last executing test programs:

12m42.189677822s ago: executing program 0 (id=1058):
r0 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x50)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x3, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x200101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]})
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000e00), 0x12)
write(r5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
syz_clone(0x44011400, &(0x7f0000000680)="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"/317, 0x13d, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000e40)="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")
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="310300000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x1)
socket$netlink(0x10, 0x3, 0x0)

12m40.435994786s ago: executing program 0 (id=1059):
r0 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000280))
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})
syz_open_dev$sndpcmp(0x0, 0x1000, 0x80040)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
close(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0)

12m40.297580159s ago: executing program 0 (id=1060):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x21, 0x50, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x50)

12m40.109673822s ago: executing program 0 (id=1062):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)

12m39.16850534s ago: executing program 0 (id=1063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

12m38.932789365s ago: executing program 0 (id=1065):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0xff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x8044)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0x7ffffffe, 0x0, 0x1}, 0x48)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)

12m23.530512014s ago: executing program 32 (id=1065):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0xff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x8044)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0x7ffffffe, 0x0, 0x1}, 0x48)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)

2m35.852665146s ago: executing program 2 (id=2186):
r0 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x3, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x200101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r6, &(0x7f0000000e00), 0x12)
write(r6, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
syz_clone(0x44011400, &(0x7f0000000680)="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"/317, 0x13d, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000e40)="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")
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="310300000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x1)
socket$netlink(0x10, 0x3, 0x0)

2m34.549879161s ago: executing program 2 (id=2187):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x7c, r2, 0x601, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x4020010)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r5 = dup(r4)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)

2m29.704455175s ago: executing program 2 (id=2192):
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb08"], 0x44}, 0x1, 0x2}, 0x4000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044010)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x18b)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xfc, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb)
poll(&(0x7f0000000440)=[{r2, 0x202}], 0x1, 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4)
sendto$inet6(r5, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00')
preadv(r6, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f0000000f80))

2m22.861949228s ago: executing program 2 (id=2202):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f69876", 0x18}], 0x2)

2m14.855306233s ago: executing program 2 (id=2210):
socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18)
write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8d}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000003000), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

2m12.542831748s ago: executing program 2 (id=2213):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"})
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r7, 0x5b03, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000"], 0x74}}, 0x0)

1m54.356060159s ago: executing program 33 (id=2213):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"})
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r7, 0x5b03, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000"], 0x74}}, 0x0)

57.081418972s ago: executing program 3 (id=2327):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f0000000040)='net/connector\x00')
r3 = gettid()
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r4, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0xc000680)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00')
syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)

55.382071024s ago: executing program 3 (id=2330):
r0 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x50)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000e00), 0x12)
write(r5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_clone(0x44011400, &(0x7f0000000680)="b8d66760bc0870ad3834c2ead03d359a819561cb517b7714f47d11a2f175da420e7f9ceeffb0dbf9f9fd154a0762cf98125df49371810000000000000041d07407de319f451dc4978accc886238862c1b0ede1b85191e06d59bbc98db860a0d4908bf1e555e2e0a6fc53a6e3aaf587d8223557f455443f1ffc7d13376bb4dc1c9e89f0b2015146ea53676242e70be79bd3f13fb62b465812c1a151fa1162d106f4b5bc5247440765cd3017f24b140cd6d04a4c92841bc738cc66127532a48f7ad6d207d47f82d8a7616d4ffa91570220947ed32a00baba86f463943b5877013fad53027c58f48900801cf05b69186fab6efdb8bd2ef11ea5b3019fa92f5cccc4e2cdc7a805a6d8608d82f5cf0101bbcc6da72efc0bd4252815defc2adbc7c05173fc68acc6ed3c6c72ab71fa805600"/317, 0x13d, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000e40)="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")
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="310300000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x1)
socket$netlink(0x10, 0x3, 0x0)

53.50258776s ago: executing program 3 (id=2333):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080)

24.685510855s ago: executing program 1 (id=2382):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000)
syz_open_procfs(0x0, &(0x7f0000000040)='net/connector\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x2, 'syz0\x00', 0x1}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r2 = gettid()
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r3, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0xc000680)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00')
syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)

17.876904186s ago: executing program 1 (id=2388):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
sysinfo(&(0x7f0000000000)=""/196)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
fcntl$notify(r1, 0x402, 0x91ea6c1af182532)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r4, 0xffffffffffffffff, 0x0)

15.325772375s ago: executing program 1 (id=2392):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4212, r2, &(0x7f0000000180)={0x9, 0x0, 0x89}, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000})
fallocate(r6, 0x3, 0x100000000, 0x80000000)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffe0}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r9 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c4)
name_to_handle_at(r9, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1600)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)

14.155233867s ago: executing program 1 (id=2395):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x4, 0x11, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4})
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa45910476a7aee3f84", @ANYRES16=r4], 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
pread64(r1, 0x0, 0x0, 0x5)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
connect$inet(r2, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r6 = socket(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
setsockopt(r6, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')

11.369534091s ago: executing program 1 (id=2398):
r0 = socket$igmp(0x2, 0x3, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000019140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000540)={{0x2, @broadcast, 0x4e24, 0x4, 'wrr\x00', 0x0, 0x9, 0x3f}, {@empty, 0x4e24, 0x4, 0xffff, 0x5, 0x8}}, 0x44)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r5}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000c31006003000128008000100736974002400028008000300ac1414bb06000e000600000008000c00ee00400008001400010001"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x1, 0x6, 0x6, 0x10000000, 'syz0\x00', 0x1}, 0x0, [0x8, 0x2, 0x17ed, 0x23, 0x0, 0xb, 0x7, 0x3dac, 0xa5b, 0x4, 0x2, 0xfff, 0x6, 0x9, 0x7, 0x6, 0x299, 0x6, 0x7, 0x8000000000000000, 0x8000000000000001, 0x0, 0x15, 0xd3, 0x4, 0x1, 0xf, 0x2, 0x8, 0x9, 0x0, 0x0, 0x7fffffff, 0x6, 0x101, 0x8001, 0x8000000000000000, 0x85f9, 0x1, 0xffffffffffffffff, 0x2, 0x4379, 0xe, 0x10001, 0x0, 0x9, 0x8, 0x0, 0xc01, 0xf, 0x1, 0x9d2, 0x401, 0x8, 0x3a50, 0xfff, 0x2, 0x3, 0x5, 0x8, 0x0, 0x4, 0x7, 0xdcb2, 0xffffffffffffffff, 0x1, 0xb, 0x3000, 0xffffffff80000001, 0x0, 0x3ff, 0xb, 0x7fff, 0xe4, 0x0, 0xf45, 0x0, 0x7, 0xffff, 0x5, 0x3, 0xa16, 0x10000, 0x6, 0x83fe, 0x6, 0x400, 0x0, 0x4, 0x0, 0x2, 0x5, 0x2c5, 0xff, 0x1000, 0x1, 0x3, 0x9, 0x9, 0x80000000, 0x335, 0x6, 0x5, 0x4, 0x7, 0x4, 0x0, 0x4, 0xfffffffffffffffb, 0x1b3, 0x5, 0x45d8, 0x10001, 0xffff, 0x7, 0x1308, 0x9, 0x7f, 0x5c, 0x2, 0x9, 0x2, 0x5, 0x7ffeffff, 0x5, 0x24, 0x80000000, 0x87]})

8.813909101s ago: executing program 1 (id=2403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

8.758664021s ago: executing program 4 (id=2404):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa4", @ANYRES16=r5, @ANYBLOB="010040000000000000000300000018000180040002800e0001006574683a766c616e30000000"], 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
pread64(r3, &(0x7f00000005c0)=""/213, 0xd5, 0x5)
connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r6 = socket(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')

8.694399053s ago: executing program 5 (id=2405):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x4, 0x11, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4})
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa45910476a7aee3f84", @ANYRES16=r4], 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
pread64(r1, 0x0, 0x0, 0x5)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
connect$inet(r2, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r6 = socket(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
setsockopt(r6, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')

8.669417433s ago: executing program 3 (id=2346):
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x4)

7.400973637s ago: executing program 4 (id=2407):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
sysinfo(&(0x7f0000000000)=""/196)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
fcntl$notify(r1, 0x402, 0x91ea6c1af182532)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r4, 0xffffffffffffffff, 0x0)

6.163510631s ago: executing program 4 (id=2408):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
unshare(0x4020400)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

5.041485513s ago: executing program 5 (id=2409):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002080)=ANY=[@ANYBLOB="6c0100001a0001000000000000000000200100000000000000000000000000020000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200"/96], 0x16c}}, 0x0)

4.974842294s ago: executing program 4 (id=2410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000540)={{0x2, @broadcast, 0x4e24, 0x4, 'wrr\x00', 0x0, 0x9, 0x3f}, {@empty, 0x4e24, 0x4, 0xffff, 0x5, 0x8}}, 0x44)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000c31006003000128008000100736974002400028008000300ac1414bb06000e000600000008000c00ee00400008001400010001"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x1, 0x6, 0x6, 0x10000000, 'syz0\x00', 0x1}, 0x0, [0x8, 0x2, 0x17ed, 0x23, 0x0, 0xb, 0x7, 0x3dac, 0xa5b, 0x4, 0x2, 0xfff, 0x6, 0x9, 0x7, 0x6, 0x299, 0x6, 0x7, 0x8000000000000000, 0x8000000000000001, 0x0, 0x15, 0xd3, 0x4, 0x1, 0xf, 0x2, 0x8, 0x9, 0x0, 0x0, 0x7fffffff, 0x6, 0x101, 0x8001, 0x8000000000000000, 0x85f9, 0x1, 0xffffffffffffffff, 0x2, 0x4379, 0xe, 0x10001, 0x0, 0x9, 0x8, 0x0, 0xc01, 0xf, 0x1, 0x9d2, 0x401, 0x8, 0x3a50, 0xfff, 0x2, 0x3, 0x5, 0x8, 0x0, 0x4, 0x7, 0xdcb2, 0xffffffffffffffff, 0x1, 0xb, 0x3000, 0xffffffff80000001, 0x0, 0x3ff, 0xb, 0x7fff, 0xe4, 0x0, 0xf45, 0x0, 0x7, 0xffff, 0x5, 0x3, 0xa16, 0x10000, 0x6, 0x83fe, 0x6, 0x400, 0x0, 0x4, 0x0, 0x2, 0x5, 0x2c5, 0xff, 0x1000, 0x1, 0x3, 0x9, 0x9, 0x80000000, 0x335, 0x6, 0x5, 0x4, 0x7, 0x4, 0x0, 0x4, 0xfffffffffffffffb, 0x1b3, 0x5, 0x45d8, 0x10001, 0xffff, 0x7, 0x1308, 0x9, 0x7f, 0x5c, 0x2, 0x9, 0x2, 0x5, 0x7ffeffff, 0x5, 0x24, 0x80000000, 0x87]})

4.057548242s ago: executing program 5 (id=2411):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

3.946094715s ago: executing program 4 (id=2412):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x3, 0x0, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]})

2.748184247s ago: executing program 3 (id=2413):
syz_open_dev$loop(0x0, 0x760, 0x440)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6d3, &(0x7f00000014c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0)

2.63134455s ago: executing program 5 (id=2414):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa4", @ANYRES16=r5, @ANYBLOB="010040000000000000000300000018000180040002800e0001006574683a766c616e30000000"], 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
pread64(r3, &(0x7f00000005c0)=""/213, 0xd5, 0x5)
connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r6 = socket(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')

2.347002975s ago: executing program 4 (id=2415):
syz_usb_connect(0x3, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0xbe, 0x12, 0xf0, 0x8, 0x424, 0xcf18, 0xb61d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x9, 0xd0, 0x4e, [{{0x9, 0x4, 0xd3, 0xfd, 0x0, 0x4a, 0x66, 0xcc, 0x7}}]}}]}}, 0x0)

1.398813943s ago: executing program 5 (id=2416):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)

1.152391598s ago: executing program 3 (id=2417):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, 0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x7)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040847}, 0x240008c4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

0s ago: executing program 5 (id=2418):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000)
syz_open_procfs(0x0, &(0x7f0000000040)='net/connector\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x2, 'syz0\x00', 0x1}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r2 = gettid()
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r3, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare(0xc000680)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00')
syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)

kernel console output (not intermixed with test programs):

