,0,0/0:1786038385/1786038386
[  422.137027][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2062'.
[  423.689685][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'.
[  423.713900][T12148] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2076'.
[  423.714857][T12148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2076'.
[  423.715023][T12148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2076'.
[  424.421698][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2083'.
[  424.421735][T12163] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2083'.
[  425.017320][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  425.017356][    C0] lec:lec_tx_timeout: lec0
[  425.017449][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  425.219129][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2090'.
[  427.270713][T12217] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2108'.
[  427.798852][T12235] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2113'.
[  427.798881][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2113'.
[  428.097919][T12243] netlink: 136 bytes leftover after parsing attributes in process `syz.8.2118'.
[  428.404513][T12253] syzkaller0: entered promiscuous mode
[  428.404541][T12253] syzkaller0: entered allmulticast mode
[  428.600299][T12260] netlink: 'syz.8.2125': attribute type 1 has an invalid length.
[  428.715145][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2125'.
[  429.132934][T12260] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.225233][T12261] 8021q: adding VLAN 0 to HW filter on device batadv1
[  429.230960][T12261] bond1: (slave batadv1): making interface the new active one
[  429.234611][T12261] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  429.298741][T12280] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2131'.
[  429.588814][T12264] bond1 (unregistering): (slave batadv1): Releasing active interface
[  429.631522][T12264] bond1 (unregistering): Released all slaves
[  429.969597][T12278] syzkaller0: entered promiscuous mode
[  429.969627][T12278] syzkaller0: entered allmulticast mode
[  430.027378][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  430.027413][    C0] lec:lec_tx_timeout: lec0
[  430.027493][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  430.802671][T12313] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2143'.
[  431.308311][T12322] netlink: 'syz.4.2147': attribute type 1 has an invalid length.
[  431.417421][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'.
[  432.609913][T12332] netlink: 'syz.6.2149': attribute type 1 has an invalid length.
[  432.715616][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'.
[  435.047306][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  435.047344][    C0] lec:lec_tx_timeout: lec0
[  435.047560][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  440.057435][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  440.057475][    C0] lec:lec_tx_timeout: lec0
[  440.057556][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  440.058452][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  441.809886][T12322] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  441.930128][T12332] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  442.188841][T12351] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2154'.
[  442.288220][T12355] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2155'.
[  442.298808][T12355] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2155'.
[  442.299339][T12355] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2155'.
[  442.667405][T12368] netlink: 'syz.9.2164': attribute type 1 has an invalid length.
[  442.786269][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2164'.
[  442.786540][T12368] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.850676][T12380] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0
[  442.944707][T12374] 8021q: adding VLAN 0 to HW filter on device batadv2
[  442.967748][T12374] bond0: (slave batadv2): making interface the new active one
[  442.969264][T12374] bond0: (slave batadv2): Enslaving as an active interface with an up link
[  443.141954][T12377] bond0 (unregistering): (slave batadv2): Releasing active interface
[  443.211442][T12392] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2170'.
[  443.212134][T12392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2170'.
[  443.212309][T12392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2170'.
[  443.232112][T12377] bond0 (unregistering): Released all slaves
[  443.356701][T12393] netlink: 'syz.8.2169': attribute type 1 has an invalid length.
[  443.465794][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2169'.
[  443.760860][T12393] 8021q: adding VLAN 0 to HW filter on device bond1
[  443.790596][T12402] 8021q: adding VLAN 0 to HW filter on device batadv2
[  443.809398][T12402] bond1: (slave batadv2): making interface the new active one
[  443.811091][T12402] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  443.968727][T12403] bond1 (unregistering): (slave batadv2): Releasing active interface
[  443.998330][T12403] bond1 (unregistering): Released all slaves
[  444.378665][T12426] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2183'.
[  444.734498][T12438] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.735133][T12438] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.061210][T12448] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0
[  445.067367][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  445.067409][    C0] lec:lec_tx_timeout: lec0
[  445.067510][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  445.214498][T12450] netlink: 'syz.6.2194': attribute type 1 has an invalid length.
[  445.448719][T12450] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.587507][T12455] 8021q: adding VLAN 0 to HW filter on device batadv1
[  445.625852][T12455] bond0: (slave batadv1): making interface the new active one
[  445.638965][T12455] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  445.891963][T12458] bond0 (unregistering): (slave batadv1): Releasing active interface
[  445.954314][T12458] bond0 (unregistering): Released all slaves
[  446.246076][  T162] bridge_slave_1: left allmulticast mode
[  446.246345][  T162] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.349655][  T162] bridge_slave_0: left allmulticast mode
[  446.349917][  T162] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.276178][  T162] dvmrp0 (unregistering): left allmulticast mode
[  447.581029][  T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.677830][  T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  447.708898][  T162] bond0 (unregistering): Released all slaves
[  447.725828][  T162] bond1 (unregistering): Released all slaves
[  447.871348][T12494] __nla_validate_parse: 7 callbacks suppressed
[  447.871368][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2207'.
[  447.871383][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2207'.
[  447.988543][T12518] netlink: 'syz.8.2217': attribute type 1 has an invalid length.
[  448.114810][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2217'.
[  448.131118][T12519] IPVS: stopping backup sync thread 12522 ...
[  448.131895][  T162] tipc: Left network mode
[  448.291669][T12518] 8021q: adding VLAN 0 to HW filter on device bond1
[  448.378951][T12520] 8021q: adding VLAN 0 to HW filter on device batadv3
[  448.382247][T12520] bond1: (slave batadv3): making interface the new active one
[  448.383805][T12520] bond1: (slave batadv3): Enslaving as an active interface with an up link
[  448.405444][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2219'.
[  448.580824][T12521] bond1 (unregistering): (slave batadv3): Releasing active interface
[  448.630505][T12521] bond1 (unregistering): Released all slaves
[  449.029852][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2222'.
[  449.412610][T12552] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2226'.
[  449.636009][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2228'.
[  449.636036][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2228'.
[  449.864536][T12531] lec:lec_atm_close: lec0: Shut down!
[  449.884604][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2228'.
[  449.884626][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2228'.
[  450.331771][T12579] netlink: 'syz.7.2233': attribute type 1 has an invalid length.
[  450.538890][T12579] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.585020][T12582] 8021q: adding VLAN 0 to HW filter on device batadv1
[  450.594469][T12582] bond1: (slave batadv1): making interface the new active one
[  450.597158][T12582] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  450.817716][T12586] bond1 (unregistering): (slave batadv1): Releasing active interface
[  450.851883][T12586] bond1 (unregistering): Released all slaves
[  452.044711][T12631] tipc: Failed to remove unknown binding: 66,0,0/0:4287491141/4287491143
[  452.044765][T12631] tipc: Failed to remove unknown binding: 66,0,0/0:4287491141/4287491142
[  452.045196][T12631] tipc: Failed to remove unknown binding: 66,0,0/0:4287491141/4287491143
[  452.045229][T12631] tipc: Failed to remove unknown binding: 66,0,0/0:4287491141/4287491142
[  452.137848][  T162] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.165606][  T162] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.406512][T12637] IPVS: stopping backup sync thread 12380 ...
[  453.047317][T12656] __nla_validate_parse: 7 callbacks suppressed
[  453.047338][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2266'.
[  453.421139][  T162] team0 (unregistering): Port device team_slave_1 removed
[  453.488406][  T162] team0 (unregistering): Port device team_slave_0 removed
[  454.535412][T12613] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.927403][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms
[  454.927440][    C0] lec:lec_tx_timeout: lec0
[  454.927689][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  455.110204][T12613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.136706][T12613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.428878][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2269'.
[  455.492715][T12670] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2269'.
[  456.001423][ T3180] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.001754][ T3180] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.001961][ T3180] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.001998][ T3180] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.283780][T12677] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2271'.
[  456.756981][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2280'.
[  456.757168][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2280'.
[  456.760318][T12700] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2280'.
[  458.357810][T12754] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2298'.
[  458.998595][T12775] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0
[  458.999187][T12773] IPVS: stopping backup sync thread 12775 ...
[  459.163108][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2306'.
[  459.163289][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2306'.
[  459.163907][T12784] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2306'.
[  459.217716][T12781] syzkaller0: entered promiscuous mode
[  459.217742][T12781] syzkaller0: entered allmulticast mode
[  459.250610][T12781] tipc: Started in network mode
[  459.250634][T12781] tipc: Node identity 1aadf00aac65, cluster identity 4711
[  459.295079][T12781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.367070][T12779] tipc: Resetting bearer <eth:syzkaller0>
[  459.583675][T12779] tipc: Disabling bearer <eth:syzkaller0>
[  459.745246][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2312'.
[  459.947460][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  459.947495][    C0] lec:lec_tx_timeout: lec0
[  459.947867][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  460.302368][T12819] netlink: 'syz.8.2317': attribute type 1 has an invalid length.
[  460.543438][T12819] 8021q: adding VLAN 0 to HW filter on device bond1
[  460.708217][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2324'.
[  460.944031][T12843] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2328'.
[  461.433283][T12859] netlink: 'syz.8.2335': attribute type 1 has an invalid length.
[  461.476837][T12859] 8021q: adding VLAN 0 to HW filter on device bond2
[  461.721618][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2338'.
[  461.775846][T12870] dummy0: entered promiscuous mode
[  461.776031][T12870] macvtap1: entered promiscuous mode
[  461.776284][T12870] macvtap1: entered allmulticast mode
[  461.776300][T12870] dummy0: entered allmulticast mode
[  461.860293][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'.
[  462.113289][T12879] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2342'.
[  464.041258][T12941] netlink: 380 bytes leftover after parsing attributes in process `syz.7.2366'.
[  464.286351][T12953] syzkaller0: entered promiscuous mode
[  464.286380][T12953] syzkaller0: entered allmulticast mode
[  464.328310][T12953] tipc: Started in network mode
[  464.328341][T12953] tipc: Node identity 9ad8ce2df68c, cluster identity 4711
[  464.328631][T12953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.333297][T12953] tipc: Resetting bearer <eth:syzkaller0>
[  464.402959][T12951] tipc: Resetting bearer <eth:syzkaller0>
[  464.548346][T12951] tipc: Disabling bearer <eth:syzkaller0>
[  464.900452][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'.
[  464.957256][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  464.957293][    C0] lec:lec_tx_timeout: lec0
[  464.957389][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  465.026857][T12970] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2379'.
[  465.027102][T12970] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2379'.
[  465.419182][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2384'.
[  465.590546][T12993] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2388'.
[  466.264696][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2398'.
[  466.430041][T13020] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2401'.
[  466.471490][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2404'.
[  466.667544][T13031] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.933299][T13042] syzkaller0: entered promiscuous mode
[  466.933325][T13042] syzkaller0: entered allmulticast mode
[  466.984133][T13036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.034962][T13036] tipc: Resetting bearer <eth:syzkaller0>
[  467.087716][T13035] tipc: Resetting bearer <eth:syzkaller0>
[  467.272635][T13035] tipc: Disabling bearer <eth:syzkaller0>
[  467.687059][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2418'.
[  468.658609][T13096] netlink: 'syz.7.2433': attribute type 1 has an invalid length.