 usb 5-1: USB disconnect, device number 2
[  859.280204][ T5831] IPVS: starting estimator thread 0...
[  859.414988][T11401] IPVS: using max 15 ests per chain, 36000 per kthread
[  860.564089][T11412] netlink: 'syz.3.1411': attribute type 1 has an invalid length.
[  860.572575][T11412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1411'.
[  861.670390][T11425] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  862.713790][T11430] overlayfs: missing 'workdir'
[  863.262771][ T5852] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  863.469728][ T5852] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  863.486509][ T5852] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  863.543957][ T5852] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  863.561290][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.599119][ T5852] usb 4-1: Product: syz
[  863.611806][ T5852] usb 4-1: Manufacturer: syz
[  863.622575][ T5852] usb 4-1: SerialNumber: syz
[  863.862252][ T5852] usb 4-1: USB disconnect, device number 35
[  863.998019][T11442] netlink: 'syz.4.1421': attribute type 1 has an invalid length.
[  864.006198][T11442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1421'.
[  865.252303][T11455] overlayfs: missing 'workdir'
[  865.880745][T11468] sctp: [Deprecated]: syz.3.1430 (pid 11468) Use of struct sctp_assoc_value in delayed_ack socket option.
[  865.880745][T11468] Use struct sctp_sack_info instead
[  866.110118][T11472] netlink: set zone limit has 8 unknown bytes
[  866.733569][T11470] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  867.142992][T11478] netlink: 'syz.3.1432': attribute type 1 has an invalid length.
[  867.160260][T11478] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1432'.
[  867.313635][T11480] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  869.394034][T11496] overlayfs: missing 'workdir'
[  869.800346][T11507] netlink: 'syz.4.1442': attribute type 1 has an invalid length.
[  869.815514][T11507] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1442'.
[  870.268300][T11516] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  870.783640][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  870.790336][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  872.493752][T11532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  875.578474][T11544] netlink: 'syz.3.1451': attribute type 1 has an invalid length.
[  875.605234][T11544] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1451'.
[  875.768460][T11549] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  877.776667][T11553] siw: device registration error -23
[  878.291338][T11572] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  879.071737][T11584] netlink: 'syz.2.1463': attribute type 1 has an invalid length.
[  879.088184][T11584] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1463'.
[  880.697815][T11600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  881.464272][T11599] siw: device registration error -23
[  881.770039][T11608] netlink: 'syz.4.1472': attribute type 1 has an invalid length.
[  881.809600][T11608] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1472'.
[  886.629517][T11650] netlink: 'syz.4.1484': attribute type 1 has an invalid length.
[  886.647577][T11650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1484'.
[  887.319704][T11655] loop4: detected capacity change from 0 to 40427
[  887.377308][T11655] F2FS-fs (loop4): invalid crc value
[  887.431737][T11655] F2FS-fs (loop4): Found nat_bits in checkpoint
[  887.490741][T11655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  890.866275][T11684] siw: device registration error -23
[  890.970841][T11686] netlink: 'syz.2.1495': attribute type 1 has an invalid length.
[  890.980481][T11686] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1495'.
[  891.495932][T10005] syz-executor: attempt to access beyond end of device
[  891.495932][T10005] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  891.557334][T10005] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  894.560666][T11719] netlink: 'syz.4.1505': attribute type 1 has an invalid length.
[  894.592669][T11719] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1505'.
[  894.999156][T11727] siw: device registration error -23
[  895.070377][  T968] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  895.616199][  T968] usb 5-1: config 2 has an invalid interface number: 174 but max is 0
[  895.636942][  T968] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  895.647195][  T968] usb 5-1: config 2 has no interface number 0
[  895.654560][  T968] usb 5-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping
[  895.665667][  T968] usb 5-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  896.435223][  T968] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  896.446188][  T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.454925][  T968] usb 5-1: Product: syz
[  896.471207][  T968] usb 5-1: Manufacturer: syz
[  896.475905][  T968] usb 5-1: SerialNumber: syz
[  896.520133][T11724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  896.529744][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  896.854031][  T968] usb 5-1: probing VID:PID(0424:012C)   
[  896.862477][  T968] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  896.876764][  T968] vub300: probe of 5-1:2.174 failed with error -22
[  896.918246][  T968] usb 5-1: USB disconnect, device number 3
[  897.347434][   T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  897.382363][T11754] netlink: 'syz.3.1515': attribute type 1 has an invalid length.
[  897.392929][T11754] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1515'.
[  897.583812][   T23] usb 2-1: Using ep0 maxpacket: 8
[  897.594917][   T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  897.611127][   T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  897.623686][   T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  897.644618][   T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  897.699774][   T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  897.753943][   T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  897.918687][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.659887][    C1] hrtimer: interrupt took 40731 ns
[  899.317987][T11769] tipc: Started in network mode
[  899.325431][T11769] tipc: Node identity b649e5a21bb6, cluster identity 4711
[  899.401951][T11769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  899.507851][T11770] syzkaller0: entered promiscuous mode
[  899.549998][T11770] syzkaller0: entered allmulticast mode
[  899.594202][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  899.621759][T11752] netlink: 'syz.1.1512': attribute type 5 has an invalid length.
[  899.654485][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1512'.
[  899.689413][T11769] tipc: Resetting bearer <eth:syzkaller0>
[  899.737372][T11768] tipc: Resetting bearer <eth:syzkaller0>
[  899.841719][T11768] tipc: Disabling bearer <eth:syzkaller0>
[  901.168207][   T23] usb 2-1: usb_control_msg returned -71
[  901.188950][   T23] usbtmc 2-1:16.0: can't read capabilities
[  901.243641][   T23] usb 2-1: USB disconnect, device number 26
[  901.330855][T11780] siw: device registration error -23
[  902.823212][T11792] netlink: 'syz.3.1526': attribute type 1 has an invalid length.
[  902.831381][T11792] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1526'.
[  904.086759][T11803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  904.095062][T11803] syzkaller0: entered promiscuous mode
[  904.101808][T11803] syzkaller0: entered allmulticast mode
[  904.124741][T11803] tipc: Resetting bearer <eth:syzkaller0>
[  904.150725][T11800] tipc: Resetting bearer <eth:syzkaller0>
[  904.197123][T11800] tipc: Disabling bearer <eth:syzkaller0>
[  904.228268][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'.
[  906.605477][   T27] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  908.756469][T11832] netlink: 'syz.2.1538': attribute type 1 has an invalid length.
[  908.764402][T11832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1538'.
[  909.032292][T11826] siw: device registration error -23
[  909.316398][T10625] IPVS: starting estimator thread 0...
[  909.439071][T11840] IPVS: using max 18 ests per chain, 43200 per kthread
[  912.548630][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'.
[  912.616126][T11868] netlink: 'syz.2.1547': attribute type 1 has an invalid length.
[  912.642032][T11868] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1547'.
[  913.142753][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  913.178450][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1549'.
[  913.394189][   T23] usb 5-1: Using ep0 maxpacket: 8
[  913.429480][   T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  913.567488][   T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  913.754471][T11872] siw: device registration error -23
[  913.766247][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  913.787137][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  913.798445][   T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  913.814093][   T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  913.825561][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.351250][   T23] usb 5-1: usb_control_msg returned -32
[  914.363775][   T23] usbtmc 5-1:16.0: can't read capabilities
[  915.552158][T11874] usbtmc 5-1:16.0: usb_control_msg returned -32
[  915.735095][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'.
[  915.756916][T11870] netlink: 'syz.4.1544': attribute type 5 has an invalid length.
[  915.764937][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1544'.
[  915.793706][T11870] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  915.807670][T11870] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  915.819749][T11870] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  915.833700][T11870] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  915.850412][T11870] geneve2: entered promiscuous mode
[  915.858443][T11870] geneve2: entered allmulticast mode
[  915.949286][  T968] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  916.286254][  T968] usb 2-1: config 2 has an invalid interface number: 174 but max is 0
[  916.321412][  T968] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  916.451646][  T968] usb 2-1: config 2 has no interface number 0
[  916.465154][  T968] usb 2-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping
[  916.659765][  T968] usb 2-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  916.694480][  T968] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  916.707850][  T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.728164][  T968] usb 2-1: Product: syz
[  917.523501][  T968] usb 2-1: Manufacturer: syz
[  917.528285][  T968] usb 2-1: SerialNumber: syz
[  918.761260][T11886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  919.082375][  T968] usb 2-1: probing VID:PID(0424:012C)   
[  919.093683][  T968] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  919.182721][  T968] vub300: probe of 2-1:2.174 failed with error -22
[  919.230619][  T968] usb 2-1: USB disconnect, device number 27
[  919.234708][T11909] netlink: 'syz.3.1557': attribute type 1 has an invalid length.
[  919.258607][T11909] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1557'.
[  919.416547][T10616] usb 5-1: USB disconnect, device number 4
[  919.516509][T11912] siw: device registration error -23
[  919.946313][T11920] IPVS: rr: FWM 3 0x00000003 - no destination available
[  921.176863][   T27] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  921.605139][   T27] usb 3-1: Using ep0 maxpacket: 32
[  921.674965][   T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  921.719735][   T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  921.781921][   T27] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  921.833836][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.038113][   T27] usb 3-1: config 0 descriptor??
[  922.214098][  T968] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  922.301089][ T5831] usb 3-1: USB disconnect, device number 30
[  922.445137][  T968] usb 2-1: config 2 has an invalid interface number: 174 but max is 0
[  922.456493][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'.
[  922.470510][  T968] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  922.484567][  T968] usb 2-1: config 2 has no interface number 0
[  922.491081][  T968] usb 2-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping
[  922.505368][  T968] usb 2-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  922.581357][  T968] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  923.111972][  T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.221779][  T968] usb 2-1: Product: syz
[  923.241663][  T968] usb 2-1: Manufacturer: syz
[  923.246602][  T968] usb 2-1: SerialNumber: syz
[  923.257081][T11931] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  923.561019][T11947] netlink: 'syz.4.1569': attribute type 1 has an invalid length.
[  923.682533][T11947] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1569'.
[  923.689396][  T968] usb 2-1: probing VID:PID(0424:012C)   
[  923.699816][  T968] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  923.700514][   T27] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  923.726125][  T968] vub300: probe of 2-1:2.174 failed with error -22
[  923.749171][  T968] usb 2-1: USB disconnect, device number 28
[  923.967242][   T27] usb 4-1: Using ep0 maxpacket: 8
[  924.131360][   T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  924.140382][   T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  924.150702][   T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  924.160723][   T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  924.170725][   T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  924.973094][   T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  924.982226][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.303918][   T27] usb 4-1: usb_control_msg returned -32
[  925.346284][   T27] usbtmc 4-1:16.0: can't read capabilities
[  926.677170][T11971] IPVS: rr: FWM 3 0x00000003 - no destination available
[  927.067318][  T968] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  927.356118][  T968] usb 3-1: Using ep0 maxpacket: 32
[  927.369710][  T787] usb 4-1: USB disconnect, device number 37
[  927.405514][  T968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.451720][  T968] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  927.484059][  T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.517540][  T968] usb 3-1: config 0 descriptor??
[  927.549734][  T968] dw2102: su3000_identify_state
[  927.704358][  T968] dvb-usb: found a 'TeVii S662' in warm state.
[  927.735632][  T968] dw2102: su3000_power_ctrl: 1, initialized 0
[  927.752119][  T968] dvb-usb: bulk message failed: -22 (2/0)
[  927.778985][  T968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  927.805280][T11983] netlink: 'syz.4.1580': attribute type 1 has an invalid length.
[  927.805569][  T968] dvbdev: DVB: registering new adapter (TeVii S662)
[  927.813110][T11983] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1580'.
[  927.858569][  T968] usb 3-1: media controller created
[  927.869220][  T968] dvb-usb: bulk message failed: -22 (6/0)
[  927.875038][  T968] dw2102: i2c transfer failed.
[  927.890628][  T968] dvb-usb: bulk message failed: -22 (6/0)
[  927.910977][  T968] dw2102: i2c transfer failed.
[  927.921074][  T968] dvb-usb: bulk message failed: -22 (6/0)
[  927.950065][  T968] dw2102: i2c transfer failed.
[  927.965546][  T968] dvb-usb: bulk message failed: -22 (6/0)
[  927.976329][  T968] dw2102: i2c transfer failed.
[  927.981214][  T968] dvb-usb: bulk message failed: -22 (6/0)
[  927.990635][  T968] dw2102: i2c transfer failed.
[  927.995522][  T968] dvb-usb: bulk message failed: -22 (6/0)
[  928.012674][  T968] dw2102: i2c transfer failed.
[  928.029796][  T968] dvb-usb: MAC address: 02:02:02:02:02:02
[  928.102222][  T968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  928.221272][  T968] dvb-usb: bulk message failed: -22 (3/0)
[  928.238843][  T968] dw2102: command 0x0e transfer failed.
[  928.247132][  T968] dvb-usb: bulk message failed: -22 (3/0)
[  928.253388][  T968] dw2102: command 0x0e transfer failed.
[  928.715870][  T968] dvb-usb: bulk message failed: -22 (3/0)
[  928.773035][  T968] dw2102: command 0x0e transfer failed.
[  929.569509][  T968] dvb-usb: bulk message failed: -22 (3/0)
[  929.579690][  T968] dw2102: command 0x0e transfer failed.
[  929.585417][  T968] dvb-usb: bulk message failed: -22 (1/0)
[  929.592410][  T968] dw2102: command 0x51 transfer failed.
[  929.598066][  T968] dvb-usb: bulk message failed: -22 (5/0)
[  929.653732][  T968] dw2102: i2c probe for address 0x68 failed.
[  929.660204][  T968] dvb-usb: bulk message failed: -22 (5/0)
[  929.673000][  T968] dw2102: i2c probe for address 0x69 failed.
[  929.679822][  T968] dvb-usb: bulk message failed: -22 (5/0)