[  469.669998][T13126] syzkaller0: entered promiscuous mode
[  469.670025][T13126] syzkaller0: entered allmulticast mode
[  469.967424][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  469.967470][    C0] lec:lec_tx_timeout: lec0
[  469.967561][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  470.238177][T13147] syzkaller0: entered promiscuous mode
[  470.238225][T13147] syzkaller0: entered allmulticast mode
[  470.677732][T13157] __nla_validate_parse: 2 callbacks suppressed
[  470.677754][T13157] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2459'.
[  471.677556][T13163] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  471.857565][T13163] usb 8-1: Using ep0 maxpacket: 8
[  471.863478][T13163] usb 8-1: config 0 interface 0 has no altsetting 0
[  471.866618][T13163] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  471.866649][T13163] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.866671][T13163] usb 8-1: Product: syz
[  471.866686][T13163] usb 8-1: Manufacturer: syz
[  471.866706][T13163] usb 8-1: SerialNumber: syz
[  472.122154][T13163] usb 8-1: config 0 descriptor??
[  472.534751][T13163] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found
[  472.586990][T13163] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected
[  472.670991][T13163] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  472.897375][T13163] usb 8-1: USB disconnect, device number 2
[  473.266826][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2472'.
[  473.728156][T13220] syzkaller0: entered promiscuous mode
[  473.728182][T13220] syzkaller0: entered allmulticast mode
[  473.955089][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2478'.
[  474.384867][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'.
[  474.384910][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'.
[  475.285589][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms
[  475.285625][    C0] lec:lec_tx_timeout: lec0
[  475.285889][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  476.078003][T13276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.163294][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2494'.
[  476.166403][T13281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2496'.
[  476.166444][T13281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2496'.
[  476.259992][T13275] tipc: Disabling bearer <eth:syzkaller0>
[  476.897390][ T5977] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  477.057393][ T5977] usb 8-1: Using ep0 maxpacket: 8
[  477.059282][ T5977] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.061605][ T5977] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  477.061631][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.061657][ T5977] usb 8-1: Product: syz
[  477.061667][ T5977] usb 8-1: Manufacturer: syz
[  477.061678][ T5977] usb 8-1: SerialNumber: syz
[  477.075171][ T5977] usb 8-1: config 0 descriptor??
[  477.133694][ T5977] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found
[  477.292421][ T5977] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected
[  477.319933][ T5977] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  477.558045][T13163] usb 8-1: USB disconnect, device number 3
[  477.768496][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2512'.
[  477.950666][T13337] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2515'.
[  478.263520][ T5977] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  478.391428][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2519'.
[  478.391472][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2519'.
[  478.418159][ T5977] usb 5-1: Using ep0 maxpacket: 32
[  478.425074][ T5977] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  478.425103][ T5977] usb 5-1: config 0 has no interface number 0
[  478.439421][ T5977] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  478.439504][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.439570][ T5977] usb 5-1: Product: syz
[  478.439617][ T5977] usb 5-1: Manufacturer: syz
[  478.439675][ T5977] usb 5-1: SerialNumber: syz
[  478.514369][ T5977] usb 5-1: config 0 descriptor??
[  478.674168][T13358] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2522'.
[  478.968128][ T5977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  478.968160][ T5977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  479.559267][ T5977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  479.559594][ T5977] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  479.642265][ T5977] usb 5-1: USB disconnect, device number 2
[  479.741752][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2534'.
[  480.338246][T13416] syzkaller0: entered promiscuous mode
[  480.338274][T13416] syzkaller0: entered allmulticast mode
[  480.500410][T13423] netlink: 'syz.8.2545': attribute type 1 has an invalid length.
[  480.526111][T13425] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2544'.
[  481.017623][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  481.017660][    C0] lec:lec_tx_timeout: lec0
[  481.018056][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  481.680089][T13457] MINIX-fs: unable to read superblock
[  482.297340][   T36] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  482.458853][   T36] usb 8-1: Using ep0 maxpacket: 8
[  482.461851][   T36] usb 8-1: config 0 interface 0 has no altsetting 0
[  482.489059][   T36] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  482.489090][   T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.489111][   T36] usb 8-1: Product: syz
[  482.489126][   T36] usb 8-1: Manufacturer: syz
[  482.489141][   T36] usb 8-1: SerialNumber: syz
[  482.493903][T13463] netlink: 'syz.6.2556': attribute type 1 has an invalid length.
[  482.555241][   T36] usb 8-1: config 0 descriptor??
[  482.562245][   T36] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found
[  482.813830][   T36] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected
[  482.816806][   T36] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  482.850370][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'.
[  483.011255][T13475] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2560'.
[  483.013837][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2560'.
[  483.049186][   T31] usb 8-1: USB disconnect, device number 4
[  483.698087][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2564'.
[  483.827168][T13495] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2568'.
[  483.974739][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2569'.
[  484.133035][T13503] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2572'.
[  484.134710][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2572'.
[  486.037285][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  486.037323][    C0] lec:lec_tx_timeout: lec0
[  486.040605][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  488.159712][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2575'.
[  488.664288][T13521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2579'.
[  488.801789][T13531] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2581'.
[  488.881620][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2583'.
[  488.881642][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2583'.
[  488.933611][T13536] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2583'.
[  488.951628][   T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.951889][   T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.951942][   T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.951982][   T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  489.449267][T13557] netlink: 'syz.4.2589': attribute type 1 has an invalid length.
[  489.601798][T13561] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2591'.
[  490.787356][   T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  490.897736][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2595'.
[  490.967438][   T31] usb 9-1: Using ep0 maxpacket: 8
[  490.970494][   T31] usb 9-1: config 0 interface 0 has no altsetting 0
[  490.972817][   T31] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  490.972847][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.972860][   T31] usb 9-1: Product: syz
[  490.972869][   T31] usb 9-1: Manufacturer: syz
[  490.972879][   T31] usb 9-1: SerialNumber: syz
[  491.047400][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  491.047446][    C0] lec:lec_tx_timeout: lec0
[  491.047547][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  491.063443][   T31] usb 9-1: config 0 descriptor??
[  491.103518][   T31] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  491.196446][T13572] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2596'.
[  491.302550][   T31] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  491.305496][   T31] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  491.521885][   T36] usb 9-1: USB disconnect, device number 2
[  492.356763][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2602'.
[  492.404019][T13587] syzkaller0: entered promiscuous mode
[  492.404037][T13587] syzkaller0: entered allmulticast mode
[  496.057311][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  496.057348][    C0] lec:lec_tx_timeout: lec0
[  496.059384][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  497.277486][T13163] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  497.329275][T13628] __nla_validate_parse: 2 callbacks suppressed
[  497.329297][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'.
[  497.457423][T13163] usb 9-1: Using ep0 maxpacket: 8
[  497.459394][T13163] usb 9-1: config 0 interface 0 has no altsetting 0
[  497.484552][T13163] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  497.484592][T13163] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.484611][T13163] usb 9-1: Product: syz
[  497.484624][T13163] usb 9-1: Manufacturer: syz
[  497.484637][T13163] usb 9-1: SerialNumber: syz
[  497.553668][T13631] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2617'.
[  497.592346][T13163] usb 9-1: config 0 descriptor??
[  497.627484][T13163] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  497.720240][T13635] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2616'.
[  497.803316][T13163] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  497.806278][T13163] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  498.053866][T13163] usb 9-1: USB disconnect, device number 3
[  499.058427][T13662] netlink: 276 bytes leftover after parsing attributes in process `syz.9.2628'.
[  499.207595][T13163] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  499.228334][T13664] netlink: 252 bytes leftover after parsing attributes in process `syz.9.2629'.
[  499.369427][T13163] usb 9-1: Using ep0 maxpacket: 16
[  499.382829][T13163] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  499.382857][T13163] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.382876][T13163] usb 9-1: Product: syz
[  499.382890][T13163] usb 9-1: Manufacturer: syz
[  499.382903][T13163] usb 9-1: SerialNumber: syz
[  499.461878][T13163] usb 9-1: config 0 descriptor??
[  499.484688][T13163] ums-onetouch 9-1:0.0: USB Mass Storage device detected
[  499.579001][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2632'.
[  499.893204][ T5904] usb 9-1: USB disconnect, device number 4
[  500.645703][T13697] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2639'.
[  500.645734][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'.
[  500.646400][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2639'.
[  500.646438][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2639'.
[  501.067264][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  501.067301][    C0] lec:lec_tx_timeout: lec0
[  501.067388][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  501.623530][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  501.745305][T13692] lec:lec_atm_close: lec0: Shut down!
[  501.897504][   T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  502.063409][   T31] usb 9-1: Using ep0 maxpacket: 8
[  502.065292][   T31] usb 9-1: config 0 interface 0 has no altsetting 0
[  502.070629][   T31] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  502.070656][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.070674][   T31] usb 9-1: Product: syz
[  502.070689][   T31] usb 9-1: Manufacturer: syz
[  502.070702][   T31] usb 9-1: SerialNumber: syz
[  502.152097][   T31] usb 9-1: config 0 descriptor??
[  502.179999][   T31] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  502.375167][   T31] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  502.389191][   T31] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  502.497955][T13738] __nla_validate_parse: 4 callbacks suppressed
[  502.497975][T13738] netlink: 120 bytes leftover after parsing attributes in process `syz.9.2655'.
[  502.497992][T13738] netlink: 'syz.9.2655': attribute type 1 has an invalid length.
[  502.527852][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2653'.
[  502.608636][T13163] usb 9-1: USB disconnect, device number 5
[  502.712314][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2657'.
[  502.712338][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2657'.
[  502.714734][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2657'.
[  502.714754][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2657'.
[  502.755249][T13745] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2657'.
[  503.394101][T13757] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2662'.
[  503.959361][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2663'.
[  503.973284][T13770] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2666'.
[  504.787514][ T5904] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  504.937311][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  504.939685][ T5904] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  504.939712][ T5904] usb 5-1: config 0 has no interface number 0
[  504.942614][ T5904] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  504.942641][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.942660][ T5904] usb 5-1: Product: syz
[  504.942674][ T5904] usb 5-1: Manufacturer: syz
[  504.942688][ T5904] usb 5-1: SerialNumber: syz
[  505.001337][ T5904] usb 5-1: config 0 descriptor??
[  505.006794][ T5904] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  505.006881][ T5904] usb 5-1: selecting invalid altsetting 1
[  505.006899][ T5904] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  505.079908][ T5904] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  505.080667][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  505.080809][ T5904] usb 5-1: media controller created
[  505.126402][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  505.347408][T13784] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  506.878620][ T5904] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  506.880599][ T5904] zl10353_read_register: readreg error (reg=127, ret==-110)
[  506.904415][T13768] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  506.937416][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms
[  506.937463][    C0] lec:lec_tx_timeout: lec0
[  506.937611][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  507.414793][T13817] netlink: 'syz.8.2679': attribute type 1 has an invalid length.
[  508.711424][T13837] __nla_validate_parse: 8 callbacks suppressed
[  508.711442][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'.
[  508.711458][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'.
[  508.712247][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'.
[  508.712264][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'.
[  508.713390][T13837] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2686'.