[  929.685827][  T968] dw2102: i2c probe for address 0x6a failed.
[  929.700441][  T968] dw2102: probing for demodulator failed. Is the external power switched on?
[  929.710900][  T968] dvb-usb: no frontend was attached by 'TeVii S662'
[  930.184358][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'.
[  930.328150][  T968] rc_core: IR keymap rc-tt-1500 not found
[  930.466906][  T968] Registered IR keymap rc-empty
[  930.704175][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  930.735012][  T968] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  930.764136][  T968] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9
[  930.934710][  T968] dvb-usb: schedule remote query interval to 250 msecs.
[  930.938294][T12015] netlink: 'syz.1.1590': attribute type 1 has an invalid length.
[  930.952981][T12015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1590'.
[  930.966154][  T968] dw2102: su3000_power_ctrl: 0, initialized 1
[  930.977165][  T968] dvb-usb: TeVii S662 successfully initialized and connected.
[  931.003904][  T968] usb 3-1: USB disconnect, device number 31
[  931.055653][ T5831] usb 5-1: Using ep0 maxpacket: 8
[  931.148849][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  931.258675][  T968] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  931.320684][   T27] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  931.348634][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  931.362931][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  931.378113][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  931.430714][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  931.474312][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  931.739455][  T968] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  931.914159][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.262957][   T27] usb 4-1: Using ep0 maxpacket: 32
[  932.276915][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.315216][   T27] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  932.339922][ T5831] usb 5-1: usb_control_msg returned -32
[  932.347614][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.354483][ T5831] usbtmc 5-1:16.0: can't read capabilities
[  932.574338][   T27] usb 4-1: config 0 descriptor??
[  932.614052][   T27] dw2102: su3000_identify_state
[  932.619632][   T27] dvb-usb: found a 'TeVii S662' in warm state.
[  932.628178][   T27] dw2102: su3000_power_ctrl: 1, initialized 0
[  932.643355][   T27] dvb-usb: bulk message failed: -22 (2/0)
[  933.337680][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  933.592032][   T27] dvbdev: DVB: registering new adapter (TeVii S662)
[  933.625378][   T27] usb 4-1: media controller created
[  933.644709][   T27] dvb-usb: bulk message failed: -22 (6/0)
[  933.663079][   T27] dw2102: i2c transfer failed.
[  933.668913][   T27] dvb-usb: bulk message failed: -22 (6/0)
[  933.836217][   T27] dw2102: i2c transfer failed.
[  933.841276][   T27] dvb-usb: bulk message failed: -22 (6/0)
[  933.849622][   T27] dw2102: i2c transfer failed.
[  933.860760][   T27] dvb-usb: bulk message failed: -22 (6/0)
[  934.475946][   T27] dw2102: i2c transfer failed.
[  934.486806][   T27] dvb-usb: bulk message failed: -22 (6/0)
[  934.492618][   T27] dw2102: i2c transfer failed.
[  934.501255][T12034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  934.508981][   T27] dvb-usb: bulk message failed: -22 (6/0)
[  934.522620][   T27] dw2102: i2c transfer failed.
[  934.527427][   T27] dvb-usb: MAC address: 02:02:02:02:02:02
[  934.682725][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  935.333218][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  935.339644][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  935.358546][   T27] dvb-usb: bulk message failed: -22 (3/0)
[  935.364436][   T27] dw2102: command 0x0e transfer failed.
[  935.370028][   T27] dvb-usb: bulk message failed: -22 (3/0)
[  936.314707][   T27] dw2102: command 0x0e transfer failed.
[  936.331841][T10625] usb 5-1: USB disconnect, device number 5
[  936.485164][T12051] netlink: 'syz.2.1600': attribute type 1 has an invalid length.
[  936.496730][T12051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1600'.
[  936.720748][   T27] dvb-usb: bulk message failed: -22 (3/0)
[  936.728018][   T27] dw2102: command 0x0e transfer failed.
[  936.734149][   T27] dvb-usb: bulk message failed: -22 (3/0)
[  936.740038][   T27] dw2102: command 0x0e transfer failed.
[  936.746336][   T27] dvb-usb: bulk message failed: -22 (1/0)
[  936.752220][   T27] dw2102: command 0x51 transfer failed.
[  936.769724][   T27] dvb-usb: bulk message failed: -22 (5/0)
[  936.782643][   T27] dw2102: i2c probe for address 0x68 failed.
[  936.866003][   T27] dvb-usb: bulk message failed: -22 (5/0)
[  936.942716][   T27] dw2102: i2c probe for address 0x69 failed.
[  937.030666][   T27] dvb-usb: bulk message failed: -22 (5/0)
[  937.122701][   T27] dw2102: i2c probe for address 0x6a failed.
[  937.331142][   T27] dw2102: probing for demodulator failed. Is the external power switched on?
[  937.533163][T12057] sctp: [Deprecated]: syz.3.1602 (pid 12057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  937.533163][T12057] Use struct sctp_sack_info instead
[  937.789167][T12061] netlink: set zone limit has 8 unknown bytes
[  938.034962][   T27] dvb-usb: no frontend was attached by 'TeVii S662'
[  939.240275][T12072] infiniband syz2: set active
[  939.687778][T12072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  939.810669][   T23] ip6gretap0 speed is unknown, defaulting to 1000
[  939.900572][   T27] rc_core: IR keymap rc-tt-1500 not found
[  939.955438][   T27] Registered IR keymap rc-empty
[  940.675062][T12077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  940.912755][   T27] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  941.465087][   T27] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10
[  941.502122][   T27] dvb-usb: schedule remote query interval to 250 msecs.
[  941.550367][   T27] dw2102: su3000_power_ctrl: 0, initialized 1
[  941.621082][   T27] dvb-usb: TeVii S662 successfully initialized and connected.
[  941.650557][   T27] usb 4-1: USB disconnect, device number 38
[  942.706994][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'.
[  942.813850][   T27] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  943.981407][ T5831] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  944.290011][ T5831] usb 2-1: Using ep0 maxpacket: 8
[  944.299595][ T5831] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  944.310839][ T5831] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  944.504334][   T27] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  945.081562][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  945.092996][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  945.103159][ T5831] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  945.117873][ T5831] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  945.127179][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.378414][   T27] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  946.394016][   T27] usb 3-1: config 2 has no interface number 0
[  946.406072][   T27] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping
[  946.545837][   T27] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  948.412093][   T27] usb 3-1: string descriptor 0 read error: -71
[  948.494075][   T27] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  948.504994][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.537492][   T27] usb 3-1: can't set config #2, error -71
[  948.564521][   T27] usb 3-1: USB disconnect, device number 33
[  950.396641][T12135] IPVS: rr: FWM 3 0x00000003 - no destination available
[  951.634683][ T5831] usb 2-1: can't set config #16, error -110
[  952.692913][T10625] usb 2-1: USB disconnect, device number 29
[  953.075837][T12156] sctp: [Deprecated]: syz.4.1630 (pid 12156) Use of struct sctp_assoc_value in delayed_ack socket option.
[  953.075837][T12156] Use struct sctp_sack_info instead
[  953.366194][T12160] netlink: set zone limit has 8 unknown bytes
[  953.997654][T12159] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  953.997842][   T27] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  954.202180][   T27] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  954.246435][   T27] usb 3-1: config 2 has no interface number 0
[  954.285711][   T27] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping
[  954.315893][   T27] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  955.836280][   T27] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  955.846081][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.855576][   T27] usb 3-1: Product: syz
[  955.862349][   T27] usb 3-1: Manufacturer: syz
[  955.867109][   T27] usb 3-1: SerialNumber: syz
[  955.877334][T12154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  955.985260][T12175] IPVS: rr: FWM 3 0x00000003 - no destination available
[  956.723184][   T27] usb 3-1: probing VID:PID(0424:012C)   
[  956.745894][   T27] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  956.849180][   T27] vub300: probe of 3-1:2.174 failed with error -22
[  956.885759][   T27] usb 3-1: USB disconnect, device number 34
[  958.065832][T12193] sctp: [Deprecated]: syz.4.1640 (pid 12193) Use of struct sctp_assoc_value in delayed_ack socket option.
[  958.065832][T12193] Use struct sctp_sack_info instead
[  958.305791][T12197] netlink: set zone limit has 8 unknown bytes
[  960.101321][T10625] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  960.372074][T10625] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  960.521514][T10625] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00
[  960.575660][T10625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.626874][T10625] usb 5-1: config 0 descriptor??
[  961.106545][T10625] ntrig 0003:1B96:0010.0021: item fetching failed at offset 5/7
[  961.129742][T10625] ntrig 0003:1B96:0010.0021: parse failed
[  961.150401][T10625] ntrig: probe of 0003:1B96:0010.0021 failed with error -22
[  961.321266][T10625] usb 5-1: USB disconnect, device number 6
[  964.960653][T12245] sctp: [Deprecated]: syz.2.1652 (pid 12245) Use of struct sctp_assoc_value in delayed_ack socket option.
[  964.960653][T12245] Use struct sctp_sack_info instead
[  965.182351][T12251] netlink: set zone limit has 8 unknown bytes
[  967.082291][T12263] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  971.519427][T12300] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  972.467454][T12308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  972.482666][T12308] syzkaller0: entered promiscuous mode
[  972.488335][T12308] syzkaller0: entered allmulticast mode
[  972.544557][T12308] tipc: Resetting bearer <eth:syzkaller0>
[  972.569560][T12307] tipc: Resetting bearer <eth:syzkaller0>
[  972.834355][T12307] tipc: Disabling bearer <eth:syzkaller0>
[  977.711972][T12346] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  981.462825][T12376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  990.186754][T12446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  996.205232][T12495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  999.770919][T12511] fuse: Unknown parameter '0x0000000000000003'
[ 1000.523355][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1000.529852][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1002.465511][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'.
[ 1002.744551][T12542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1002.911518][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'.
[ 1002.921442][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'.
[ 1003.088255][T12545] netlink: 'syz.3.1728': attribute type 21 has an invalid length.
[ 1003.096251][T12545] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1728'.
[ 1003.108613][T12545] netlink: 'syz.3.1728': attribute type 5 has an invalid length.
[ 1003.116749][T12545] netlink: 'syz.3.1728': attribute type 6 has an invalid length.
[ 1003.124820][T12545] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1728'.
[ 1005.353688][T12558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1006.391763][T12566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1009.044444][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'.
[ 1009.182105][T12586] netlink: 'syz.2.1737': attribute type 21 has an invalid length.
[ 1009.191107][T12586] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1737'.
[ 1009.208103][T12586] netlink: 'syz.2.1737': attribute type 5 has an invalid length.
[ 1009.220054][T12586] netlink: 'syz.2.1737': attribute type 6 has an invalid length.
[ 1009.228189][T12586] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1737'.
[ 1011.484377][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'.
[ 1013.030006][T12608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1014.949911][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'.
[ 1015.166669][T12623] netlink: 'syz.4.1747': attribute type 21 has an invalid length.
[ 1015.174999][T12623] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1747'.
[ 1015.185500][T12623] netlink: 'syz.4.1747': attribute type 5 has an invalid length.
[ 1015.193580][T12623] netlink: 'syz.4.1747': attribute type 6 has an invalid length.
[ 1015.201848][T12623] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1747'.
[ 1017.958394][T12636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1017.989707][T12641] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1021.086083][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'.
[ 1021.297942][T12671] netlink: 'syz.3.1758': attribute type 21 has an invalid length.
[ 1021.306180][T12671] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1758'.
[ 1021.315562][T12671] netlink: 'syz.3.1758': attribute type 5 has an invalid length.
[ 1021.323724][T12671] netlink: 'syz.3.1758': attribute type 6 has an invalid length.
[ 1021.332213][T12671] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1758'.
[ 1021.936781][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[ 1029.476937][T12699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1029.492100][T12700] syzkaller0: entered promiscuous mode
[ 1029.500298][T12700] syzkaller0: entered allmulticast mode
[ 1029.530839][T12707] tipc: Resetting bearer <eth:syzkaller0>
[ 1029.549950][T12725] netlink: 'syz.2.1769': attribute type 21 has an invalid length.
[ 1029.569026][T12725] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1769'.
[ 1029.588017][T12725] netlink: 'syz.2.1769': attribute type 5 has an invalid length.
[ 1029.597434][T12725] netlink: 'syz.2.1769': attribute type 6 has an invalid length.
[ 1029.608910][T12725] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1769'.
[ 1029.627788][T12707] tipc: Resetting bearer <eth:syzkaller0>
[ 1029.740850][T12707] tipc: Disabling bearer <eth:syzkaller0>
[ 1032.167658][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'.
[ 1033.469910][T12752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1038.131620][T12778] netlink: 'syz.3.1781': attribute type 21 has an invalid length.
[ 1038.141908][T12778] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1781'.
[ 1038.152800][T12778] netlink: 'syz.3.1781': attribute type 5 has an invalid length.
[ 1038.161201][T12778] netlink: 'syz.3.1781': attribute type 6 has an invalid length.
[ 1038.169483][T12778] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1781'.
[ 1041.187288][T12807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1043.598434][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'.
[ 1045.680064][T12837] netlink: 'syz.4.1796': attribute type 21 has an invalid length.
[ 1045.688036][T12837] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1796'.
[ 1045.697224][T12837] netlink: 'syz.4.1796': attribute type 5 has an invalid length.
[ 1045.705327][T12837] netlink: 'syz.4.1796': attribute type 6 has an invalid length.
[ 1045.713471][T12837] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1796'.
[ 1048.821587][T12854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1052.146426][T12878] netlink: 'syz.1.1808': attribute type 21 has an invalid length.
[ 1052.154862][T12878] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1808'.
[ 1052.166904][T12878] netlink: 'syz.1.1808': attribute type 5 has an invalid length.
[ 1052.182091][T12878] netlink: 'syz.1.1808': attribute type 6 has an invalid length.
[ 1052.240693][T12878] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1808'.
[ 1054.819057][T12897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1055.442657][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'.
[ 1055.655904][T12908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1055.684521][T12908] syzkaller0: entered promiscuous mode
[ 1055.699307][T12908] syzkaller0: entered allmulticast mode
[ 1055.765921][T12908] tipc: Resetting bearer <eth:syzkaller0>
[ 1055.782810][T12906] tipc: Resetting bearer <eth:syzkaller0>
[ 1055.849343][T12906] tipc: Disabling bearer <eth:syzkaller0>
[ 1057.414667][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[ 1059.224164][T12931] siw: device registration error -23
[ 1059.490915][T12939] tipc: Started in network mode
[ 1059.499622][T12939] tipc: Node identity 8a5a7409eb55, cluster identity 4711
[ 1059.510585][T12939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1059.522530][T12939] syzkaller0: entered promiscuous mode
[ 1059.533313][T12939] syzkaller0: entered allmulticast mode
[ 1059.599563][T12939] tipc: Resetting bearer <eth:syzkaller0>
[ 1059.606227][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'.
[ 1059.642066][T12938] tipc: Resetting bearer <eth:syzkaller0>
[ 1059.745203][T12938] tipc: Disabling bearer <eth:syzkaller0>
[ 1060.293750][  T968] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1060.367927][T12955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1060.550534][  T968] usb 4-1: Using ep0 maxpacket: 8
[ 1060.569223][  T968] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1060.586366][  T968] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1060.613439][  T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1060.655842][  T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1060.687225][  T968] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1060.721624][  T968] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1060.753571][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.223976][  T968] usb 4-1: usb_control_msg returned -32
[ 1061.229658][  T968] usbtmc 4-1:16.0: can't read capabilities
[ 1062.089074][T12948] usbtmc 4-1:16.0: usb_control_msg returned -32
[ 1062.089403][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'.
[ 1062.109539][T12946] netlink: 'syz.3.1823': attribute type 5 has an invalid length.
[ 1062.117958][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'.
[ 1062.134493][T12946] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 1062.143677][T12946] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 1062.152890][T12946] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 1062.161907][T12946] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 1062.170885][T12946] geneve2: entered promiscuous mode
[ 1062.176484][T12946] geneve2: entered allmulticast mode
[ 1062.571997][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'.
[ 1065.134336][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'.
[ 1065.231172][  T968] usb 4-1: USB disconnect, device number 39
[ 1066.156864][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1066.163392][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1066.923885][T12984] siw: device registration error -23
[ 1069.986197][T13005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1071.160413][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'.
[ 1072.847672][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'.
[ 1073.122430][   T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1073.518392][   T23] usb 5-1: Using ep0 maxpacket: 8
[ 1079.234514][   T23] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1079.246783][   T23] usb 5-1: can't read configurations, error -71
[ 1079.671447][T13062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1083.001191][T13084] netlink: 'syz.3.1859': attribute type 21 has an invalid length.
[ 1083.009243][T13084] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1859'.
[ 1083.029021][T13084] netlink: 'syz.3.1859': attribute type 5 has an invalid length.
[ 1083.040574][T13084] netlink: 'syz.3.1859': attribute type 6 has an invalid length.
[ 1083.049382][T13084] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1859'.
[ 1086.846788][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'.
[ 1087.095329][T13106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1088.431370][T10625] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1088.464565][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'.
[ 1088.816284][T10625] usb 4-1: Using ep0 maxpacket: 8
[ 1092.290063][T10625] usb 4-1: device descriptor read/all, error -71
[ 1092.833335][T13137] netlink: 'syz.2.1871': attribute type 21 has an invalid length.
[ 1092.841563][T13137] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1871'.
[ 1092.851385][T13137] netlink: 'syz.2.1871': attribute type 5 has an invalid length.
[ 1092.859594][T13137] netlink: 'syz.2.1871': attribute type 6 has an invalid length.
[ 1092.867606][T13137] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1871'.
[ 1094.130227][T13144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1094.466477][T13147] syzkaller0: entered promiscuous mode
[ 1094.481959][T13147] syzkaller0: entered allmulticast mode
[ 1095.402489][T13150] siw: device registration error -23
[ 1098.601462][T13166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1099.067463][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[ 1100.287276][T13183] netlink: 'syz.4.1883': attribute type 21 has an invalid length.
[ 1100.295650][T13183] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1883'.
[ 1100.306157][T13183] netlink: 'syz.4.1883': attribute type 5 has an invalid length.
[ 1100.314330][T13183] netlink: 'syz.4.1883': attribute type 6 has an invalid length.
[ 1100.322568][T13183] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1883'.
[ 1100.566541][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'.
[ 1102.115335][T10625] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1102.126416][T13197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1102.511007][T10625] usb 3-1: Using ep0 maxpacket: 8
[ 1103.637677][T13202] siw: device registration error -23
[ 1103.692468][T10625] usb 3-1: device descriptor read/all, error -71
[ 1105.097211][T13213] syzkaller0: entered promiscuous mode
[ 1105.113309][T13213] syzkaller0: entered allmulticast mode
[ 1108.309578][T13218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1110.075226][T13236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1110.428251][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'.
[ 1110.481220][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'.
[ 1111.277367][ T5878] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1112.292889][ T5878] usb 3-1: Using ep0 maxpacket: 8
[ 1112.333821][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1112.343021][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1112.355018][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1112.412795][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1112.446943][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1112.573773][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1112.635907][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.715586][T13263] netlink: 'syz.4.1901': attribute type 21 has an invalid length.
[ 1112.724532][T13263] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1901'.
[ 1112.734806][T13263] netlink: 'syz.4.1901': attribute type 5 has an invalid length.
[ 1112.743072][T13263] netlink: 'syz.4.1901': attribute type 6 has an invalid length.
[ 1112.750936][T13263] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1901'.
[ 1113.247186][ T5878] usb 3-1: usb_control_msg returned -32
[ 1113.253700][ T5878] usbtmc 3-1:16.0: can't read capabilities
[ 1113.785724][T13267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1113.850440][T13260] siw: device registration error -23
[ 1117.748108][T13286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1118.308937][ T5831] usb 3-1: USB disconnect, device number 37
[ 1118.486257][T13293] syzkaller0: entered promiscuous mode
[ 1118.502575][T13293] syzkaller0: entered allmulticast mode
[ 1122.554897][T13307] netlink: 'syz.2.1911': attribute type 21 has an invalid length.
[ 1122.564159][T13307] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1911'.
[ 1122.573926][T13307] netlink: 'syz.2.1911': attribute type 5 has an invalid length.
[ 1122.582898][T13307] netlink: 'syz.2.1911': attribute type 6 has an invalid length.
[ 1122.597109][T13307] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1911'.
[ 1122.622916][T13311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1124.158228][T13323] infiniband syz2: set active
[ 1124.405361][T13323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1124.500815][  T968] ip6gretap0 speed is unknown, defaulting to 1000
[ 1125.514443][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'.
[ 1125.608938][T13317] siw: device registration error -23
[ 1126.345955][  T968] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1126.928316][  T968] usb 3-1: Using ep0 maxpacket: 8
[ 1126.936938][  T968] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1126.949083][  T968] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1126.963076][  T968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1127.007308][  T968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1127.035329][  T968] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1127.067717][  T968] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1127.091919][  T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.420895][  T968] usb 3-1: usb_control_msg returned -32
[ 1127.441496][  T968] usbtmc 3-1:16.0: can't read capabilities
[ 1128.728665][T13355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1129.044704][  T968] usb 3-1: USB disconnect, device number 38
[ 1129.332302][T13358] syzkaller0: entered promiscuous mode
[ 1129.337962][T13358] syzkaller0: entered allmulticast mode
[ 1132.630414][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1132.639367][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1135.605865][T13376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1135.717055][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'.
[ 1135.736477][T13388] infiniband syz2: set active
[ 1135.761043][T13388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1135.861887][   T23] ip6gretap0 speed is unknown, defaulting to 1000
[ 1137.365413][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'.
[ 1138.190819][T13413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1139.257769][T10616] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1140.252165][T10616] usb 3-1: Using ep0 maxpacket: 8
[ 1140.627619][T13431] netlink: 'syz.1.1939': attribute type 21 has an invalid length.
[ 1140.635920][T13431] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1939'.
[ 1140.646511][T13431] netlink: 'syz.1.1939': attribute type 5 has an invalid length.
[ 1140.654528][T13431] netlink: 'syz.1.1939': attribute type 6 has an invalid length.
[ 1140.662604][T13431] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1939'.
[ 1141.535882][T13436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1141.636596][T13427] siw: device registration error -23
[ 1142.017529][T10616] usb 3-1: device descriptor read/all, error -71
[ 1144.121753][T13459] infiniband syz2: set active
[ 1144.128416][T13459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1144.144292][   T23] ip6gretap0 speed is unknown, defaulting to 1000
[ 1145.253358][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'.
[ 1146.318562][T13469] netlink: 'syz.3.1948': attribute type 21 has an invalid length.
[ 1146.326801][T13469] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1948'.
[ 1146.336675][T13469] netlink: 'syz.3.1948': attribute type 5 has an invalid length.
[ 1146.344878][T13469] netlink: 'syz.3.1948': attribute type 6 has an invalid length.
[ 1146.352869][T13469] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1948'.
[ 1147.599175][T13475] siw: device registration error -23
[ 1147.655640][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'.
[ 1148.331170][T10616] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1149.122069][T10616] usb 2-1: Using ep0 maxpacket: 8
[ 1150.095289][T13502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1150.276295][T10616] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1150.479843][T10616] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1150.504621][T10616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1150.526333][T10616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1150.684695][T10616] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1150.698235][T10616] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1150.707418][T10616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.194281][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'.
[ 1152.134572][T13514] netlink: 'syz.4.1958': attribute type 21 has an invalid length.
[ 1152.143190][T13514] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1958'.
[ 1152.156719][T13514] netlink: 'syz.4.1958': attribute type 5 has an invalid length.
[ 1152.167404][T13514] netlink: 'syz.4.1958': attribute type 6 has an invalid length.
[ 1152.179977][T13514] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1958'.
[ 1153.543176][T10616] usb 2-1: can't set config #16, error -71
[ 1153.587488][T10616] usb 2-1: USB disconnect, device number 30
[ 1156.644220][T13537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1156.824034][T13529] siw: device registration error -23
[ 1159.328174][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'.
[ 1159.641528][T10616] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1159.844823][T10616] usb 2-1: Using ep0 maxpacket: 8
[ 1159.873166][T10616] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1159.909171][T10616] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1159.995523][T10616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1160.065622][T10616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1160.222374][T10616] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1160.249180][T10616] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1160.299153][T10616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.596181][T10616] usb 2-1: usb_control_msg returned -32
[ 1160.648539][T10616] usbtmc 2-1:16.0: can't read capabilities
[ 1161.646093][T13576] netlink: 'syz.4.1973': attribute type 1 has an invalid length.
[ 1161.654360][T13576] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1973'.
[ 1161.935292][T13578] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1162.935861][T10616] usb 2-1: USB disconnect, device number 31
[ 1163.742001][T13591] overlayfs: missing 'lowerdir'
[ 1163.886987][T13595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1979'.
[ 1164.872480][T13602] netlink: 'syz.2.1981': attribute type 21 has an invalid length.
[ 1164.880635][T13602] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1981'.
[ 1164.889927][T13602] netlink: 'syz.2.1981': attribute type 5 has an invalid length.
[ 1164.897889][T13602] netlink: 'syz.2.1981': attribute type 6 has an invalid length.
[ 1164.905989][T13602] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1981'.
[ 1165.607099][T13609] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[ 1165.642493][T13609] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1983'.
[ 1167.300534][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'.
[ 1167.476880][T13611] siw: device registration error -23
[ 1167.811807][T13627] infiniband syz2: set active
[ 1168.532055][T13627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1168.630233][  T968] ip6gretap0 speed is unknown, defaulting to 1000
[ 1168.975020][T13632] infiniband syz2: set active
[ 1168.984602][T13632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1169.003171][T10626] ip6gretap0 speed is unknown, defaulting to 1000
[ 1169.209663][  T968] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1169.402096][  T968] usb 4-1: Using ep0 maxpacket: 8
[ 1169.485111][  T968] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1169.495796][  T968] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1169.506043][  T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1169.516463][  T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1169.527251][  T968] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1169.542059][  T968] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1169.551380][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1170.027708][  T968] usb 4-1: usb_control_msg returned -32
[ 1170.043909][  T968] usbtmc 4-1:16.0: can't read capabilities
[ 1171.405891][  T968] usb 4-1: USB disconnect, device number 42
[ 1172.791090][T13646] netlink: 'syz.4.1992': attribute type 21 has an invalid length.
[ 1172.799154][T13646] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1992'.
[ 1172.808475][T13646] netlink: 'syz.4.1992': attribute type 5 has an invalid length.
[ 1172.816546][T13646] netlink: 'syz.4.1992': attribute type 6 has an invalid length.
[ 1172.824543][T13646] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1992'.
[ 1173.309612][T13660] netlink: 'syz.3.1994': attribute type 1 has an invalid length.
[ 1173.317593][T13660] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1994'.
[ 1173.796201][T13673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1174.753706][T13668] siw: device registration error -23
[ 1177.050404][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'.
[ 1178.919386][T13707] netlink: 'syz.2.2005': attribute type 21 has an invalid length.