[  509.177396][ T5889] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  509.337525][ T5889] usb 10-1: Using ep0 maxpacket: 8
[  509.340131][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0
[  509.348572][ T5889] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  509.348602][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.348624][ T5889] usb 10-1: Product: syz
[  509.348640][ T5889] usb 10-1: Manufacturer: syz
[  509.348655][ T5889] usb 10-1: SerialNumber: syz
[  509.425089][ T5889] usb 10-1: config 0 descriptor??
[  509.470293][ T5889] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found
[  509.632055][ T5889] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected
[  509.633911][ T5889] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  509.878421][ T5956] usb 10-1: USB disconnect, device number 2
[  510.311931][T13840] lec:lec_atm_close: lec0: Shut down!
[  512.002983][T13868] netlink: 'syz.6.2696': attribute type 1 has an invalid length.
[  512.192756][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2698'.
[  512.216086][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2698'.
[  512.857365][   T36] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  513.007613][   T36] usb 7-1: Using ep0 maxpacket: 16
[  513.022902][   T36] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  513.022987][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.023042][   T36] usb 7-1: Product: syz
[  513.023082][   T36] usb 7-1: Manufacturer: syz
[  513.023117][   T36] usb 7-1: SerialNumber: syz
[  513.104472][   T36] usb 7-1: config 0 descriptor??
[  513.139917][   T36] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  513.172019][T13888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.552408][ T5956] usb 7-1: USB disconnect, device number 2
[  513.879192][T13887] tipc: Disabling bearer <eth:syzkaller0>
[  514.179768][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2706'.
[  514.755073][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2710'.
[  514.755100][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2710'.
[  514.755914][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2710'.
[  514.755933][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2710'.
[  514.757848][T13913] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2710'.
[  514.821340][T13914] netlink: 'syz.9.2709': attribute type 1 has an invalid length.
[  515.628500][T13921] syzkaller0: entered promiscuous mode
[  515.628528][T13921] syzkaller0: entered allmulticast mode
[  515.887454][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms
[  515.887491][    C0] lec:lec_tx_timeout: lec0
[  516.015996][T13929] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2717'.
[  516.016019][T13929] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2717'.
[  516.453541][   T36] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  516.592435][T13942] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  516.617579][   T36] usb 8-1: Using ep0 maxpacket: 16
[  516.623323][T13942] bond0: (slave lo): Enslaving as an active interface with an up link
[  516.626942][   T36] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  516.626973][   T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.626995][   T36] usb 8-1: Product: syz
[  516.627011][   T36] usb 8-1: Manufacturer: syz
[  516.627026][   T36] usb 8-1: SerialNumber: syz
[  516.665286][T13942] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  516.702420][   T36] usb 8-1: config 0 descriptor??
[  516.715489][   T36] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  517.051424][T13163] usb 8-1: USB disconnect, device number 5
[  517.355180][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2725'.
[  517.573816][T13959] netlink: 120 bytes leftover after parsing attributes in process `syz.9.2728'.
[  518.225720][T13982] netlink: 'syz.6.2736': attribute type 1 has an invalid length.
[  518.345174][T13953] lec:lec_atm_close: lec0: Shut down!
[  519.270712][T14002] __nla_validate_parse: 7 callbacks suppressed
[  519.270736][T14002] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2745'.
[  519.368407][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.390012][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.408968][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.424909][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.428329][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  519.447622][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2746'.
[  519.447651][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2746'.
[  519.448428][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2746'.
[  519.448447][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2746'.
[  519.449973][T14005] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2746'.
[  519.516296][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.526216][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.526678][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.541393][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.544137][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  519.781951][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2747'.
[  519.848247][T14005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.992180][T14005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.044219][T14005] bond0 (unregistering): Released all slaves
[  521.017383][   T36] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  521.137037][T14029] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2753'.
[  521.137063][T14029] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2753'.
[  521.177524][   T36] usb 9-1: Using ep0 maxpacket: 16
[  521.185340][   T36] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  521.185368][   T36] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  521.185394][   T36] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024
[  521.185432][   T36] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  521.250002][   T36] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  521.250035][   T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.250056][   T36] usb 9-1: Product: syz
[  521.250070][   T36] usb 9-1: Manufacturer: syz
[  521.250085][   T36] usb 9-1: SerialNumber: syz
[  521.297041][   T36] usb 9-1: config 0 descriptor??
[  521.307612][T14025] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  521.358016][   T36] mcba_usb 9-1:0.0 can0: failed tx_urb -90
[  521.358068][   T36] mcba_usb 9-1:0.0 can0: Failed to send cmd (169)
[  521.358178][   T36] mcba_usb 9-1:0.0 can0: failed tx_urb -90
[  521.358222][   T36] mcba_usb 9-1:0.0 can0: Failed to send cmd (169)
[  521.358242][   T36] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected
[  521.425627][T14003] chnl_net:caif_netlink_parms(): no params data found
[  521.567413][ T5810] Bluetooth: hci0: command tx timeout
[  521.709179][T14018] lec:lec_atm_close: lec0: Shut down!
[  521.791332][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.791699][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.941483][ T5956] usb 9-1: USB disconnect, device number 6
[  521.944003][ T5956] mcba_usb 9-1:0.0 can0: device disconnected
[  522.205048][T14003] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.205173][T14003] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.205382][T14003] bridge_slave_0: entered allmulticast mode
[  522.216002][T14003] bridge_slave_0: entered promiscuous mode
[  522.246913][T14003] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.248546][T14003] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.249158][T14003] bridge_slave_1: entered allmulticast mode
[  522.313734][T14003] bridge_slave_1: entered promiscuous mode
[  522.411960][T14048] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2757'.
[  522.562105][T14003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.614777][T14003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.670162][T14055] netlink: 'syz.7.2759': attribute type 1 has an invalid length.
[  522.892970][T14003] team0: Port device team_slave_0 added
[  522.931390][T14003] team0: Port device team_slave_1 added
[  523.203961][T14003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.203977][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.204002][T14003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.206294][T14003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.206310][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.206341][T14003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.647518][ T5810] Bluetooth: hci0: command tx timeout
[  523.901589][T14003] hsr_slave_0: entered promiscuous mode
[  523.903012][T14003] hsr_slave_1: entered promiscuous mode
[  523.915276][T14003] debugfs: 'hsr0' already exists in 'hsr'
[  523.915348][T14003] Cannot create hsr debugfs directory
[  523.976383][T14098] netlink: 'syz.8.2772': attribute type 1 has an invalid length.
[  524.417392][T14111] __nla_validate_parse: 4 callbacks suppressed
[  524.417413][T14111] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2776'.
[  524.560717][T14115] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2778'.
[  524.577327][ T5982] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  524.727418][ T5982] usb 9-1: Using ep0 maxpacket: 16
[  524.729791][ T5982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  524.729816][ T5982] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  524.729840][ T5982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024
[  524.729866][ T5982] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  524.732667][ T5982] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  524.732696][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.732717][ T5982] usb 9-1: Product: syz
[  524.732731][ T5982] usb 9-1: Manufacturer: syz
[  524.732746][ T5982] usb 9-1: SerialNumber: syz
[  524.843014][ T5982] usb 9-1: config 0 descriptor??
[  524.844157][T14109] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  525.001783][ T5982] mcba_usb 9-1:0.0 can0: failed tx_urb -90
[  525.001831][ T5982] mcba_usb 9-1:0.0 can0: Failed to send cmd (169)
[  525.001949][ T5982] mcba_usb 9-1:0.0 can0: failed tx_urb -90
[  525.001988][ T5982] mcba_usb 9-1:0.0 can0: Failed to send cmd (169)
[  525.002005][ T5982] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected
[  525.343079][T14136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.343648][T14136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.390628][ T5812] usb 9-1: USB disconnect, device number 7
[  525.416602][ T5812] mcba_usb 9-1:0.0 can0: device disconnected
[  525.727399][ T5810] Bluetooth: hci0: command tx timeout
[  526.336793][T14162] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2787'.
[  526.837982][T14166] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2788'.
[  526.927546][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms
[  526.927579][    C0] lec:lec_tx_timeout: lec0
[  527.257373][ T5812] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  527.427494][ T5812] usb 9-1: Using ep0 maxpacket: 32
[  527.429904][ T5812] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[  527.429930][ T5812] usb 9-1: config 0 has no interface number 0
[  527.429976][ T5812] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  527.430005][ T5812] usb 9-1: config 0 interface 85 has no altsetting 0
[  527.442988][ T5812] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  527.443064][ T5812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.443096][ T5812] usb 9-1: Product: syz
[  527.443166][ T5812] usb 9-1: Manufacturer: syz
[  527.443490][ T5812] usb 9-1: SerialNumber: syz
[  527.506147][ T5812] usb 9-1: config 0 descriptor??
[  527.807470][ T5810] Bluetooth: hci0: command tx timeout
[  527.926630][ T5812] appletouch 9-1:0.85: Geyser mode initialized.
[  527.946856][ T5812] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input8
[  528.256949][   T36] usb 9-1: USB disconnect, device number 8
[  528.257047][    C1] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  528.264119][T14141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  528.283862][T14168] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2789'.
[  528.410037][   T36] appletouch 9-1:0.85: input: appletouch disconnected
[  528.558244][T14215] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2797'.
[  529.020327][T14223] tipc: Started in network mode
[  529.020360][T14223] tipc: Node identity 8ec4bed9c267, cluster identity 4711
[  529.020553][T14223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  529.021607][T14223] syzkaller0: entered promiscuous mode
[  529.021632][T14223] syzkaller0: entered allmulticast mode
[  529.250685][T14222] tipc: Resetting bearer <eth:syzkaller0>
[  529.542988][T14222] tipc: Disabling bearer <eth:syzkaller0>
[  529.742227][T14003] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  529.775598][ T8686] lec:lec_start_xmit: lec0:No lecd attached
[  529.862444][T14003] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  529.930285][T14248] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2806'.
[  529.981767][T14003] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  530.085759][T14003] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  530.178020][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2808'.
[  530.269247][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'.
[  530.269270][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2809'.
[  530.337830][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2808'.
[  530.400476][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'.
[  530.402076][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2809'.
[  530.836150][T14003] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.896324][T14003] 8021q: adding VLAN 0 to HW filter on device team0
[  530.925277][  T103] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.944573][  T103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.984877][ T2250] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.984967][ T2250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.138759][ T5982] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  531.287510][ T5982] usb 7-1: Using ep0 maxpacket: 32
[  531.289902][ T5982] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  531.289926][ T5982] usb 7-1: config 0 has no interface number 0
[  531.289968][ T5982] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  531.289994][ T5982] usb 7-1: config 0 interface 85 has no altsetting 0
[  531.292871][ T5982] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  531.292897][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.292917][ T5982] usb 7-1: Product: syz
[  531.292930][ T5982] usb 7-1: Manufacturer: syz
[  531.292945][ T5982] usb 7-1: SerialNumber: syz
[  531.527575][ T5982] usb 7-1: config 0 descriptor??
[  531.994411][ T5982] appletouch 7-1:0.85: Geyser mode initialized.
[  532.010600][ T5982] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input9
[  532.340042][ T5889] usb 7-1: USB disconnect, device number 3
[  532.440521][ T5889] appletouch 7-1:0.85: input: appletouch disconnected
[  532.552380][T14003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.693848][T14003] veth0_vlan: entered promiscuous mode
[  532.741903][T14003] veth1_vlan: entered promiscuous mode
[  532.809849][T14003] veth0_macvtap: entered promiscuous mode
[  532.832257][T14003] veth1_macvtap: entered promiscuous mode
[  532.901378][T14003] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.934779][T14003] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.971924][ T2250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.996320][ T2250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.038811][ T2250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.062550][ T2250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.088559][T14252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  533.208572][T14306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.208980][T14307] syzkaller0: entered promiscuous mode
[  533.209004][T14307] syzkaller0: entered allmulticast mode
[  533.509280][T14305] tipc: Resetting bearer <eth:syzkaller0>
[  533.566108][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'.
[  533.566125][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2819'.
[  533.711603][T14305] tipc: Disabling bearer <eth:syzkaller0>
[  533.926448][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'.
[  534.122860][T13252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.122883][T13252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.400262][T13253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.400284][T13253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.758285][T14349] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  534.927372][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms
[  534.927410][    C0] lec:lec_tx_timeout: lec0
[  535.387355][   T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  535.547374][   T31] usb 1-1: Using ep0 maxpacket: 16
[  535.568040][   T31] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  535.568072][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.568093][   T31] usb 1-1: Product: syz
[  535.568107][   T31] usb 1-1: Manufacturer: syz
[  535.568122][   T31] usb 1-1: SerialNumber: syz
[  535.638457][   T31] usb 1-1: config 0 descriptor??
[  535.696240][   T31] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  535.729648][T14375] netlink: 'syz.6.2828': attribute type 29 has an invalid length.
[  535.746807][T14375] netlink: 'syz.6.2828': attribute type 29 has an invalid length.
[  535.794548][T14377] __nla_validate_parse: 3 callbacks suppressed
[  535.794568][T14377] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2829'.
[  535.794597][T14377] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2829'.
[  535.872305][T14377] batadv0: entered promiscuous mode
[  535.896008][T14377] dummy0: entered promiscuous mode
[  535.907770][T14377] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  535.907789][T14377] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network
[  536.014129][ T5956] usb 1-1: USB disconnect, device number 8
[  536.193805][T14382] syzkaller0: entered promiscuous mode
[  536.193833][T14382] syzkaller0: entered allmulticast mode
[  536.875732][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[  537.176397][ T1384] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  537.176664][ T1384] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  537.176710][ T1384] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  537.176749][ T1384] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  537.176976][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[  537.416446][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'.
[  537.931920][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'.
[  538.289838][T14364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  538.307504][T13163] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  538.509540][T13163] usb 1-1: Using ep0 maxpacket: 16
[  538.525481][T13163] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  538.525512][T13163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.525531][T13163] usb 1-1: Product: syz
[  538.525545][T13163] usb 1-1: Manufacturer: syz
[  538.525558][T13163] usb 1-1: SerialNumber: syz
[  538.571052][T13163] usb 1-1: config 0 descriptor??
[  538.617858][T13163] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  538.841565][T14462] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2846'.
[  538.860315][   T31] usb 1-1: USB disconnect, device number 9
[  538.886550][T14465] netlink: 'syz.6.2847': attribute type 1 has an invalid length.
[  539.185773][T14470] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.208117][T14474] 8021q: adding VLAN 0 to HW filter on device batadv3
[  539.210516][T14474] bond0: (slave batadv3): Enslaving as an active interface with an up link
[  539.269005][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2849'.
[  539.469917][T14470] bond0 (unregistering): (slave batadv3): Releasing backup interface
[  539.514649][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2852'.
[  539.552089][T14470] bond0 (unregistering): Released all slaves
[  539.853040][T14487] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2854'.
[  539.868831][T14492] tipc: Started in network mode
[  539.868861][T14492] tipc: Node identity c6fe8c189f39, cluster identity 4711
[  539.869031][T14492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  540.173543][T14492] syzkaller0: entered promiscuous mode
[  540.173568][T14492] syzkaller0: entered allmulticast mode
[  540.211412][T14492] tipc: Resetting bearer <eth:syzkaller0>
[  540.825161][T14519] netlink: 'syz.9.2860': attribute type 1 has an invalid length.
[  541.084050][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  541.269929][T14490] tipc: Disabling bearer <eth:syzkaller0>
[  541.387898][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2867'.
[  541.453606][ T1573] tipc: Node number set to 1506249752
[  541.520531][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2867'.
[  541.578910][T14525] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  541.607020][T14525] bond0: (slave lo): Enslaving as an active interface with an up link
[  541.620676][T14525] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  541.867417][   T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  541.989750][T14555] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  542.029041][   T31] usb 10-1: Using ep0 maxpacket: 32
[  542.032011][   T31] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  542.032037][   T31] usb 10-1: config 0 has no interface number 0
[  542.055712][   T31] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  542.055793][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.055846][   T31] usb 10-1: Product: syz
[  542.055894][   T31] usb 10-1: Manufacturer: syz
[  542.055935][   T31] usb 10-1: SerialNumber: syz
[  542.114710][   T31] usb 10-1: config 0 descriptor??
[  543.665057][   T31] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  543.665091][   T31] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  543.866685][   T31] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  543.867087][   T31] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[  543.935029][   T31] usb 10-1: USB disconnect, device number 3
[  544.107883][T14576] netlink: 'syz.0.2879': attribute type 1 has an invalid length.
[  544.312646][T14580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.314671][T14580] syzkaller0: entered promiscuous mode
[  544.314696][T14580] syzkaller0: entered allmulticast mode
[  544.344736][T14580] tipc: Resetting bearer <eth:syzkaller0>
[  544.377447][T14577] tipc: Resetting bearer <eth:syzkaller0>
[  544.603883][T14577] tipc: Disabling bearer <eth:syzkaller0>
[  546.254205][T14618] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2890'.
[  546.486542][T14624] netlink: 'syz.8.2892': attribute type 1 has an invalid length.
[  547.287723][ T1573] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  547.447310][ T1573] usb 10-1: Using ep0 maxpacket: 16
[  547.452926][ T1573] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  547.452958][ T1573] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.452980][ T1573] usb 10-1: Product: syz
[  547.452995][ T1573] usb 10-1: Manufacturer: syz
[  547.453010][ T1573] usb 10-1: SerialNumber: syz
[  547.499731][ T1573] usb 10-1: config 0 descriptor??
[  547.513684][ T1573] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  547.787327][ T1573] usb 10-1: USB disconnect, device number 4
[  547.971686][T14670] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2905'.
[  549.319792][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2923'.
[  549.324841][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2923'.
[  549.558868][T14714] siw: device registration error -23
[  549.969088][T14725] netlink: 'syz.8.2929': attribute type 1 has an invalid length.
[  553.061073][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2943'.
[  554.267297][   T36] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  554.427306][   T36] usb 10-1: Using ep0 maxpacket: 16
[  554.457065][   T36] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  554.458203][   T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.458228][   T36] usb 10-1: Product: syz
[  554.458243][   T36] usb 10-1: Manufacturer: syz
[  554.458257][   T36] usb 10-1: SerialNumber: syz
[  554.507509][   T36] usb 10-1: config 0 descriptor??
[  554.526616][   T36] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  554.627466][ T1573] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  554.797279][ T1573] usb 9-1: Using ep0 maxpacket: 32
[  554.824127][ T1573] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  554.824154][ T1573] usb 9-1: config 0 has no interface number 0
[  554.863034][ T1573] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  554.863065][ T1573] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.863085][ T1573] usb 9-1: Product: syz
[  554.863099][ T1573] usb 9-1: Manufacturer: syz
[  554.863113][ T1573] usb 9-1: SerialNumber: syz
[  554.900238][ T1573] usb 9-1: config 0 descriptor??
[  555.160265][ T5982] usb 10-1: USB disconnect, device number 5
[  556.111611][ T1573] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  556.111643][ T1573] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  556.112130][ T1573] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  556.112421][ T1573] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  556.169309][ T1573] usb 9-1: USB disconnect, device number 9
[  556.794236][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2970'.
[  556.794262][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2970'.
[  556.804803][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2970'.
[  556.804827][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2970'.
[  556.808308][T14820] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2970'.
[  557.044982][T14823] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.2971'.
[  557.282536][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2974'.
[  558.946314][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  558.962184][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  558.963394][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  558.965346][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  558.994488][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  559.074749][T14562] Set syz1 is full, maxelem 65536 reached
[  559.114485][T14854] netlink: 'syz.8.2980': attribute type 1 has an invalid length.
[  559.692124][T14862] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.2985'.
[  560.018240][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2987'.
[  560.861915][T14850] chnl_net:caif_netlink_parms(): no params data found
[  560.956742][T14890] netlink: 'syz.6.2995': attribute type 1 has an invalid length.
[  561.097361][ T5810] Bluetooth: hci1: command tx timeout
[  561.154049][T14850] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.154210][T14850] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.154400][T14850] bridge_slave_0: entered allmulticast mode
[  561.164472][T14850] bridge_slave_0: entered promiscuous mode
[  561.188250][T14850] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.188445][T14850] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.188648][T14850] bridge_slave_1: entered allmulticast mode
[  561.208801][T14850] bridge_slave_1: entered promiscuous mode
[  561.378828][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.403827][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  561.863693][T14850] team0: Port device team_slave_0 added
[  561.897403][T14850] team0: Port device team_slave_1 added
[  562.041191][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.041211][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.041240][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.047569][ T5977] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  562.102177][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.102190][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.102211][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.177361][ T5977] usb 9-1: device descriptor read/64, error -71
[  562.447478][ T5977] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  562.451695][T14850] hsr_slave_0: entered promiscuous mode
[  562.470967][T14850] hsr_slave_1: entered promiscuous mode
[  562.487006][T14850] debugfs: 'hsr0' already exists in 'hsr'
[  562.492733][T14850] Cannot create hsr debugfs directory
[  562.577444][ T5977] usb 9-1: device descriptor read/64, error -71
[  562.688180][ T5977] usb usb9-port1: attempt power cycle
[  562.870904][T14938] netlink: 'syz.6.3016': attribute type 1 has an invalid length.
[  563.885157][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  563.903738][ T1320] lec:lec_start_xmit: lec0:No lecd attached
[  563.933404][ T5810] Bluetooth: hci1: command tx timeout
[  564.167459][ T5977] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  564.188073][ T5977] usb 9-1: device descriptor read/8, error -71
[  564.427413][ T5977] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  564.458004][ T5977] usb 9-1: device descriptor read/8, error -71
[  564.623945][ T5977] usb usb9-port1: unable to enumerate USB device
[  565.014876][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3026'.
[  565.967599][ T5810] Bluetooth: hci1: command tx timeout
[  565.998807][T14982] netlink: 'syz.6.3034': attribute type 1 has an invalid length.
[  566.111806][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3034'.
[  566.128481][ T1573] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  566.255165][T14982] 8021q: adding VLAN 0 to HW filter on device bond1
[  566.289981][ T1573] usb 9-1: Using ep0 maxpacket: 16
[  566.293328][ T1573] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  566.293349][ T1573] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  566.293366][ T1573] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024
[  566.293385][ T1573] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  566.309783][ T1573] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  566.309844][ T1573] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.309867][ T1573] usb 9-1: Product: syz
[  566.309882][ T1573] usb 9-1: Manufacturer: syz
[  566.309897][ T1573] usb 9-1: SerialNumber: syz
[  566.386401][ T1573] usb 9-1: config 0 descriptor??