[ 1178.927957][T13707] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2005'.
[ 1178.937045][T13707] netlink: 'syz.2.2005': attribute type 5 has an invalid length.
[ 1178.944842][T13707] netlink: 'syz.2.2005': attribute type 6 has an invalid length.
[ 1178.952610][T13707] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2005'.
[ 1178.980024][   T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1179.063852][T13712] netlink: 'syz.3.2006': attribute type 1 has an invalid length.
[ 1179.077306][T13712] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2006'.
[ 1179.213403][   T23] usb 5-1: Using ep0 maxpacket: 8
[ 1180.653151][T13720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1182.173291][   T23] usb 5-1: device descriptor read/all, error -71
[ 1185.011801][T13751] netlink: 'syz.1.2016': attribute type 1 has an invalid length.
[ 1185.033946][T13751] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2016'.
[ 1185.570580][T13757] infiniband syz2: set active
[ 1186.309187][T13757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1186.418411][   T27] ip6gretap0 speed is unknown, defaulting to 1000
[ 1187.532271][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'.
[ 1189.447136][T10616] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1189.671773][T10616] usb 3-1: Using ep0 maxpacket: 8
[ 1189.679650][T10616] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1189.698194][T10616] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1189.732549][T10616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1189.789168][T10616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1189.974886][T10616] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1190.163930][T10616] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1190.173203][T10616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.494804][T13790] netlink: 'syz.3.2025': attribute type 21 has an invalid length.
[ 1192.502894][T13790] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2025'.
[ 1192.513189][T13790] netlink: 'syz.3.2025': attribute type 5 has an invalid length.
[ 1192.521275][T13790] netlink: 'syz.3.2025': attribute type 6 has an invalid length.
[ 1192.529238][T13790] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2025'.
[ 1192.724817][T13797] siw: device registration error -23
[ 1192.911163][T13800] netlink: 'syz.3.2027': attribute type 1 has an invalid length.
[ 1192.919212][T13800] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2027'.
[ 1194.189217][T13804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1195.127016][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'.
[ 1196.227934][T10616] usb 3-1: can't set config #16, error -110
[ 1196.276221][T10616] usb 3-1: USB disconnect, device number 41
[ 1197.523370][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1197.529949][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1199.022850][T13835] syzkaller0: entered promiscuous mode
[ 1199.028661][T13835] syzkaller0: entered allmulticast mode
[ 1199.045111][T13840] netlink: 'syz.4.2036': attribute type 21 has an invalid length.
[ 1199.053791][T13840] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2036'.
[ 1199.063690][T13840] netlink: 'syz.4.2036': attribute type 5 has an invalid length.
[ 1199.071656][T13840] netlink: 'syz.4.2036': attribute type 6 has an invalid length.
[ 1199.079757][T13840] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2036'.
[ 1199.290254][T13843] netlink: 'syz.1.2037': attribute type 1 has an invalid length.
[ 1199.347733][T13843] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2037'.
[ 1202.299032][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'.
[ 1203.320568][T13859] siw: device registration error -23
[ 1204.953502][T13848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1205.761502][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'.
[ 1207.717203][T10626] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1207.920423][T10626] usb 3-1: Using ep0 maxpacket: 8
[ 1207.952209][T10626] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1207.998602][T10626] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1208.030675][T10626] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1208.107755][T10626] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1208.134436][T10626] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1208.199016][T10626] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1208.222264][T10626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.672627][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'.
[ 1209.520878][T10626] usb 3-1: usb_control_msg returned -71
[ 1209.535557][T10626] usbtmc 3-1:16.0: can't read capabilities
[ 1209.588419][T10626] usb 3-1: USB disconnect, device number 42
[ 1210.287387][T13909] siw: device registration error -23
[ 1212.244485][T13912] infiniband syz2: set active
[ 1212.282423][T13912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1212.298356][T10616] ip6gretap0 speed is unknown, defaulting to 1000
[ 1216.679410][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'.
[ 1218.195142][T10616] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1218.788167][T13956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1218.988176][T10616] usb 4-1: Using ep0 maxpacket: 8
[ 1219.119511][T13962] netlink: 'syz.4.2063': attribute type 21 has an invalid length.
[ 1219.127668][T13962] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2063'.
[ 1219.146045][T13962] netlink: 'syz.4.2063': attribute type 5 has an invalid length.
[ 1219.154028][T13962] netlink: 'syz.4.2063': attribute type 6 has an invalid length.
[ 1219.164141][T13962] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2063'.
[ 1219.307719][T10616] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1219.476625][T10616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1219.586412][T10616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1219.690800][T10616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1219.728620][T10616] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1219.791338][T10616] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1219.825808][T10616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1222.092605][T10616] usb 4-1: can't set config #16, error -71
[ 1222.104408][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'.
[ 1222.123019][T10616] usb 4-1: USB disconnect, device number 43
[ 1223.550692][T10616] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1224.028140][T10616] usb 4-1: Using ep0 maxpacket: 32
[ 1224.102416][T10616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1224.134158][T10616] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1224.160464][T10616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.233171][T10616] usb 4-1: config 0 descriptor??
[ 1224.278911][T10616] dw2102: su3000_identify_state
[ 1224.283939][T10616] dvb-usb: found a 'TeVii S662' in warm state.
[ 1224.330554][T10616] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1224.336735][T10616] dvb-usb: bulk message failed: -22 (2/0)
[ 1224.374635][T10616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1224.422531][T10616] dvbdev: DVB: registering new adapter (TeVii S662)
[ 1224.442149][T10616] usb 4-1: media controller created
[ 1224.469200][T10616] dvb-usb: bulk message failed: -22 (6/0)
[ 1224.492405][T10616] dw2102: i2c transfer failed.
[ 1224.722381][T10616] dvb-usb: bulk message failed: -22 (6/0)
[ 1224.729123][T10616] dw2102: i2c transfer failed.
[ 1224.734642][T10616] dvb-usb: bulk message failed: -22 (6/0)
[ 1224.752253][T10616] dw2102: i2c transfer failed.
[ 1224.757245][T10616] dvb-usb: bulk message failed: -22 (6/0)
[ 1224.763136][T10616] dw2102: i2c transfer failed.
[ 1224.768087][T10616] dvb-usb: bulk message failed: -22 (6/0)
[ 1225.586730][T10616] dw2102: i2c transfer failed.
[ 1225.591638][T10616] dvb-usb: bulk message failed: -22 (6/0)
[ 1225.597561][T10616] dw2102: i2c transfer failed.
[ 1225.602392][T10616] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1225.654169][T10616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1225.724992][T10616] dvb-usb: bulk message failed: -22 (3/0)
[ 1226.351295][T13994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1226.488054][T10616] dw2102: command 0x0e transfer failed.
[ 1226.493852][T10616] dvb-usb: bulk message failed: -22 (3/0)
[ 1226.539848][T10616] dw2102: command 0x0e transfer failed.
[ 1226.616838][T13999] syzkaller0: entered promiscuous mode
[ 1226.632086][T13999] syzkaller0: entered allmulticast mode
[ 1226.886338][T10616] dvb-usb: bulk message failed: -22 (3/0)
[ 1226.892951][T10616] dw2102: command 0x0e transfer failed.
[ 1226.965071][T10616] dvb-usb: bulk message failed: -22 (3/0)
[ 1226.990590][T10616] dw2102: command 0x0e transfer failed.
[ 1227.009995][T10616] dvb-usb: bulk message failed: -22 (1/0)
[ 1227.022904][T10616] dw2102: command 0x51 transfer failed.
[ 1227.032388][T10616] dvb-usb: bulk message failed: -22 (5/0)
[ 1227.066988][T10616] dw2102: i2c probe for address 0x68 failed.
[ 1227.305838][T10616] dvb-usb: bulk message failed: -22 (5/0)
[ 1227.311658][T10616] dw2102: i2c probe for address 0x69 failed.
[ 1227.354758][T10616] dvb-usb: bulk message failed: -22 (5/0)
[ 1227.431891][T10616] dw2102: i2c probe for address 0x6a failed.
[ 1227.453534][T10616] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1227.462832][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'.
[ 1227.477228][T10616] dvb-usb: no frontend was attached by 'TeVii S662'
[ 1227.763604][T10616] rc_core: IR keymap rc-tt-1500 not found
[ 1227.769900][T10616] Registered IR keymap rc-empty
[ 1228.593646][T10616] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1228.640658][T10616] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11
[ 1228.661639][T10616] dvb-usb: schedule remote query interval to 250 msecs.
[ 1228.676782][T10616] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1228.698358][T10616] dvb-usb: TeVii S662 successfully initialized and connected.
[ 1228.748457][T10616] usb 4-1: USB disconnect, device number 44
[ 1228.896486][T10616] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[ 1229.098462][    T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1229.387129][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1229.469831][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1229.505678][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1229.578492][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1229.591529][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1229.602311][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1229.619506][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1229.629350][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.975310][    T9] usb 3-1: usb_control_msg returned -32
[ 1229.983904][    T9] usbtmc 3-1:16.0: can't read capabilities
[ 1230.910370][T14008] usbtmc 3-1:16.0: usb_control_msg returned -32
[ 1231.880089][T14017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2079'.
[ 1231.916759][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'.
[ 1231.928693][T14018] netlink: 'syz.2.2077': attribute type 5 has an invalid length.
[ 1231.939261][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2077'.
[ 1231.980999][T14018] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 1231.990596][T14018] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 1232.034092][T14018] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 1232.048620][T14018] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 1232.058122][T14018] geneve2: entered promiscuous mode
[ 1232.072547][T14018] geneve2: entered allmulticast mode
[ 1232.956544][    T9] usb 3-1: USB disconnect, device number 43
[ 1234.046665][T14038] netlink: 'syz.4.2083': attribute type 21 has an invalid length.
[ 1234.057337][T14038] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2083'.
[ 1234.068042][T14038] netlink: 'syz.4.2083': attribute type 5 has an invalid length.
[ 1234.076352][T14038] netlink: 'syz.4.2083': attribute type 6 has an invalid length.
[ 1234.262307][T14038] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2083'.
[ 1234.392902][T14043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1235.877463][ T5878] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1236.261325][ T5878] usb 3-1: Using ep0 maxpacket: 32
[ 1236.279422][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1236.295604][ T5878] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1236.304888][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.320986][ T5878] usb 3-1: config 0 descriptor??
[ 1236.330941][ T5878] dw2102: su3000_identify_state
[ 1236.342769][ T5878] dvb-usb: found a 'TeVii S662' in warm state.
[ 1236.351717][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1236.358529][ T5878] dvb-usb: bulk message failed: -22 (2/0)
[ 1236.370507][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1236.389597][ T5878] dvbdev: DVB: registering new adapter (TeVii S662)
[ 1236.396427][ T5878] usb 3-1: media controller created
[ 1236.402058][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[ 1236.408859][ T5878] dw2102: i2c transfer failed.
[ 1236.413886][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[ 1236.419891][ T5878] dw2102: i2c transfer failed.
[ 1236.425098][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[ 1236.431339][ T5878] dw2102: i2c transfer failed.
[ 1236.436702][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[ 1236.443344][ T5878] dw2102: i2c transfer failed.
[ 1236.448903][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[ 1236.455098][ T5878] dw2102: i2c transfer failed.
[ 1236.461459][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[ 1236.467523][ T5878] dw2102: i2c transfer failed.
[ 1236.472837][ T5878] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1236.523942][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1236.942676][ T5878] dvb-usb: bulk message failed: -22 (3/0)
[ 1236.948872][ T5878] dw2102: command 0x0e transfer failed.
[ 1236.956839][ T5878] dvb-usb: bulk message failed: -22 (3/0)
[ 1236.962644][ T5878] dw2102: command 0x0e transfer failed.
[ 1237.298090][T14064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2090'.
[ 1237.330167][ T5878] dvb-usb: bulk message failed: -22 (3/0)
[ 1237.336897][ T5878] dw2102: command 0x0e transfer failed.
[ 1237.386597][ T5878] dvb-usb: bulk message failed: -22 (3/0)
[ 1237.392659][ T5878] dw2102: command 0x0e transfer failed.
[ 1237.450394][ T5878] dvb-usb: bulk message failed: -22 (1/0)
[ 1237.458568][ T5878] dw2102: command 0x51 transfer failed.
[ 1237.490093][ T5878] dvb-usb: bulk message failed: -22 (5/0)
[ 1237.496598][ T5878] dw2102: i2c probe for address 0x68 failed.
[ 1237.503187][ T5878] dvb-usb: bulk message failed: -22 (5/0)
[ 1237.534037][ T5878] dw2102: i2c probe for address 0x69 failed.
[ 1237.544225][ T5878] dvb-usb: bulk message failed: -22 (5/0)
[ 1237.552786][ T5878] dw2102: i2c probe for address 0x6a failed.
[ 1237.586775][ T5878] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1237.598308][ T5878] dvb-usb: no frontend was attached by 'TeVii S662'
[ 1238.174868][ T5878] rc_core: IR keymap rc-tt-1500 not found
[ 1238.180674][ T5878] Registered IR keymap rc-empty
[ 1238.202585][ T5878] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1238.244567][ T5878] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12
[ 1238.280611][ T5878] dvb-usb: schedule remote query interval to 250 msecs.
[ 1238.307477][ T5878] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1238.331288][ T5878] dvb-usb: TeVii S662 successfully initialized and connected.
[ 1238.385969][ T5878] usb 3-1: USB disconnect, device number 44
[ 1238.512099][ T5878] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[ 1238.590077][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'.
[ 1239.618085][ T5878] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1239.910463][ T5878] usb 3-1: Using ep0 maxpacket: 8
[ 1240.232515][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1240.330355][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1240.420512][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1240.606225][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1240.699768][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1240.815416][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1240.877335][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.329196][ T5878] usb 3-1: usb_control_msg returned -32
[ 1241.334887][ T5878] usbtmc 3-1:16.0: can't read capabilities
[ 1241.975496][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'.
[ 1242.387089][T14094] usbtmc 3-1:16.0: usb_control_msg returned -32
[ 1242.430179][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'.
[ 1242.453826][T14082] netlink: 'syz.2.2093': attribute type 5 has an invalid length.
[ 1242.467053][T14082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2093'.
[ 1243.369727][T14098] netlink: 'syz.4.2097': attribute type 21 has an invalid length.
[ 1243.378574][T14098] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2097'.