[  566.401321][T14977] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  566.420710][T14985] 8021q: adding VLAN 0 to HW filter on device batadv3
[  566.443398][T14985] bond1: (slave batadv3): Enslaving as an active interface with an up link
[  566.649008][T14987] bond1 (unregistering): (slave batadv3): Releasing backup interface
[  566.708979][T14987] bond1 (unregistering): Released all slaves
[  566.914468][ T1573] mcba_usb 9-1:0.0 can0: failed tx_urb -90
[  566.914523][ T1573] mcba_usb 9-1:0.0 can0: Failed to send cmd (169)
[  566.914634][ T1573] mcba_usb 9-1:0.0 can0: failed tx_urb -90
[  566.914685][ T1573] mcba_usb 9-1:0.0 can0: Failed to send cmd (169)
[  566.914703][ T1573] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected
[  566.957611][ T1573] usb 9-1: USB disconnect, device number 14
[  566.961249][ T1573] mcba_usb 9-1:0.0 can0: device disconnected
[  567.147099][T15009] netlink: 'syz.6.3043': attribute type 1 has an invalid length.
[  567.577421][   T31] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  567.657070][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3048'.
[  567.758760][   T31] usb 10-1: Using ep0 maxpacket: 32
[  567.765985][   T31] usb 10-1: config 0 has an invalid interface number: 85 but max is 0
[  567.766014][   T31] usb 10-1: config 0 has no interface number 0
[  567.766061][   T31] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  567.766089][   T31] usb 10-1: config 0 interface 85 has no altsetting 0
[  567.813036][   T31] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  567.813066][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.813086][   T31] usb 10-1: Product: syz
[  567.813109][   T31] usb 10-1: Manufacturer: syz
[  567.813124][   T31] usb 10-1: SerialNumber: syz
[  567.875595][   T31] usb 10-1: config 0 descriptor??
[  568.062100][ T5810] Bluetooth: hci1: command tx timeout
[  568.285007][   T31] appletouch 10-1:0.85: Geyser mode initialized.
[  568.317325][   T31] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input10
[  568.927266][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  568.927302][    C0] lec:lec_tx_timeout: lec0
[  569.943972][ T5977] usb 10-1: USB disconnect, device number 6
[  570.465529][ T5977] appletouch 10-1:0.85: input: appletouch disconnected
[  571.569530][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3075'.
[  571.589784][T14850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  571.695472][T14850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  571.829175][T14850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  571.937389][T14850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  571.960183][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3078'.
[  572.429776][T15133] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3083'.
[  572.432617][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3083'.
[  572.509447][T14850] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.554201][T14850] 8021q: adding VLAN 0 to HW filter on device team0
[  572.583079][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.583330][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.673122][T13252] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.673314][T13252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.975294][T15143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.043361][T15143] tipc: Resetting bearer <eth:syzkaller0>
[  573.356113][T15142] tipc: Disabling bearer <eth:syzkaller0>
[  574.061814][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  574.267770][T14850] veth0_vlan: entered promiscuous mode
[  574.328542][T14850] veth1_vlan: entered promiscuous mode
[  574.401761][T14850] veth0_macvtap: entered promiscuous mode
[  574.424695][T14850] veth1_macvtap: entered promiscuous mode
[  574.471663][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  574.520541][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.757483][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.767593][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.768032][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.773416][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.158900][ T5982] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  575.307468][ T5982] usb 7-1: Using ep0 maxpacket: 8
[  575.310923][ T5982] usb 7-1: config 0 interface 0 has no altsetting 0
[  575.316071][ T5982] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  575.316100][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.316120][ T5982] usb 7-1: Product: syz
[  575.316135][ T5982] usb 7-1: Manufacturer: syz
[  575.316149][ T5982] usb 7-1: SerialNumber: syz
[  575.366396][ T5982] usb 7-1: config 0 descriptor??
[  575.448653][ T5982] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found
[  575.576009][ T5982] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected
[  575.661988][ T5982] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  575.693634][ T2250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.693655][ T2250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.852488][ T5956] usb 7-1: USB disconnect, device number 4
[  575.998091][T15214] syzkaller0: entered promiscuous mode
[  575.998118][T15214] syzkaller0: entered allmulticast mode
[  576.132175][T13252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.132197][T13252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.926027][T15254] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3118'.
[  576.949272][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'.
[  576.975255][  T774] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  576.975419][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'.
[  576.975840][  T774] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  576.975991][  T774] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  576.976033][  T774] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  577.377431][ T5956] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  578.072834][T15264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.376317][ T5956] usb 10-1: unable to get BOS descriptor or descriptor too short
[  578.377410][ T5956] usb 10-1: unable to read config index 0 descriptor/start: -71
[  578.377443][ T5956] usb 10-1: can't read configurations, error -71
[  578.619343][T15295] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3131'.
[  579.110289][T15313] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  579.543114][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3144'.
[  579.543140][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3144'.
[  579.544398][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3144'.
[  579.544417][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3144'.
[  579.596759][T15326] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3144'.
[  579.718734][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'.
[  579.895221][T15338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  579.896809][T15338] syzkaller0: entered promiscuous mode
[  579.896835][T15338] syzkaller0: entered allmulticast mode
[  580.077722][T15337] tipc: Resetting bearer <eth:syzkaller0>
[  580.362981][T15337] tipc: Disabling bearer <eth:syzkaller0>
[  581.266978][T15391] netlink: 'syz.9.3164': attribute type 1 has an invalid length.
[  582.119807][T15394] tipc: Started in network mode
[  582.119937][T15394] tipc: Node identity aafb8a985fb7, cluster identity 4711
[  582.120118][T15394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.121365][T15394] syzkaller0: entered promiscuous mode
[  582.121399][T15394] syzkaller0: entered allmulticast mode
[  582.164674][T15394] tipc: Resetting bearer <eth:syzkaller0>
[  582.229338][T15392] tipc: Resetting bearer <eth:syzkaller0>
[  582.468250][T15392] tipc: Disabling bearer <eth:syzkaller0>
[  583.600214][T15452] __nla_validate_parse: 2 callbacks suppressed
[  583.600233][T15452] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3183'.
[  583.603450][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3183'.
[  584.099666][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3189'.
[  585.494586][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3196'.
[  585.494619][T15483] bond0: option lp_interval: invalid value (0)
[  585.494637][T15483] bond0: option lp_interval: allowed values 1 - 2147483647
[  586.052291][T15505] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3201'.
[  586.054025][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3201'.
[  586.104114][T15504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  586.111070][T15504] syzkaller0: entered promiscuous mode
[  586.111128][T15504] syzkaller0: entered allmulticast mode
[  586.430154][T15515] tipc: Resetting bearer <eth:syzkaller0>
[  586.509506][T15499] tipc: Resetting bearer <eth:syzkaller0>
[  586.737983][T15499] tipc: Disabling bearer <eth:syzkaller0>
[  587.137693][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'.
[  587.137725][T15535] bond0: option lp_interval: invalid value (0)
[  587.137742][T15535] bond0: option lp_interval: allowed values 1 - 2147483647
[  587.397487][T15546] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3214'.
[  587.562082][T15552] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  588.157360][   T31] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  588.307301][   T31] usb 9-1: Using ep0 maxpacket: 8
[  588.309227][   T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.309279][   T31] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  588.309311][   T31] usb 9-1: config 0 interface 0 has no altsetting 0
[  588.311794][   T31] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  588.311909][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.311932][   T31] usb 9-1: Product: syz
[  588.311947][   T31] usb 9-1: Manufacturer: syz
[  588.311962][   T31] usb 9-1: SerialNumber: syz
[  588.399352][   T31] usb 9-1: config 0 descriptor??
[  588.420364][   T31] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  588.605712][   T31] snd_usb_toneport 9-1:0.0: cannot get proper max packet size
[  588.607137][   T31] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  588.628499][   T31] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  588.874168][   T31] usb 9-1: USB disconnect, device number 15
[  591.287359][ T1245] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  591.293134][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3244'.
[  591.458347][ T1245] usb 4-1: Using ep0 maxpacket: 32
[  591.461144][ T1245] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  591.461171][ T1245] usb 4-1: config 0 has no interface number 0
[  591.461217][ T1245] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  591.461244][ T1245] usb 4-1: config 0 interface 85 has no altsetting 0
[  591.512011][ T1245] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  591.512044][ T1245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.512064][ T1245] usb 4-1: Product: syz
[  591.512079][ T1245] usb 4-1: Manufacturer: syz
[  591.512093][ T1245] usb 4-1: SerialNumber: syz
[  591.583997][ T1245] usb 4-1: config 0 descriptor??
[  592.009025][ T1245] appletouch 4-1:0.85: Geyser mode initialized.
[  592.029591][ T1245] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11
[  592.496806][ T5812] usb 4-1: USB disconnect, device number 4
[  592.677039][ T5812] appletouch 4-1:0.85: input: appletouch disconnected
[  592.860691][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3260'.
[  593.266003][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3266'.
[  593.365258][T15701] syzkaller0: entered promiscuous mode
[  593.365284][T15701] syzkaller0: entered allmulticast mode
[  593.415622][T15701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.468077][T15698] tipc: Resetting bearer <eth:syzkaller0>
[  593.663973][T15698] tipc: Disabling bearer <eth:syzkaller0>
[  594.224715][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3275'.
[  594.472988][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'.
[  594.473012][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'.
[  594.473798][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'.
[  594.473815][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'.
[  594.474993][T15749] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3280'.
[  594.919132][T15749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  594.960064][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3282'.
[  595.078777][T15749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.117787][ T1573] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  595.173170][T15749] bond0 (unregistering): Released all slaves
[  595.194162][ T8686] lec:lec_start_xmit: lec0:No lecd attached
[  595.307713][ T1573] usb 10-1: Using ep0 maxpacket: 8
[  595.309985][ T1573] usb 10-1: config 0 interface 0 has no altsetting 0
[  595.313048][ T1573] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  595.313077][ T1573] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.313099][ T1573] usb 10-1: Product: syz
[  595.313115][ T1573] usb 10-1: Manufacturer: syz
[  595.313131][ T1573] usb 10-1: SerialNumber: syz
[  595.367676][ T1573] usb 10-1: config 0 descriptor??
[  595.384002][ T1573] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found
[  595.699750][ T1573] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected
[  595.702417][ T1573] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  595.934259][ T1245] usb 10-1: USB disconnect, device number 9
[  596.235052][T15792] netlink: 'syz.3.3292': attribute type 1 has an invalid length.
[  597.048022][ T1245] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  597.200700][ T1245] usb 4-1: Using ep0 maxpacket: 16
[  597.213607][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  597.213637][ T1245] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  597.213663][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024
[  597.213690][ T1245] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  597.271198][ T1245] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  597.271227][ T1245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.271246][ T1245] usb 4-1: Product: syz
[  597.271259][ T1245] usb 4-1: Manufacturer: syz
[  597.271272][ T1245] usb 4-1: SerialNumber: syz
[  597.344008][ T1245] usb 4-1: config 0 descriptor??