[ 1243.389939][T14098] netlink: 'syz.4.2097': attribute type 5 has an invalid length.
[ 1243.398145][T14098] netlink: 'syz.4.2097': attribute type 6 has an invalid length.
[ 1243.406259][T14098] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2097'.
[ 1244.429196][ T5831] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1244.831825][ T5831] usb 5-1: Using ep0 maxpacket: 32
[ 1245.027623][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.091596][ T5831] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1245.111318][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.057654][ T5831] usb 5-1: config 0 descriptor??
[ 1246.066001][T10616] usb 3-1: USB disconnect, device number 45
[ 1246.077685][ T5831] dw2102: su3000_identify_state
[ 1246.085089][ T5831] dvb-usb: found a 'TeVii S662' in warm state.
[ 1246.092146][ T5831] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1246.099007][ T5831] dvb-usb: bulk message failed: -22 (2/0)
[ 1246.130091][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1246.147691][ T5831] dvbdev: DVB: registering new adapter (TeVii S662)
[ 1246.154563][ T5831] usb 5-1: media controller created
[ 1246.159860][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1246.180879][ T5831] dw2102: i2c transfer failed.
[ 1246.188082][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1246.198888][ T5831] dw2102: i2c transfer failed.
[ 1246.206103][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1246.211977][ T5831] dw2102: i2c transfer failed.
[ 1246.234444][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1246.245190][ T5831] dw2102: i2c transfer failed.
[ 1246.270056][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1246.275889][ T5831] dw2102: i2c transfer failed.
[ 1246.286248][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1246.307299][ T5831] dw2102: i2c transfer failed.
[ 1246.315411][ T5831] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1246.315445][T14108] dvb-usb: bulk message failed: -22 (4/0)
[ 1246.339517][T14108] dw2102: i2c transfer failed.
[ 1246.370517][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1246.599691][ T5831] dvb-usb: bulk message failed: -22 (3/0)
[ 1246.623827][ T5831] dw2102: command 0x0e transfer failed.
[ 1246.634099][ T5831] dvb-usb: bulk message failed: -22 (3/0)
[ 1246.668379][ T5831] dw2102: command 0x0e transfer failed.
[ 1247.024894][ T5831] dvb-usb: bulk message failed: -22 (3/0)
[ 1247.041151][ T5831] dw2102: command 0x0e transfer failed.
[ 1247.063949][ T5831] dvb-usb: bulk message failed: -22 (3/0)
[ 1247.096413][ T5831] dw2102: command 0x0e transfer failed.
[ 1247.148998][ T5831] dvb-usb: bulk message failed: -22 (1/0)
[ 1247.201857][ T5831] dw2102: command 0x51 transfer failed.
[ 1247.234441][ T5831] dvb-usb: bulk message failed: -22 (5/0)
[ 1247.259146][ T5831] dw2102: i2c probe for address 0x68 failed.
[ 1247.284221][ T5831] dvb-usb: bulk message failed: -22 (5/0)
[ 1247.317302][ T5831] dw2102: i2c probe for address 0x69 failed.
[ 1247.329945][ T5831] dvb-usb: bulk message failed: -22 (5/0)
[ 1247.357968][ T5831] dw2102: i2c probe for address 0x6a failed.
[ 1247.400778][ T5831] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1247.421664][ T5831] dvb-usb: no frontend was attached by 'TeVii S662'
[ 1248.106391][ T5831] rc_core: IR keymap rc-tt-1500 not found
[ 1248.115680][ T5831] Registered IR keymap rc-empty
[ 1248.179548][ T5831] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 1248.246613][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'.
[ 1248.577444][ T5831] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13
[ 1248.609693][ T5831] dvb-usb: schedule remote query interval to 250 msecs.
[ 1248.617832][ T5831] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1248.645695][ T5831] dvb-usb: TeVii S662 successfully initialized and connected.
[ 1248.683768][ T5831] usb 5-1: USB disconnect, device number 11
[ 1249.056639][T14142] netlink: 'syz.3.2109': attribute type 21 has an invalid length.
[ 1249.064894][T14142] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2109'.
[ 1249.075428][T14142] netlink: 'syz.3.2109': attribute type 5 has an invalid length.
[ 1249.084151][T14142] netlink: 'syz.3.2109': attribute type 6 has an invalid length.
[ 1249.092727][T14142] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2109'.
[ 1249.994931][ T5831] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[ 1254.545317][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'.
[ 1256.124458][T14172] overlayfs: missing 'lowerdir'
[ 1256.364358][T14171] syzkaller0: entered promiscuous mode
[ 1256.370952][T14171] syzkaller0: entered allmulticast mode
[ 1257.074714][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'.
[ 1263.211704][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1263.218321][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1264.293071][T14212] netlink: 'syz.4.2127': attribute type 21 has an invalid length.
[ 1264.320056][T14212] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2127'.
[ 1264.340354][T14212] netlink: 'syz.4.2127': attribute type 5 has an invalid length.
[ 1264.351495][T14212] netlink: 'syz.4.2127': attribute type 6 has an invalid length.
[ 1264.361036][T14212] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2127'.
[ 1265.169654][T14227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1265.799263][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'.
[ 1266.900936][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'.
[ 1266.910126][T14239] netlink: 'syz.3.2128': attribute type 5 has an invalid length.
[ 1266.918248][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2128'.
[ 1268.424470][T14251] overlayfs: missing 'lowerdir'
[ 1269.948008][T14255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1270.296993][T14261] netlink: 'syz.4.2139': attribute type 21 has an invalid length.
[ 1270.312764][T14261] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2139'.
[ 1270.322439][T14261] netlink: 'syz.4.2139': attribute type 5 has an invalid length.
[ 1270.330297][T14261] netlink: 'syz.4.2139': attribute type 6 has an invalid length.
[ 1270.338476][T14261] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2139'.
[ 1275.118003][T14294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1276.540576][T14302] siw: device registration error -23
[ 1277.335178][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'.
[ 1278.512444][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'.
[ 1278.528155][T14323] netlink: 'syz.2.2154': attribute type 5 has an invalid length.
[ 1278.573209][T14323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2154'.
[ 1280.831957][T14336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1282.439553][T14348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2162'.
[ 1283.505965][T14343] siw: device registration error -23
[ 1285.285501][T14370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1288.142776][T14385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1291.915981][T14414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2180'.
[ 1293.684632][T14429] infiniband syz2: set active
[ 1294.392534][T14429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1294.488410][  T787] ip6gretap0 speed is unknown, defaulting to 1000
[ 1294.827664][T14428] syzkaller0: entered promiscuous mode
[ 1294.833306][T14428] syzkaller0: entered allmulticast mode
[ 1295.684537][T14436] infiniband syz2: set active
[ 1295.696004][T14436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1300.444394][    T9] ip6gretap0 speed is unknown, defaulting to 1000
[ 1300.475402][T14448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1300.728293][T14455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2192'.
[ 1301.026402][T14459] overlayfs: missing 'lowerdir'
[ 1304.324795][T14471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1304.478791][T14470] netlink: 'syz.1.2195': attribute type 21 has an invalid length.
[ 1304.487722][T14470] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2195'.
[ 1304.497452][T14470] netlink: 'syz.1.2195': attribute type 5 has an invalid length.
[ 1304.519996][T14470] netlink: 'syz.1.2195': attribute type 6 has an invalid length.
[ 1304.528076][T14470] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2195'.
[ 1304.711506][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'.
[ 1304.761197][T14480] sctp: [Deprecated]: syz.1.2198 (pid 14480) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1304.761197][T14480] Use struct sctp_sack_info instead
[ 1305.081713][T14485] netlink: set zone limit has 8 unknown bytes
[ 1305.653029][T14483] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1306.152376][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1306.840707][T14491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1307.139948][    T9] usb 4-1: device descriptor read/64, error -71
[ 1307.439291][    T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1307.593763][T14500] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[ 1307.678219][    T9] usb 4-1: device descriptor read/64, error -71
[ 1308.586937][T14500] syzkaller0: entered promiscuous mode
[ 1308.592763][T14500] syzkaller0: entered allmulticast mode
[ 1308.636763][    T9] usb usb4-port1: attempt power cycle
[ 1309.213896][    T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1310.754996][    T9] usb 4-1: device descriptor read/8, error -71
[ 1314.984396][T14522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1315.086451][T14526] netlink: 'syz.1.2206': attribute type 21 has an invalid length.
[ 1315.115093][T14526] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2206'.
[ 1315.124225][T14526] netlink: 'syz.1.2206': attribute type 5 has an invalid length.
[ 1315.137073][T14526] netlink: 'syz.1.2206': attribute type 6 has an invalid length.
[ 1315.145020][T14526] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2206'.
[ 1317.213865][T14543] overlayfs: missing 'lowerdir'
[ 1317.222571][T14540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1318.537716][T14556] sctp: [Deprecated]: syz.1.2215 (pid 14556) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1318.537716][T14556] Use struct sctp_sack_info instead
[ 1318.812330][T14562] netlink: set zone limit has 8 unknown bytes
[ 1318.961397][T14560] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1318.987135][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'.
[ 1320.917024][T14571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1321.447507][T14580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1321.470988][T10626] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1321.540899][T14579] netlink: 'syz.4.2218': attribute type 21 has an invalid length.
[ 1321.549059][T14579] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2218'.
[ 1321.574560][T14579] netlink: 'syz.4.2218': attribute type 5 has an invalid length.
[ 1321.583443][T14579] netlink: 'syz.4.2218': attribute type 6 has an invalid length.
[ 1321.591423][T14579] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2218'.
[ 1322.064593][T10626] usb 3-1: device descriptor read/64, error -71
[ 1322.363282][T10626] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1328.361061][T10626] usb 3-1: device descriptor read/64, error -110
[ 1328.532600][T10626] usb usb3-port1: attempt power cycle
[ 1329.883919][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1329.890279][T14618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1329.988184][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1330.186273][T14625] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1331.151151][T10626] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1331.185185][T10626] usb 3-1: device descriptor read/8, error -32
[ 1331.370030][T14630] netlink: 'syz.4.2230': attribute type 21 has an invalid length.
[ 1331.378478][T14630] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2230'.
[ 1331.388640][T14630] netlink: 'syz.4.2230': attribute type 5 has an invalid length.
[ 1331.397502][T14630] netlink: 'syz.4.2230': attribute type 6 has an invalid length.
[ 1333.275591][T14630] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2230'.
[ 1333.343204][T10626] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1333.387296][T10626] usb 3-1: device descriptor read/8, error -32
[ 1333.553672][T10626] usb usb3-port1: unable to enumerate USB device
[ 1336.913678][T10533] bond0: (slave syz_tun): Releasing backup interface
[ 1337.880936][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.934124][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1339.187370][T14663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1339.581823][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.592991][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1340.585514][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1340.629557][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1340.653093][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1340.685325][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1340.717388][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1340.744288][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1340.861118][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.886124][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1340.887619][ T8766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1340.908936][ T8766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1340.918999][ T8766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1340.926428][T14676] netlink: 'syz.1.2242': attribute type 21 has an invalid length.
[ 1340.946310][T14676] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2242'.
[ 1340.956359][T14676] netlink: 'syz.1.2242': attribute type 5 has an invalid length.
[ 1340.990040][T14681] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2243'.
[ 1340.990140][ T8766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1341.029127][ T8766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1341.043829][ T8766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1341.260254][T14676] netlink: 'syz.1.2242': attribute type 6 has an invalid length.
[ 1341.287771][T14676] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2242'.
[ 1341.363211][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.392541][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1341.469916][T14671] ip6gretap0 speed is unknown, defaulting to 1000
[ 1342.993799][ T3479] tipc: Left network mode
[ 1343.436329][ T5797] Bluetooth: hci2: command tx timeout
[ 1343.451091][ T3479] infiniband syz2: set down
[ 1343.885309][  T787] ip6gretap0 speed is unknown, defaulting to 1000
[ 1344.006465][T14671] lo speed is unknown, defaulting to 1000
[ 1346.132443][ T5797] Bluetooth: hci2: command tx timeout
[ 1346.152836][ T5831] infiniband syz2: ib_query_port failed (-19)
[ 1346.260104][ T3454] smc: removing ib device syz2
[ 1346.275343][T14713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1347.110937][T14671] chnl_net:caif_netlink_parms(): no params data found
[ 1348.309511][ T5797] Bluetooth: hci2: command tx timeout
[ 1349.795510][T14734] netlink: 'syz.4.2252': attribute type 21 has an invalid length.
[ 1349.812004][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2252'.
[ 1350.278299][T14734] netlink: 'syz.4.2252': attribute type 5 has an invalid length.
[ 1350.295605][T14734] netlink: 'syz.4.2252': attribute type 6 has an invalid length.
[ 1350.312149][T14734] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2252'.
[ 1350.560330][ T5797] Bluetooth: hci2: command tx timeout
[ 1352.044634][T14671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1352.106961][T14671] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1352.130633][T14671] bridge_slave_0: entered allmulticast mode
[ 1353.079453][T14671] bridge_slave_0: entered promiscuous mode
[ 1353.105026][T14671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1353.136224][T14671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1353.175599][T14671] bridge_slave_1: entered allmulticast mode
[ 1353.200328][T14671] bridge_slave_1: entered promiscuous mode
[ 1353.304133][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1353.340293][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1354.849472][T14671] team0: Port device team_slave_0 added
[ 1354.882428][T14671] team0: Port device team_slave_1 added
[ 1355.217544][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1355.242811][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1355.377911][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1355.541105][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1355.600810][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1355.707312][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1356.985121][T14671] hsr_slave_0: entered promiscuous mode
[ 1357.015684][T14671] hsr_slave_1: entered promiscuous mode
[ 1357.056758][T14809] loop3: detected capacity change from 0 to 1024
[ 1357.117316][T14671] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1357.139838][T14671] Cannot create hsr debugfs directory
[ 1360.328601][ T3479] IPVS: stopping master sync thread 5997 ...
[ 1360.698969][T14838] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2272'.
[ 1362.847221][ T3479] hsr_slave_0: left promiscuous mode
[ 1362.869161][ T3479] hsr_slave_1: left promiscuous mode
[ 1362.890566][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1362.922022][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.949990][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1362.960853][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.991736][ T3479] bridge_slave_1: left allmulticast mode
[ 1363.301531][ T3479] bridge_slave_1: left promiscuous mode
[ 1363.606693][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1363.651451][ T3479] bridge_slave_0: left allmulticast mode
[ 1363.657197][ T3479] bridge_slave_0: left promiscuous mode
[ 1363.696308][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1365.312467][T14878] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1366.107588][ T3479] veth1_macvtap: left promiscuous mode
[ 1366.115704][ T3479] veth0_macvtap: left promiscuous mode
[ 1366.121871][ T3479] veth1_vlan: left promiscuous mode
[ 1366.127320][ T3479] veth0_vlan: left promiscuous mode
[ 1366.234401][T14884] sctp: [Deprecated]: syz.4.2281 (pid 14884) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1366.234401][T14884] Use struct sctp_sack_info instead
[ 1366.374008][T14886] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1366.496473][T14887] netlink: set zone limit has 8 unknown bytes
[ 1367.187153][ T3479] bond1 (unregistering): Released all slaves
[ 1368.414606][ T3479] team_slave_1 (unregistering): left promiscuous mode
[ 1368.424824][ T3479] team_slave_1 (unregistering): left allmulticast mode
[ 1368.440822][ T3479] team0 (unregistering): Port device team_slave_1 removed
[ 1368.497772][ T3479] team_slave_0 (unregistering): left promiscuous mode
[ 1368.506424][ T3479] team_slave_0 (unregistering): left allmulticast mode
[ 1368.514506][ T3479] team0 (unregistering): Port device team_slave_0 removed
[ 1368.572482][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1368.581887][ T3479] bond_slave_1 (unregistering): left promiscuous mode
[ 1368.588932][ T3479] bond_slave_1 (unregistering): left allmulticast mode
[ 1368.645207][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1368.655234][ T3479] bond_slave_0 (unregistering): left promiscuous mode
[ 1368.662057][ T3479] bond_slave_0 (unregistering): left allmulticast mode
[ 1369.548303][ T3479] bond0 (unregistering): Released all slaves
[ 1370.419564][T14671] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1371.419857][T14886] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1371.421252][    T9] lo speed is unknown, defaulting to 1000
[ 1371.443991][T14671] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1371.663260][T14911] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2288'.
[ 1372.755286][T14671] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1373.209569][T14671] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1374.101359][ T3479] IPVS: stop unused estimator thread 0...
[ 1374.111033][T14671] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1374.161504][T14671] 8021q: adding VLAN 0 to HW filter on device team0
[ 1374.215063][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1374.222269][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1374.342782][T14266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.350009][T14266] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1375.885278][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1375.909301][T14964] loop1: detected capacity change from 0 to 1024
[ 1377.248640][T14978] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2297'.
[ 1377.448029][T14983] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1378.882138][T14999] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1380.116843][T14671] veth0_vlan: entered promiscuous mode
[ 1380.149622][T14671] veth1_vlan: entered promiscuous mode
[ 1380.358013][T14671] veth0_macvtap: entered promiscuous mode
[ 1380.387111][T14671] veth1_macvtap: entered promiscuous mode
[ 1380.449800][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.485523][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.515272][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.541616][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.577004][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1380.607288][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.648527][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.696114][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.747199][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.775384][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1380.979714][T14671] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.015654][T15019] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1381.038449][T14671] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.073159][T14671] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.110642][T14671] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.949293][T15031] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1382.701958][T14266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1382.766315][T14266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1382.836606][T14266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1382.845952][T14266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.049369][T15042] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1383.995777][T15049] sctp: [Deprecated]: syz.4.2310 (pid 15049) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1383.995777][T15049] Use struct sctp_sack_info instead
[ 1384.223791][T15055] netlink: set zone limit has 8 unknown bytes
[ 1385.662160][T15071] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1386.393455][T15081] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1387.295035][T15086] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2315'.
[ 1388.268922][T15100] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1389.405441][T15109] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1390.329599][T15114] sctp: [Deprecated]: syz.1.2322 (pid 15114) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1390.329599][T15114] Use struct sctp_sack_info instead
[ 1390.564381][T15117] netlink: set zone limit has 8 unknown bytes
[ 1391.969362][T15127] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1392.632518][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'.
[ 1393.536622][T15146] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1394.646503][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1394.687125][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1396.732156][T15162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1397.678065][T15184] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1401.646607][T15217] lo: entered promiscuous mode
[ 1401.652275][T15217] lo: entered allmulticast mode
[ 1401.660607][T15217] tunl0: entered promiscuous mode
[ 1401.665769][T15217] tunl0: entered allmulticast mode
[ 1401.675270][T15217] gre0: entered promiscuous mode
[ 1401.680551][T15217] gre0: entered allmulticast mode
[ 1401.689839][T15217] gretap0: entered promiscuous mode
[ 1401.695166][T15217] gretap0: entered allmulticast mode
[ 1401.703833][T15217] erspan0: entered promiscuous mode
[ 1401.709251][T15217] erspan0: entered allmulticast mode
[ 1401.717953][T15217] ip_vti0: entered promiscuous mode
[ 1401.723593][T15217] ip_vti0: entered allmulticast mode
[ 1401.733164][T15217] ip6_vti0: entered promiscuous mode
[ 1401.738900][T15217] ip6_vti0: entered allmulticast mode
[ 1401.748402][T15217] sit0: entered promiscuous mode
[ 1401.799872][T15217] sit0: entered allmulticast mode
[ 1401.808907][T15217] ip6tnl0: entered promiscuous mode
[ 1401.814320][T15217] ip6tnl0: entered allmulticast mode
[ 1401.823149][T15217] ip6gre0: entered promiscuous mode
[ 1401.828512][T15217] ip6gre0: entered allmulticast mode
[ 1401.838008][T15217] syz_tun: entered promiscuous mode
[ 1401.843371][T15217] syz_tun: entered allmulticast mode
[ 1401.852080][T15217] ip6gretap0: entered promiscuous mode
[ 1401.857723][T15217] ip6gretap0: entered allmulticast mode
[ 1401.866680][T15217] bridge0: entered promiscuous mode
[ 1401.872757][T15217] bridge0: entered allmulticast mode
[ 1401.881854][T15217] vcan0: entered promiscuous mode
[ 1401.887083][T15217] vcan0: entered allmulticast mode
[ 1401.895328][T15217] bond0: entered promiscuous mode
[ 1401.900537][T15217] bond_slave_0: entered promiscuous mode
[ 1401.907420][T15217] bond_slave_1: entered promiscuous mode
[ 1401.916093][T15217] bond0: entered allmulticast mode
[ 1401.921363][T15217] bond_slave_0: entered allmulticast mode
[ 1401.927469][T15217] bond_slave_1: entered allmulticast mode
[ 1401.938046][T15217] team0: entered promiscuous mode
[ 1401.943207][T15217] team_slave_0: entered promiscuous mode
[ 1401.949983][T15217] team_slave_1: entered promiscuous mode
[ 1401.956637][T15217] team0: entered allmulticast mode
[ 1401.962280][T15217] team_slave_0: entered allmulticast mode
[ 1401.968183][T15217] team_slave_1: entered allmulticast mode
[ 1401.980043][T15217] dummy0: entered promiscuous mode
[ 1401.985279][T15217] dummy0: entered allmulticast mode
[ 1401.994049][T15217] nlmon0: entered promiscuous mode
[ 1401.999327][T15217] nlmon0: entered allmulticast mode
[ 1402.189121][T15217] caif0: entered promiscuous mode
[ 1402.195335][T15217] caif0: entered allmulticast mode
[ 1402.201054][T15217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1403.347865][T15232] fuse: Unknown parameter '0x0000000000000003'
[ 1406.787477][T11730] bond0: (slave syz_tun): Releasing backup interface
[ 1406.859608][ T8766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1406.870701][ T8766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1406.880040][ T8766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1406.926637][ T8766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1406.941039][ T8766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1406.949508][ T8766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1406.962856][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1406.972282][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1406.979910][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1406.992379][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1407.000297][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1407.008470][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1407.283257][ T3533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1407.351912][ T3533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1408.543975][T15273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1409.339809][ T5797] Bluetooth: hci0: command tx timeout
[ 1409.340727][ T3533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1409.375421][ T3533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1409.634671][ T3533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1409.676620][ T3533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1410.299864][ T3533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.339928][ T3533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1410.374503][T15296] loop5: detected capacity change from 0 to 1024
[ 1411.523170][ T5797] Bluetooth: hci0: command tx timeout
[ 1413.090476][T15322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1413.208618][T15259] chnl_net:caif_netlink_parms(): no params data found
[ 1413.292218][ T3533] tipc: Left network mode
[ 1413.565122][T15331] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2361'.
[ 1413.725302][ T5797] Bluetooth: hci0: command tx timeout
[ 1414.358380][T15346] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2364'.
[ 1414.380042][T15259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1414.387307][T15259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1414.431440][T15259] bridge_slave_0: entered allmulticast mode
[ 1414.445630][T15259] bridge_slave_0: entered promiscuous mode
[ 1414.475842][T15259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1414.491962][T15259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1414.510573][T15259] bridge_slave_1: entered allmulticast mode
[ 1414.523011][T15259] bridge_slave_1: entered promiscuous mode
[ 1415.664284][T15259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1415.705661][T15259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1415.961649][ T5797] Bluetooth: hci0: command tx timeout
[ 1418.480616][T15259] team0: Port device team_slave_0 added
[ 1419.285507][T15378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1419.394343][T15259] team0: Port device team_slave_1 added
[ 1419.766558][T15387] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2371'.
[ 1420.208468][T15389] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2372'.
[ 1420.213920][T15259] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1420.246481][T15259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1420.313680][T15259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1420.364444][T15393] fuse: Unknown parameter '0x0000000000000003'
[ 1420.460977][T15259] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1420.479981][T15259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1420.550997][T15259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1421.941048][T15259] hsr_slave_0: entered promiscuous mode
[ 1422.151350][T15410] cgroup: fork rejected by pids controller in /syz5
[ 1422.309482][T15259] hsr_slave_1: entered promiscuous mode
[ 1422.327746][T15259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1423.014265][T15259] Cannot create hsr debugfs directory
[ 1423.216424][T15444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1425.205743][T15456] overlayfs: failed to resolve './file1': -2
[ 1425.609823][ T3533] hsr_slave_0: left promiscuous mode
[ 1425.710535][ T3533] hsr_slave_1: left promiscuous mode
[ 1425.821976][T15468] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2381'.
[ 1426.131836][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1426.235761][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1426.250598][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1426.298040][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1426.351883][ T3533] bridge_slave_1: left allmulticast mode
[ 1426.357579][ T3533] bridge_slave_1: left promiscuous mode
[ 1426.385634][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.431040][ T3533] bridge_slave_0: left allmulticast mode
[ 1426.450547][T15475] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2383'.
[ 1426.453826][ T3533] bridge_slave_0: left promiscuous mode
[ 1426.474755][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1429.726575][ T3533] veth1_macvtap: left promiscuous mode
[ 1429.732296][ T3533] veth0_macvtap: left promiscuous mode
[ 1429.738252][ T3533] veth1_vlan: left promiscuous mode
[ 1429.749190][ T3533] veth0_vlan: left promiscuous mode
[ 1430.450477][ T3533] bond3 (unregistering): Released all slaves
[ 1430.484126][ T3533] bond2 (unregistering): Released all slaves
[ 1430.516853][ T3533] bond1 (unregistering): Released all slaves
[ 1430.887446][T15491] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1431.245591][ T3533] team_slave_1 (unregistering): left promiscuous mode
[ 1431.253032][ T3533] team_slave_1 (unregistering): left allmulticast mode
[ 1431.266382][ T3533] team0 (unregistering): Port device team_slave_1 removed
[ 1431.321248][ T3533] team_slave_0 (unregistering): left promiscuous mode
[ 1431.328389][ T3533] team_slave_0 (unregistering): left allmulticast mode
[ 1431.339922][ T3533] team0 (unregistering): Port device team_slave_0 removed
[ 1431.399458][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1431.408679][ T3533] bond_slave_1 (unregistering): left promiscuous mode
[ 1431.415519][ T3533] bond_slave_1 (unregistering): left allmulticast mode
[ 1431.480857][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1431.490211][ T3533] bond_slave_0 (unregistering): left promiscuous mode
[ 1431.499825][ T3533] bond_slave_0 (unregistering): left allmulticast mode
[ 1432.184644][ T3533] bond0 (unregistering): Released all slaves
[ 1432.476050][T15481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1432.859783][T15500] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1434.230024][T15504] overlayfs: failed to resolve './file1': -2
[ 1435.248357][ T3533] IPVS: stop unused estimator thread 0...
[ 1435.486020][T15526] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1437.341247][T15537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1437.816041][T15259] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1437.845675][T15259] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1437.879263][T15259] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1437.896160][ T5878] IPVS: starting estimator thread 0...
[ 1437.935571][T15259] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1438.014422][T15547] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1438.076902][T15532] lo speed is unknown, defaulting to 1000