[  597.357247][T15799] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  597.495039][ T1245] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  597.495088][ T1245] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  597.495211][ T1245] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  597.495252][ T1245] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  597.495269][ T1245] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  597.550122][T15811] __nla_validate_parse: 1 callbacks suppressed
[  597.550139][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3301'.
[  598.050140][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3305'.
[  598.062985][ T1245] usb 4-1: USB disconnect, device number 5
[  598.095484][ T1245] mcba_usb 4-1:0.0 can0: device disconnected
[  598.677655][ T5956] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  598.827910][ T5956] usb 7-1: Using ep0 maxpacket: 8
[  598.829830][ T5956] usb 7-1: config 0 interface 0 has no altsetting 0
[  598.836576][ T5956] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  598.836605][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.836627][ T5956] usb 7-1: Product: syz
[  598.836642][ T5956] usb 7-1: Manufacturer: syz
[  598.836666][ T5956] usb 7-1: SerialNumber: syz
[  598.901755][ T5956] usb 7-1: config 0 descriptor??
[  598.932961][ T5956] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found
[  599.115330][ T5956] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected
[  599.143366][ T5956] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  599.196027][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'.
[  599.384415][ T1245] usb 7-1: USB disconnect, device number 5
[  599.933824][T15874] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.441528][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3329'.
[  600.668474][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'.
[  600.927305][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  600.927342][    C0] lec:lec_tx_timeout: lec0
[  602.799339][T15942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3342'.
[  602.890583][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'.
[  603.239393][   T31] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  603.407376][   T31] usb 10-1: Using ep0 maxpacket: 16
[  603.416726][   T31] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  603.416748][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.416763][   T31] usb 10-1: Product: syz
[  603.416774][   T31] usb 10-1: Manufacturer: syz
[  603.416785][   T31] usb 10-1: SerialNumber: syz
[  603.476643][   T31] usb 10-1: config 0 descriptor??
[  603.525033][   T31] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  603.781289][ T5982] usb 10-1: USB disconnect, device number 10
[  604.600807][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3360'.
[  605.288902][ T5982] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  605.497355][ T5982] usb 9-1: Using ep0 maxpacket: 16
[  605.504289][ T5982] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  605.504322][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.504345][ T5982] usb 9-1: Product: syz
[  605.504360][ T5982] usb 9-1: Manufacturer: syz
[  605.504375][ T5982] usb 9-1: SerialNumber: syz
[  605.556566][ T5982] usb 9-1: config 0 descriptor??
[  605.587424][ T5982] ums-onetouch 9-1:0.0: USB Mass Storage device detected
[  605.853689][ T5812] usb 9-1: USB disconnect, device number 16
[  607.984166][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3387'.
[  608.698153][ T1245] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  608.848431][ T1245] usb 7-1: Using ep0 maxpacket: 16
[  608.870584][ T1245] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  608.870617][ T1245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.870648][ T1245] usb 7-1: Product: syz
[  608.870663][ T1245] usb 7-1: Manufacturer: syz
[  608.870678][ T1245] usb 7-1: SerialNumber: syz
[  608.924513][ T1245] usb 7-1: config 0 descriptor??
[  608.960307][ T1245] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  609.294035][ T5977] usb 7-1: USB disconnect, device number 6
[  611.501894][T16140] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3420'.
[  611.564336][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'.
[  611.717927][ T5982] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  611.867401][ T5982] usb 4-1: Using ep0 maxpacket: 16
[  611.875757][ T5982] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  611.875788][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.875814][ T5982] usb 4-1: Product: syz
[  611.875846][ T5982] usb 4-1: Manufacturer: syz
[  611.875862][ T5982] usb 4-1: SerialNumber: syz
[  611.927937][ T5982] usb 4-1: config 0 descriptor??
[  611.937086][ T5982] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  612.234033][ T5982] usb 4-1: USB disconnect, device number 6
[  612.452022][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3428'.
[  613.134466][T16175] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3434'.
[  613.213329][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3436'.
[  613.215157][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3434'.
[  613.342861][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3436'.
[  613.429942][ T5977] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  613.598165][ T5977] usb 4-1: Using ep0 maxpacket: 32
[  613.601607][ T5977] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  613.601636][ T5977] usb 4-1: config 0 has no interface number 0
[  613.601684][ T5977] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  613.601713][ T5977] usb 4-1: config 0 interface 85 has no altsetting 0
[  613.612640][ T5977] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  613.612681][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.612702][ T5977] usb 4-1: Product: syz
[  613.612716][ T5977] usb 4-1: Manufacturer: syz
[  613.612731][ T5977] usb 4-1: SerialNumber: syz
[  613.724076][ T5977] usb 4-1: config 0 descriptor??
[  614.059221][   T31] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  614.102793][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3445'.
[  614.104440][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3445'.
[  614.130977][ T5977] appletouch 4-1:0.85: Geyser mode initialized.
[  614.132825][T16198] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3445'.
[  614.153284][ T5977] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12
[  614.240345][   T31] usb 10-1: Using ep0 maxpacket: 16
[  614.262696][   T31] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  614.262727][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.262806][   T31] usb 10-1: Product: syz
[  614.262905][   T31] usb 10-1: Manufacturer: syz
[  614.262992][   T31] usb 10-1: SerialNumber: syz
[  614.335167][   T31] usb 10-1: config 0 descriptor??
[  614.395412][   T31] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  614.573380][T16205] MINIX-fs: unable to read superblock
[  614.979169][ T5812] usb 4-1: USB disconnect, device number 7
[  614.979279][    C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  615.374979][   T31] usb 10-1: USB disconnect, device number 11
[  615.449470][ T5812] appletouch 4-1:0.85: input: appletouch disconnected
[  615.700536][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3454'.
[  615.701231][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3454'.
[  615.939679][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3457'.
[  616.188535][T16249] netlink: 'syz.9.3463': attribute type 1 has an invalid length.
[  616.348860][T16239] netlink: 'syz.6.3460': attribute type 1 has an invalid length.
[  616.397032][T16249] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.603882][T16251] bond0 (unregistering): Released all slaves
[  617.222016][T16263] syzkaller0: entered promiscuous mode
[  617.222043][T16263] syzkaller0: entered allmulticast mode
[  617.879179][T16300] syzkaller0: entered promiscuous mode
[  617.879206][T16300] syzkaller0: entered allmulticast mode
[  617.918078][T16300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.939364][T16300] tipc: Resetting bearer <eth:syzkaller0>
[  617.963145][T16299] tipc: Resetting bearer <eth:syzkaller0>
[  618.155803][T16299] tipc: Disabling bearer <eth:syzkaller0>
[  618.202299][T16313] __nla_validate_parse: 6 callbacks suppressed
[  618.202318][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3483'.
[  618.998141][ T5977] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  619.522974][ T5977] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  619.523032][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.523060][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.523083][ T5977] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  619.529596][ T5977] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  619.529625][ T5977] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  619.529640][ T5977] usb 10-1: Manufacturer: syz
[  619.544228][ T5977] usb 10-1: config 0 descriptor??
[  622.179941][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3511'.
[  624.376728][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  624.391208][ T1320] lec:lec_start_xmit: lec0:No lecd attached
[  624.779491][ T5977] usbhid 10-1:0.0: can't add hid device: -32
[  624.779620][ T5977] usbhid 10-1:0.0: probe with driver usbhid failed with error -32
[  624.931993][T16373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.227372][ T5812] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  625.377411][ T5812] usb 4-1: Using ep0 maxpacket: 16
[  625.380853][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  625.380882][ T5812] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  625.381202][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024
[  625.381224][ T5812] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  625.384194][ T1245] usb 10-1: USB disconnect, device number 12
[  625.384400][ T5812] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  625.384425][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.384444][ T5812] usb 4-1: Product: syz
[  625.384458][ T5812] usb 4-1: Manufacturer: syz
[  625.384471][ T5812] usb 4-1: SerialNumber: syz
[  625.508528][ T5812] usb 4-1: config 0 descriptor??
[  625.509408][T16422] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  625.615724][ T5812] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  625.615886][ T5812] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  625.616083][ T5812] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  625.616128][ T5812] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  625.616147][ T5812] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  625.817049][T16422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3531'.
[  628.982437][   T36] usb 4-1: USB disconnect, device number 8
[  629.006486][   T36] mcba_usb 4-1:0.0 can0: device disconnected
[  629.247311][ T5956] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  629.400494][ T5956] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  629.400547][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.400574][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.400596][ T5956] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  629.450158][ T5956] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  629.450241][ T5956] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  629.450289][ T5956] usb 10-1: Manufacturer: syz
[  629.486217][ T5956] usb 10-1: config 0 descriptor??
[  629.588503][T16490] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3552'.
[  629.887256][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms
[  629.887293][    C0] lec:lec_tx_timeout: lec0
[  631.732485][T16491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.739705][T16491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.337788][ T5956] usbhid 10-1:0.0: can't add hid device: -71
[  632.337917][ T5956] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  632.383678][ T5956] usb 10-1: USB disconnect, device number 13
[  632.640174][T16535] netlink: 120 bytes leftover after parsing attributes in process `syz.9.3565'.
[  632.707274][T16491] dummy0: left allmulticast mode
[  632.766738][ T1245] syz1: Port: 1 Link DOWN
[  632.832937][ T4454] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.832974][ T4454] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.877281][ T4454] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.877320][ T4454] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.882994][ T4454] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.883032][ T4454] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.883082][ T4454] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.883111][ T4454] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.124334][T16540] syzkaller0: entered promiscuous mode
[  633.124353][T16540] syzkaller0: entered allmulticast mode
[  634.326579][T16567] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3578'.
[  634.647312][ T5812] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  634.824287][ T5812] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  634.824338][ T5812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.824358][ T5812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  634.824374][ T5812] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  634.852328][ T5812] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  634.852407][ T5812] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  634.852468][ T5812] usb 10-1: Manufacturer: syz
[  634.867647][ T5956] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  634.888456][ T5812] usb 10-1: config 0 descriptor??
[  635.017475][ T5956] usb 4-1: Using ep0 maxpacket: 16
[  635.019644][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  635.019664][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  635.019682][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024
[  635.019741][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  635.022759][ T5956] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  635.022874][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.022897][ T5956] usb 4-1: Product: syz
[  635.022913][ T5956] usb 4-1: Manufacturer: syz
[  635.022929][ T5956] usb 4-1: SerialNumber: syz
[  635.357035][ T5956] usb 4-1: config 0 descriptor??
[  635.390788][T16575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  635.529772][ T5956] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  635.530379][ T5956] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  635.530557][ T5956] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  635.530602][ T5956] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  635.530621][ T5956] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  635.646923][ T5977] usb 4-1: USB disconnect, device number 9
[  635.769186][ T5977] mcba_usb 4-1:0.0 can0: device disconnected
[  637.657971][   T36] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  637.826118][   T36] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  637.826150][   T36] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.872557][   T36] usb 9-1: config 0 descriptor??
[  637.894199][   T36] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  638.089397][   T36] gp8psk: usb in 128 operation failed.
[  638.325348][   T36] gp8psk: usb in 146 operation failed.
[  638.325373][   T36] gp8psk: failed to get FW version
[  638.340046][   T36] gp8psk: usb in 149 operation failed.
[  638.340065][   T36] gp8psk: failed to get FPGA version
[  639.186993][T16633] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3605'.
[  639.566648][T16626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.722951][T16626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.183617][ T5812] usbhid 10-1:0.0: can't add hid device: -32
[  640.183754][ T5812] usbhid 10-1:0.0: probe with driver usbhid failed with error -32
[  640.733383][   T36] gp8psk: usb out operation failed.
[  640.733576][   T36] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  640.733706][   T36] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  641.564960][   T36] usb 9-1: USB disconnect, device number 17
[  641.822362][ T5810] Bluetooth: hci0: command 0x0406 tx timeout
[  642.571554][T16666] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3618'.
[  643.247774][ T5812] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  643.377293][ T5812] usb 7-1: device descriptor read/64, error -71
[  643.442939][T16681] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3626'.
[  643.617304][ T5812] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  643.750152][ T5812] usb 7-1: device descriptor read/64, error -71
[  643.857727][ T5812] usb usb7-port1: attempt power cycle
[  644.203734][ T5812] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  644.242110][ T5812] usb 7-1: device descriptor read/8, error -71
[  644.477673][ T5812] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  644.498086][ T5812] usb 7-1: device descriptor read/8, error -71
[  644.607700][ T5812] usb usb7-port1: unable to enumerate USB device
[  644.640127][ T5812] usb 10-1: USB disconnect, device number 14
[  645.150989][T16727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.183547][T16727] tipc: Resetting bearer <eth:syzkaller0>
[  645.441536][T16724] tipc: Disabling bearer <eth:syzkaller0>
[  646.460451][T16719] lec:lec_atm_close: lec0: Shut down!
[  646.537554][ T5977] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  646.718438][ T5977] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  646.718487][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.718515][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.718537][ T5977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  646.720534][ T5977] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  646.720562][ T5977] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  646.720582][ T5977] usb 4-1: Manufacturer: syz
[  646.726368][ T5977] usb 4-1: config 0 descriptor??
[  648.305507][T16773] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3667'.
[  649.095212][T16782] bond0: option mode: unable to set because the bond device has slaves
[  649.168326][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3672'.
[  650.425144][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3682'.
[  651.786156][T16829] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3691'.
[  651.887262][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[  651.887301][    C0] lec:lec_tx_timeout: lec0
[  651.979545][ T5977] usbhid 4-1:0.0: can't add hid device: -32
[  651.979677][ T5977] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  652.680927][ T5982] usb 4-1: USB disconnect, device number 10
[  654.578078][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3716'.
[  654.578338][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3716'.
[  654.581007][T16887] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3716'.
[  657.018467][   T38] INFO: task kworker/0:5:5904 blocked for more than 143 seconds.
[  657.018499][   T38]       Not tainted syzkaller #0
[  657.018511][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  657.018522][   T38] task:kworker/0:5     state:D stack:21512 pid:5904  tgid:5904  ppid:2      task_flags:0x4208060 flags:0x00080000
[  657.018596][   T38] Workqueue: usb_hub_wq hub_event
[  657.018828][   T38] Call Trace:
[  657.018837][   T38]  <TASK>
[  657.018851][   T38]  __schedule+0x1553/0x5240
[  657.019017][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[  657.019097][   T38]  ? stack_trace_save+0xa9/0x100
[  657.019150][   T38]  ? __pfx_stack_trace_save+0x10/0x10
[  657.019188][   T38]  ? check_path+0x21/0x40
[  657.019215][   T38]  ? __pfx___schedule+0x10/0x10
[  657.019258][   T38]  ? schedule+0x90/0x360
[  657.019292][   T38]  schedule+0x164/0x360
[  657.019327][   T38]  schedule_timeout+0xc3/0x2c0
[  657.019361][   T38]  ? __pfx_schedule_timeout+0x10/0x10
[  657.019394][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[  657.019437][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[  657.019585][   T38]  ? wait_for_completion+0x274/0x5e0
[  657.019627][   T38]  wait_for_completion+0x2cc/0x5e0
[  657.019676][   T38]  ? __pfx_wait_for_completion+0x10/0x10
[  657.019732][   T38]  i2c_del_adapter+0x5c0/0x790
[  657.019856][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  657.019934][   T38]  ? dvb_usbv2_exit+0x4a1/0xb60
[  657.020030][   T38]  ? __pfx_i2c_del_adapter+0x10/0x10
[  657.020065][   T38]  ? dvb_usbv2_exit+0x935/0xb60
[  657.020105][   T38]  dvb_usbv2_probe+0x4c0/0x3c20
[  657.020200][   T38]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  657.020236][   T38]  ? __pm_runtime_set_status+0x99c/0xc70
[  657.020332][   T38]  usb_probe_interface+0x668/0xc90
[  657.020396][   T38]  ? __pfx_usb_probe_interf[  657.020396][   T38]  ? __pfx_usb_probe_interface+0x10/0x10
[  657.020421][   T38]  really_probe+0x267/0xaf0
[  657.020523][   T38]  __driver_probe_device+0x18c/0x320
[  657.020554][   T38]  driver_probe_device+0x4f/0x240
[  657.020587][   T38]  __device_attach_driver+0x279/0x430
[  657.020630][   T38]  bus_for_each_drv+0x25b/0x2f0
[  657.020684][   T38]  ? __pfx___device_attach_driver+0x10/0x10
[  657.020711][   T38]  ? __pfx_bus_for_each_drv+0x10/0x10
[  657.020743][   T38]  ? rt_spin_unlock+0x160/0x200
[  657.020777][   T38]  __device_attach+0x2c8/0x450
[  657.020805][   T38]  ? __pfx___device_attach+0x10/0x10
[  657.020831][   T38]  ? rt_spin_unlock+0x160/0x200
[  657.020865][   T38]  device_initial_probe+0xa1/0xd0
[  657.020893][   T38]  bus_probe_device+0x12d/0x220
[  657.020923][   T38]  ? device_add+0x726/0xb80
[  657.020948][   T38]  device_add+0x7b6/0xb80
[  657.020976][   T38]  usb_set_configuration+0x1a87/0x2110
[  657.021028][   T38]  usb_generic_driver_probe+0x8d/0x150
[  657.021081][   T38]  usb_probe_device+0x1c4/0x3b0
[  657.021280][   T38]  ? __pfx_usb_probe_device+0x10/0x10
[  657.021305][   T38]  really_probe+0x267/0xaf0
[  657.021339][   T38]  __driver_probe_device+0x18c/0x320
[  657.021368][   T38]  driver_probe_device+0x4f/0x240
[  657.021398][   T38]  __device_attach_driver+0x279/0x430
[  657.021446][   T38]  bus_for_each_drv+0x25b/0x2f0
[  657.021519][   T38]  ? __pfx___device_attach_driver+0x10/0x10
[  657.021546][   T38]  ? __pfx_bus_for_each_drv+0x10/0x10
[  657.021578][   T38]  ? rt_spin_unlock+0x160/0x200
[  657.021612][   T38]  __device_attach+0x2c8/0x450
[  657.021658][   T38]  ? __pfx___device_attach+0x10/0x10
[  657.021684][   T38]  ? rt_spin_unlock+0x160/0x200
[  657.021721][   T38]  device_initial_probe+0xa1/0xd0
[  657.021750][   T38]  bus_probe_device+0x12d/0x220
[  657.021782][   T38]  ? device_add+0x726/0xb80
[  657.021809][   T38]  device_add+0x7b6/0xb80
[  657.021838][   T38]  usb_new_device+0x9f8/0x16e0
[  657.021916][   T38]  ? __pfx_usb_new_device+0x10/0x10
[  657.021961][   T38]  hub_event+0x2a49/0x4f60
[  657.022040][   T38]  ? __pfx_hub_event+0x10/0x10
[  657.022074][   T38]  ? process_scheduled_works+0xa8d/0x18c0
[  657.022114][   T38]  ? process_scheduled_works+0xa8d/0x18c0
[  657.022149][   T38]  process_scheduled_works+0xb6e/0x18c0
[  657.022214][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[  657.022253][   T38]  ? assign_work+0x3d5/0x5e0
[  657.022290][   T38]  worker_thread+0xa53/0xfc0
[  657.022351][   T38]  kthread+0x388/0x470
[  657.022376][   T38]  ? __pfx_worker_thread+0x10/0x10
[  657.022405][   T38]  ? __pfx_kthread+0x10/0x10
[  657.022431][   T38]  ret_from_fork+0x51e/0xb90
[  657.022483][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  657.022514][   T38]  ? __switch_to+0xc7d/0x1450
[  657.022568][   T38]  ? __pfx_kthread+0x10/0x10
[  657.022593][   T38]  ret_from_fork_asm+0x1a/0x30
[  657.022650][   T38]  </TASK>
[  657.022736][   T38] INFO: task syz.4.2665:13764 blocked for more than 143 seconds.
[  657.022754][   T38]       Not tainted syzkaller #0
[  657.022765][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  657.022776][   T38] task:syz.4.2665      state:D stack:26304 pid:13764 tgid:13763 ppid:8995   task_flags:0x400040 flags:0x00080002
[  657.022844][   T38] Call Trace:
[  657.022852][   T38]  <TASK>
[  657.022865][   T38]  __schedule+0x1553/0x5240
[  657.022911][   T38]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  657.022949][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[  657.022974][   T38]  ? __pfx___schedule+0x10/0x10
[  657.023023][   T38]  rt_mutex_schedule+0x76/0xf0
[  657.023059][   T38]  rt_mutex_slowlock_block+0x508/0x680
[  657.023100][   T38]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  657.023131][   T38]  rt_mutex_slowlock+0x2dc/0x7b0
[  657.023162][   T38]  ? rt_mutex_slowlock+0x1fd/0x7b0
[  657.023198][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  657.023250][   T38]  ? usbdev_open+0x182/0x790
[  657.023310][   T38]  ? usbdev_open+0x182/0x790
[  657.023337][   T38]  mutex_lock_nested+0x168/0x1d0
[  657.023372][   T38]  ? usbdev_open+0xa7/0x790
[  657.023423][   T38]  usbdev_open+0x182/0x790
[  657.023465][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  657.023494][   T38]  ? __pfx_usbdev_open+0x10/0x10
[  657.023522][   T38]  ? rt_spin_unlock+0x14f/0x200
[  657.023554][   T38]  ? rt_spin_unlock+0x160/0x200
[  657.023585][   T38]  chrdev_open+0x4d0/0x5f0
[  657.023670][   T38]  ? __pfx_chrdev_open+0x10/0x10
[  657.023694][   T38]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[  657.023768][   T38]  ? __pfx_chrdev_open+0x10/0x10
[  657.023792][   T38]  do_dentry_open+0x83d/0x13e0
[  657.023861][   T38]  vfs_open+0x3b/0x350
[  657.023885][   T38]  ? path_openat+0x2e2b/0x38a0
[  657.023965][   T38]  path_openat+0x2e43/0x38a0
[  657.024036][   T38]  ? __pfx_path_openat+0x10/0x10
[  657.024072][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[  657.024097][   T38]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  657.024176][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[  657.024219][   T38]  do_file_open+0x23e/0x4a0
[  657.024251][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  657.024290][   T38]  ? __pfx_do_file_open+0x10/0x10
[  657.024321][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  657.024375][   T38]  ? alloc_fd+0x64e/0x6c0
[  657.024438][   T38]  do_sys_openat2+0x113/0x200
[  657.024479][   T38]  ? __se_sys_futex+0x3a8/0x450
[  657.024509][   T38]  ? __pfx_do_sys_openat2+0x10/0x10
[  657.024544][   T38]  ? rcu_is_watching+0x15/0xb0
[  657.024582][   T38]  __x64_sys_openat+0x138/0x170
[  657.024617][   T38]  do_syscall_64+0x14d/0xf80
[  657.024674][   T38]  ? trace_irq_disable+0x3b/0x150
[  657.024706][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.024746][   T38]  ? clear_bhb_loop+0x40/0x90
[  657.024775][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.024799][   T38] RIP: 0033:0x7f85ac35cfce
[  657.024825][   T38] RSP: 002b:00007f85aa5f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  657.024861][   T38] RAX: ffffffffffffffda RBX: 00007f85aa5f66c0 RCX: 00007f85ac35cfce
[  657.024878][   T38] RDX: 0000000000008001 RSI: 00007f85aa5f5c00 RDI: ffffffffffffff9c
[  657.024894][   T38] RBP: 00007f85aa5f5c00 R08: 0000000000000000 R09: 0000000000000000
[  657.024908][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  657.024922][   T38] R13: 00007f85ac616038 R14: 00007f85ac615fa0 R15: 00007ffe2d2fe8b8
[  657.025195][   T38]  </TASK>
[  657.025238][   T38] 
[  657.025238][   T38] Showing all locks held in the system:
[  657.025250][   T38] 2 locks held by kworker/u8:1/13:
[  657.025310][   T38]  #0: ffff88801a397138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  657.025395][   T38]  #1: ffffc90000127c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  657.025549][   T38] 1 lock held by khungtaskd/38:
[  657.025567][   T38]  #0: ffffffff8ddcb8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  657.025648][   T38] 2 locks held by kworker/u8:5/103:
[  657.025661][   T38]  #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  657.025721][   T38]  #1: ffffc900015f7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  657.025792][   T38] 3 locks held by kworker/u8:10/1411:
[  657.025805][   T38]  #0: ffff888032555938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  657.025863][   T38]  #1: ffffc90006847c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  657.025926][   T38]  #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  657.026098][   T38] 3 locks held by kworker/u8:16/4454:
[  657.026111][   T38]  #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  657.026173][   T38]  #1: ffffc90010cefc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  657.026235][   T38]  #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  657.026360][   T38] 2 locks held by getty/5559:
[  657.026373][   T38]  #0: ffff8880372770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  657.026535][   T38]  #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0
[  657.026591][   T38] 5 locks held by kworker/0:5/5904:
[  657.026605][   T38]  #0: ffff888021af6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  657.026669][   T38]  #1: ffffc900058bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  657.026734][   T38]  #2: ffff88802a3bf188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  657.026791][   T38]  #3: ffff88805c4e6188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  657.026850][   T38]  #4: ffff88802a281150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  657.026908][   T38] 3 locks held by kworker/1:8/5977:
[  657.026920][   T38]  #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  657.026984][   T38]  #1: ffffc90005e07c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  657.027058][   T38]  #2: ffff888024e99260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0
[  657.217903][   T38] 2 locks held by kworker/0:8/5982:
[  657.217936][   T38] 4 locks held by udevd/13185:
[  657.217949][   T38]  #0: ffff88805586eec8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20
[  657.218124][   T38]  #1: ffff88803ba1c478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  657.218256][   T38]  #2: ffff88805b001788 (kn->active#25){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  657.218325][   T38]  #3: ffff88805c4e6188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  657.218379][   T38] 6 locks held by kworker/u8:2/13252:
[  657.218393][   T38] 1 lock held by syz.4.2665/13764:
[  657.218406][   T38]  #0: ffff88802a3bf188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x790
[  657.218477][   T38] 1 lock held by syz.6.3725/16898:
[  657.218490][   T38]  #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  657.218579][   T38] 1 lock held by syz.3.3732/16913:
[  657.218592][   T38]  #0: ffff888068ad95f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  657.218694][   T38] 2 locks held by syz.9.3731/16915:
[  657.218708][   T38]  #0: ffffffff8f6c14e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  657.218772][   T38]  #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  657.218829][   T38] 5 locks held by syz.8.3733/16929:
[  657.218841][   T38] 2 locks held by syz.0.3740/16936:
[  657.218856][   T38] 
[  657.218861][   T38] =============================================
[  657.218861][   T38] 
[  657.218878][   T38] NMI backtrace for cpu 0
[  657.218902][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  657.218926][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  657.218938][   T38] Call Trace:
[  657.218947][   T38]  <TASK>
[  657.218957][   T38]  dump_stack_lvl+0xe8/0x150
[  657.218992][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  657.219047][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  657.219088][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  657.219119][   T38]  sys_info+0x135/0x170
[  657.219141][   T38]  watchdog+0xfd9/0x1030
[  657.219174][   T38]  ? watchdog+0x21a/0x1030
[  657.219209][   T38]  kthread+0x388/0x470
[  657.219233][   T38]  ? __pfx_watchdog+0x10/0x10
[  657.219258][   T38]  ? __pfx_kthread+0x10/0x10
[  657.219282][   T38]  ret_from_fork+0x51e/0xb90
[  657.219317][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  657.219347][   T38]  ? __switch_to+0xc7d/0x1450
[  657.219378][   T38]  ? __pfx_kthread+0x10/0x10
[  657.219402][   T38]  ret_from_fork_asm+0x1a/0x30
[  657.219439][   T38]  </TASK>
[  657.219447][   T38] Sending NMI from CPU 0 to CPUs 1:
[  657.219478][    C1] NMI backtrace for cpu 1
[  657.219493][    C1] CPU: 1 UID: 0 PID: 16929 Comm: syz.8.3733 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  657.219513][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  657.219524][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0xa0
[  657.219550][    C1] Code: 74 0a 18 48 89 44 0a 20 e9 45 17 62 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 88 d4 89 10 65 44 8b 05 a8 d4 89 10 41 81 e0 00 00 ff
[  657.219567][    C1] RSP: 0018:ffffc900047df360 EFLAGS: 00000246
[  657.219583][    C1] RAX: ffffffff82102e26 RBX: 0000000043ad1067 RCX: ffff888040088000
[  657.219596][    C1] RDX: 0000000000000000 RSI: 0000000043ad1067 RDI: 0000000000000000
[  657.219608][    C1] RBP: ffffc900047df670 R08: 0000000000000000 R09: 0000000000000000
[  657.219620][    C1] R10: dffffc0000000000 R11: fffff940001c9a69 R12: ffff88804f7123c0
[  657.219633][    C1] R13: dffffc0000000000 R14: 0000000043ad1067 R15: 0000200000362000
[  657.219647][    C1] FS:  0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000
[  657.219662][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  657.219675][    C1] CR2: 00007f7dee80d400 CR3: 000000000dbba000 CR4: 00000000003526f0
[  657.219692][    C1] Call Trace:
[  657.219698][    C1]  <TASK>
[  657.219704][    C1]  vm_normal_page+0x26/0x1a0
[  657.219774][    C1]  unmap_page_range+0xb4a/0x4540
[  657.219805][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  657.219845][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  657.219871][    C1]  ? mas_find+0xb0e/0xd30
[  657.219917][    C1]  ? unmap_vmas+0x1c4/0x6a0
[  657.219939][    C1]  unmap_vmas+0x48f/0x6a0
[  657.219965][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  657.219998][    C1]  exit_mmap+0x280/0xa10
[  657.220047][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  657.220073][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  657.220104][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  657.220137][    C1]  ? __pfx_exit_aio+0x10/0x10
[  657.220214][    C1]  ? uprobe_clear_state+0x288/0x2a0
[  657.220294][    C1]  __mmput+0xcb/0x3d0
[  657.220319][    C1]  exit_mm+0x168/0x220
[  657.220344][    C1]  do_exit+0x6a2/0x23c0
[  657.220364][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  657.220393][    C1]  ? __pfx_do_exit+0x10/0x10
[  657.220409][    C1]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  657.220431][    C1]  ? reacquire_held_locks+0x104/0x190
[  657.220451][    C1]  ? rt_spin_lock+0x1e0/0x400
[  657.220478][    C1]  do_group_exit+0x21b/0x2d0
[  657.220496][    C1]  ? rt_spin_unlock+0x160/0x200
[  657.220519][    C1]  get_signal+0x125c/0x1310
[  657.220553][    C1]  arch_do_signal_or_restart+0xbc/0x830
[  657.220578][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  657.220604][    C1]  ? __x64_sys_recvmmsg+0x198/0x250
[  657.220628][    C1]  exit_to_user_mode_loop+0x86/0x480
[  657.220655][    C1]  ? rcu_is_watching+0x15/0xb0
[  657.220677][    C1]  do_syscall_64+0x32d/0xf80
[  657.220703][    C1]  ? trace_irq_disable+0x3b/0x150
[  657.220724][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.220742][    C1]  ? clear_bhb_loop+0x40/0x90
[  657.220763][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.220780][    C1] RIP: 0033:0x7f9b406dc799
[  657.220796][    C1] Code: Unable to access opcode bytes at 0x7f9b406dc76f.
[  657.220806][    C1] RSP: 002b:00007f9b3e90d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  657.220824][    C1] RAX: 0000000000010106 RBX: 00007f9b40956090 RCX: 00007f9b406dc799
[  657.220836][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005
[  657.220848][    C1] RBP: 00007f9b40772c99 R08: 0000000000000000 R09: 0000000000000000
[  657.220859][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  657.220870][    C1] R13: 00007f9b40956128 R14: 00007f9b40956090 R15: 00007ffe0ffbe598
[  657.220892][    C1]  </TASK>
[  657.221492][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  657.221509][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  657.221552][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  657.221566][   T38] Call Trace:
[  657.221575][   T38]  <TASK>
[  657.221585][   T38]  vpanic+0x56c/0xa60
[  657.221626][   T38]  ? __pfx_vpanic+0x10/0x10
[  657.221677][   T38]  panic+0xc5/0xd0
[  657.221716][   T38]  ? __pfx_panic+0x10/0x10
[  657.221748][   T38]  ? printk_trigger_flush+0x117/0x180
[  657.221783][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  657.221825][   T38]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  657.221858][   T38]  watchdog+0x1023/0x1030
[  657.221893][   T38]  ? watchdog+0x21a/0x1030
[  657.221929][   T38]  kthread+0x388/0x470
[  657.221953][   T38]  ? __pfx_watchdog+0x10/0x10
[  657.221979][   T38]  ? __pfx_kthread+0x10/0x10
[  657.222005][   T38]  ret_from_fork+0x51e/0xb90
[  657.222039][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  657.222070][   T38]  ? __switch_to+0xc7d/0x1450
[  657.222101][   T38]  ? __pfx_kthread+0x10/0x10
[  657.222126][   T38]  ret_from_fork_asm+0x1a/0x30
[  657.222165][   T38]  </TASK>
[  657.222772][   T38] Kernel Offset: disabled