[ 1438.117729][T15532] lo speed is unknown, defaulting to 1000
[ 1438.154620][T15532] lo speed is unknown, defaulting to 1000
[ 1438.221521][T15532] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1438.277163][T15259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1438.314560][T15532] lo speed is unknown, defaulting to 1000
[ 1438.333997][T15259] 8021q: adding VLAN 0 to HW filter on device team0
[ 1438.346798][T15532] lo speed is unknown, defaulting to 1000
[ 1438.365023][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1438.372359][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1438.417914][T15532] lo speed is unknown, defaulting to 1000
[ 1438.446150][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1438.453395][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1438.496886][T15532] lo speed is unknown, defaulting to 1000
[ 1439.196588][T15259] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1439.385378][T15259] veth0_vlan: entered promiscuous mode
[ 1439.434977][T15259] veth1_vlan: entered promiscuous mode
[ 1439.538381][T15259] veth0_macvtap: entered promiscuous mode
[ 1439.559558][T15259] veth1_macvtap: entered promiscuous mode
[ 1439.594120][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1439.605565][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1439.622700][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1439.635057][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1439.917594][T15259] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1440.234053][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.259890][T15580] overlayfs: missing 'lowerdir'
[ 1440.269371][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.291202][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.312720][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.370866][T15259] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1440.421800][T15259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1440.441043][T15259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1440.465018][T15259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1440.495490][T15259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1440.504944][T15585] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[ 1440.668766][T15591] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2400'.
[ 1441.352040][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.376851][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1441.487101][T14632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.508696][T15599] fuse: Unknown parameter '0x0000000000000003'
[ 1441.539707][T14632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1443.508146][T15523] bond0: (slave syz_tun): Releasing backup interface
[ 1443.964933][T15618] overlayfs: missing 'lowerdir'
[ 1444.205933][T15607] siw: device registration error -23
[ 1444.501274][T15633] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1445.078398][ T8766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1445.091215][ T8766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1445.251979][ T8766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1445.261566][ T8766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1445.273729][ T8766] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1445.281240][ T8766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1445.637035][T15643] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2409'.
[ 1446.170411][T15636] lo speed is unknown, defaulting to 1000
[ 1447.577115][ T5797] Bluetooth: hci1: command tx timeout
[ 1447.959864][T15659] loop3: detected capacity change from 0 to 1024
[ 1448.812530][ T3454] tipc: Left network mode
[ 1449.168894][T15636] chnl_net:caif_netlink_parms(): no params data found
[ 1449.250142][ T5831] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1449.447152][T15677] sctp: [Deprecated]: syz.3.2417 (pid 15677) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1449.447152][T15677] Use struct sctp_sack_info instead
[ 1449.511034][ T5831] usb 5-1: Using ep0 maxpacket: 8
[ 1449.732912][ T5797] Bluetooth: hci1: command tx timeout
[ 1449.809398][ T5831] usb 5-1: config 9 has an invalid interface number: 211 but max is 0
[ 1450.137156][ T5831] usb 5-1: config 9 has no interface number 0
[ 1450.175550][ T5831] usb 5-1: config 9 interface 211 has no altsetting 0
[ 1450.224192][ T5831] usb 5-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=b6.1d
[ 1450.244037][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.252854][ T5831] usb 5-1: Product: syz
[ 1450.276651][ T5831] usb 5-1: Manufacturer: syz
[ 1450.281340][ T5831] usb 5-1: SerialNumber: syz
[ 1450.323543][T15682] netlink: set zone limit has 8 unknown bytes
[ 1450.594947][ T5831] usb 5-1: USB disconnect, device number 12
[ 1450.607810][ T5831] ==================================================================
[ 1450.616039][ T5831] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0
[ 1450.623783][ T5831] Read of size 8 at addr ffff88806a1b9898 by task kworker/0:4/5831
[ 1450.631891][ T5831] 
[ 1450.634268][ T5831] CPU: 0 PID: 5831 Comm: kworker/0:4 Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1450.642022][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1450.652117][ T5831] Workqueue: usb_hub_wq hub_event
[ 1450.657212][ T5831] Call Trace:
[ 1450.660528][ T5831]  <TASK>
[ 1450.663514][ T5831]  dump_stack_lvl+0x16c/0x230
[ 1450.668233][ T5831]  ? __lock_acquire+0x7c80/0x7c80
[ 1450.673296][ T5831]  ? show_regs_print_info+0x20/0x20
[ 1450.678536][ T5831]  ? load_image+0x3b0/0x3b0
[ 1450.683073][ T5831]  ? __virt_addr_valid+0x469/0x540
[ 1450.688228][ T5831]  print_report+0xac/0x220
[ 1450.692668][ T5831]  ? hdm_disconnect+0x10d/0x1c0
[ 1450.697537][ T5831]  kasan_report+0x117/0x150
[ 1450.702061][ T5831]  ? hdm_disconnect+0x10d/0x1c0
[ 1450.707000][ T5831]  hdm_disconnect+0x10d/0x1c0
[ 1450.711775][ T5831]  usb_unbind_interface+0x1f2/0x870
[ 1450.717198][ T5831]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1450.722958][ T5831]  ? usb_driver_release_interface+0x1c0/0x1c0
[ 1450.729145][ T5831]  device_release_driver_internal+0x4cb/0x7a0
[ 1450.735247][ T5831]  bus_remove_device+0x342/0x400
[ 1450.740207][ T5831]  device_del+0x50b/0x900
[ 1450.744641][ T5831]  ? mark_lock+0x94/0x320
[ 1450.748998][ T5831]  ? kill_device+0x160/0x160
[ 1450.753595][ T5831]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1450.759584][ T5831]  ? usb_disconnect+0x10b/0x8a0
[ 1450.764588][ T5831]  ? mutex_lock_nested+0x20/0x20
[ 1450.769551][ T5831]  ? _raw_spin_lock_irq+0xaf/0xe0
[ 1450.774626][ T5831]  usb_disable_device+0x3e9/0x8a0
[ 1450.779773][ T5831]  usb_disconnect+0x34c/0x8a0
[ 1450.784464][ T5831]  hub_event+0x1cef/0x49c0
[ 1450.788916][ T5831]  ? __lock_acquire+0x7c80/0x7c80
[ 1450.794088][ T5831]  ? verify_lock_unused+0x140/0x140
[ 1450.799311][ T5831]  ? hub_post_resume+0x120/0x120
[ 1450.804285][ T5831]  ? read_lock_is_recursive+0x20/0x20
[ 1450.810017][ T5831]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1450.815224][ T5831]  ? process_scheduled_works+0x957/0x15b0
[ 1450.821048][ T5831]  ? process_scheduled_works+0x957/0x15b0
[ 1450.826869][ T5831]  process_scheduled_works+0xa45/0x15b0
[ 1450.832456][ T5831]  ? assign_work+0x400/0x400
[ 1450.837074][ T5831]  ? assign_work+0x39e/0x400
[ 1450.841744][ T5831]  worker_thread+0xa55/0xfc0
[ 1450.846356][ T5831]  kthread+0x2fa/0x390
[ 1450.850428][ T5831]  ? pr_cont_work+0x560/0x560
[ 1450.855222][ T5831]  ? kthread_blkcg+0xd0/0xd0
[ 1450.859868][ T5831]  ret_from_fork+0x48/0x80
[ 1450.864325][ T5831]  ? kthread_blkcg+0xd0/0xd0
[ 1450.869037][ T5831]  ret_from_fork_asm+0x11/0x20
[ 1450.873839][ T5831]  </TASK>
[ 1450.876898][ T5831] 
[ 1450.879234][ T5831] Allocated by task 5831:
[ 1450.883828][ T5831]  kasan_set_track+0x4e/0x70
[ 1450.888542][ T5831]  __kasan_kmalloc+0x8f/0xa0
[ 1450.893172][ T5831]  hdm_probe+0x96/0x13e0
[ 1450.897515][ T5831]  usb_probe_interface+0x5a4/0xb00
[ 1450.902661][ T5831]  really_probe+0x25b/0xb40
[ 1450.907189][ T5831]  __driver_probe_device+0x18c/0x330
[ 1450.912506][ T5831]  driver_probe_device+0x4f/0x420
[ 1450.917755][ T5831]  __device_attach_driver+0x2ca/0x520
[ 1450.923160][ T5831]  bus_for_each_drv+0x24b/0x2d0
[ 1450.928015][ T5831]  __device_attach+0x2b5/0x400
[ 1450.932786][ T5831]  bus_probe_device+0x180/0x260
[ 1450.937722][ T5831]  device_add+0x85b/0xc20
[ 1450.942091][ T5831]  usb_set_configuration+0x1a79/0x20c0
[ 1450.947589][ T5831]  usb_generic_driver_probe+0x8d/0x150
[ 1450.953082][ T5831]  usb_probe_device+0x13d/0x280
[ 1450.958155][ T5831]  really_probe+0x25b/0xb40
[ 1450.962694][ T5831]  __driver_probe_device+0x18c/0x330
[ 1450.968032][ T5831]  driver_probe_device+0x4f/0x420
[ 1450.973091][ T5831]  __device_attach_driver+0x2ca/0x520
[ 1450.978492][ T5831]  bus_for_each_drv+0x24b/0x2d0
[ 1450.983358][ T5831]  __device_attach+0x2b5/0x400
[ 1450.988123][ T5831]  bus_probe_device+0x180/0x260
[ 1450.992974][ T5831]  device_add+0x85b/0xc20
[ 1450.997309][ T5831]  usb_new_device+0xa31/0x1630
[ 1451.002084][ T5831]  hub_event+0x2962/0x49c0
[ 1451.006513][ T5831]  process_scheduled_works+0xa45/0x15b0
[ 1451.012084][ T5831]  worker_thread+0xa55/0xfc0
[ 1451.016743][ T5831]  kthread+0x2fa/0x390
[ 1451.020822][ T5831]  ret_from_fork+0x48/0x80
[ 1451.025358][ T5831]  ret_from_fork_asm+0x11/0x20
[ 1451.030157][ T5831] 
[ 1451.032495][ T5831] Freed by task 5831:
[ 1451.036517][ T5831]  kasan_set_track+0x4e/0x70
[ 1451.041136][ T5831]  kasan_save_free_info+0x2e/0x50
[ 1451.046200][ T5831]  ____kasan_slab_free+0x126/0x1e0
[ 1451.051351][ T5831]  slab_free_freelist_hook+0x130/0x1b0
[ 1451.056945][ T5831]  __kmem_cache_free+0xba/0x1f0
[ 1451.062067][ T5831]  device_release+0x96/0x1c0
[ 1451.066754][ T5831]  kobject_put+0x221/0x470
[ 1451.071242][ T5831]  hdm_disconnect+0xf3/0x1c0
[ 1451.075973][ T5831]  usb_unbind_interface+0x1f2/0x870
[ 1451.081396][ T5831]  device_release_driver_internal+0x4cb/0x7a0
[ 1451.087565][ T5831]  bus_remove_device+0x342/0x400
[ 1451.092721][ T5831]  device_del+0x50b/0x900
[ 1451.097099][ T5831]  usb_disable_device+0x3e9/0x8a0
[ 1451.102240][ T5831]  usb_disconnect+0x34c/0x8a0
[ 1451.106959][ T5831]  hub_event+0x1cef/0x49c0
[ 1451.111397][ T5831]  process_scheduled_works+0xa45/0x15b0
[ 1451.117065][ T5831]  worker_thread+0xa55/0xfc0
[ 1451.122111][ T5831]  kthread+0x2fa/0x390
[ 1451.126189][ T5831]  ret_from_fork+0x48/0x80
[ 1451.130631][ T5831]  ret_from_fork_asm+0x11/0x20
[ 1451.135593][ T5831] 
[ 1451.137935][ T5831] The buggy address belongs to the object at ffff88806a1b8000
[ 1451.137935][ T5831]  which belongs to the cache kmalloc-8k of size 8192
[ 1451.152096][ T5831] The buggy address is located 6296 bytes inside of
[ 1451.152096][ T5831]  freed 8192-byte region [ffff88806a1b8000, ffff88806a1ba000)
[ 1451.166179][ T5831] 
[ 1451.168511][ T5831] The buggy address belongs to the physical page:
[ 1451.174969][ T5831] page:ffffea0001a86e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a1b8
[ 1451.185182][ T5831] head:ffffea0001a86e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1451.194141][ T5831] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1451.202132][ T5831] page_type: 0xffffffff()
[ 1451.206554][ T5831] raw: 00fff00000000840 ffff888017842280 dead000000000122 0000000000000000
[ 1451.215154][ T5831] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[ 1451.223738][ T5831] page dumped because: kasan: bad access detected
[ 1451.230160][ T5831] page_owner tracks the page as allocated
[ 1451.235892][ T5831] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5831, tgid 5831 (kworker/0:4), ts 1450569641404, free_ts 1443042054855
[ 1451.259624][ T5831]  post_alloc_hook+0x1cd/0x210
[ 1451.264421][ T5831]  get_page_from_freelist+0x195c/0x19f0
[ 1451.270022][ T5831]  __alloc_pages+0x1e3/0x460
[ 1451.274693][ T5831]  alloc_slab_page+0x5d/0x170
[ 1451.279388][ T5831]  new_slab+0x87/0x2e0
[ 1451.283485][ T5831]  ___slab_alloc+0xc6d/0x1300
[ 1451.288208][ T5831]  __kmem_cache_alloc_node+0x1a2/0x260
[ 1451.293701][ T5831]  kmalloc_trace+0x2a/0xe0
[ 1451.298141][ T5831]  hdm_probe+0x96/0x13e0
[ 1451.302394][ T5831]  usb_probe_interface+0x5a4/0xb00
[ 1451.307531][ T5831]  really_probe+0x25b/0xb40
[ 1451.312172][ T5831]  __driver_probe_device+0x18c/0x330
[ 1451.317493][ T5831]  driver_probe_device+0x4f/0x420
[ 1451.322548][ T5831]  __device_attach_driver+0x2ca/0x520
[ 1451.327941][ T5831]  bus_for_each_drv+0x24b/0x2d0
[ 1451.332817][ T5831]  __device_attach+0x2b5/0x400
[ 1451.337701][ T5831] page last free stack trace:
[ 1451.342427][ T5831]  free_unref_page_prepare+0x7ce/0x8e0
[ 1451.348072][ T5831]  free_unref_page+0x32/0x2e0
[ 1451.353079][ T5831]  vfree+0x1a6/0x320
[ 1451.357010][ T5831]  kcov_close+0x2b/0x50
[ 1451.361213][ T5831]  __fput+0x234/0x970
[ 1451.365218][ T5831]  task_work_run+0x1ce/0x250
[ 1451.369869][ T5831]  do_exit+0x90b/0x23c0
[ 1451.374038][ T5831]  do_group_exit+0x21b/0x2d0
[ 1451.378817][ T5831]  get_signal+0x12fc/0x1400
[ 1451.383328][ T5831]  arch_do_signal_or_restart+0x96/0x780
[ 1451.388912][ T5831]  exit_to_user_mode_loop+0x70/0x110
[ 1451.394204][ T5831]  exit_to_user_mode_prepare+0xf6/0x180
[ 1451.399758][ T5831]  syscall_exit_to_user_mode+0x1a/0x50
[ 1451.405244][ T5831]  do_syscall_64+0x61/0xb0
[ 1451.409787][ T5831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1451.415888][ T5831] 
[ 1451.418342][ T5831] Memory state around the buggy address:
[ 1451.423997][ T5831]  ffff88806a1b9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1451.432157][ T5831]  ffff88806a1b9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1451.440238][ T5831] >ffff88806a1b9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1451.448314][ T5831]                             ^
[ 1451.453261][ T5831]  ffff88806a1b9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1451.461418][ T5831]  ffff88806a1b9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1451.469574][ T5831] ==================================================================
[ 1451.477700][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1451.562602][ T5831] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1451.569990][ T5831] CPU: 0 PID: 5831 Comm: kworker/0:4 Not tainted syzkaller #0
[ 1451.577571][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1451.588116][ T5831] Workqueue: usb_hub_wq hub_event
[ 1451.593202][ T5831] Call Trace:
[ 1451.596516][ T5831]  <TASK>
[ 1451.599535][ T5831]  dump_stack_lvl+0x16c/0x230
[ 1451.604349][ T5831]  ? show_regs_print_info+0x20/0x20
[ 1451.609586][ T5831]  ? load_image+0x3b0/0x3b0
[ 1451.614162][ T5831]  panic+0x2c0/0x710
[ 1451.618222][ T5831]  ? bpf_jit_dump+0xd0/0xd0
[ 1451.622948][ T5831]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[ 1451.628951][ T5831]  ? _raw_spin_unlock+0x40/0x40
[ 1451.633948][ T5831]  ? print_memory_metadata+0x314/0x400
[ 1451.639478][ T5831]  ? hdm_disconnect+0x10d/0x1c0
[ 1451.644537][ T5831]  check_panic_on_warn+0x84/0xa0
[ 1451.649592][ T5831]  ? hdm_disconnect+0x10d/0x1c0
[ 1451.654539][ T5831]  end_report+0x6f/0x140
[ 1451.658899][ T5831]  kasan_report+0x128/0x150
[ 1451.663446][ T5831]  ? hdm_disconnect+0x10d/0x1c0
[ 1451.668371][ T5831]  hdm_disconnect+0x10d/0x1c0
[ 1451.673112][ T5831]  usb_unbind_interface+0x1f2/0x870
[ 1451.678477][ T5831]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1451.684259][ T5831]  ? usb_driver_release_interface+0x1c0/0x1c0
[ 1451.690384][ T5831]  device_release_driver_internal+0x4cb/0x7a0
[ 1451.696512][ T5831]  bus_remove_device+0x342/0x400
[ 1451.701496][ T5831]  device_del+0x50b/0x900
[ 1451.705871][ T5831]  ? mark_lock+0x94/0x320
[ 1451.710318][ T5831]  ? kill_device+0x160/0x160
[ 1451.714957][ T5831]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1451.720985][ T5831]  ? usb_disconnect+0x10b/0x8a0
[ 1451.726073][ T5831]  ? mutex_lock_nested+0x20/0x20
[ 1451.731057][ T5831]  ? _raw_spin_lock_irq+0xaf/0xe0
[ 1451.736144][ T5831]  usb_disable_device+0x3e9/0x8a0
[ 1451.741242][ T5831]  usb_disconnect+0x34c/0x8a0
[ 1451.745970][ T5831]  hub_event+0x1cef/0x49c0
[ 1451.750702][ T5831]  ? __lock_acquire+0x7c80/0x7c80
[ 1451.755790][ T5831]  ? verify_lock_unused+0x140/0x140
[ 1451.761076][ T5831]  ? hub_post_resume+0x120/0x120
[ 1451.766060][ T5831]  ? read_lock_is_recursive+0x20/0x20
[ 1451.771499][ T5831]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1451.776741][ T5831]  ? process_scheduled_works+0x957/0x15b0
[ 1451.782515][ T5831]  ? process_scheduled_works+0x957/0x15b0
[ 1451.788369][ T5831]  process_scheduled_works+0xa45/0x15b0
[ 1451.794068][ T5831]  ? assign_work+0x400/0x400
[ 1451.798712][ T5831]  ? assign_work+0x39e/0x400
[ 1451.803352][ T5831]  worker_thread+0xa55/0xfc0
[ 1451.808007][ T5831]  kthread+0x2fa/0x390
[ 1451.812106][ T5831]  ? pr_cont_work+0x560/0x560
[ 1451.816828][ T5831]  ? kthread_blkcg+0xd0/0xd0
[ 1451.821621][ T5831]  ret_from_fork+0x48/0x80
[ 1451.826074][ T5831]  ? kthread_blkcg+0xd0/0xd0
[ 1451.830694][ T5831]  ret_from_fork_asm+0x11/0x20
[ 1451.835593][ T5831]  </TASK>
[ 1451.839545][ T5831] Kernel Offset: disabled
[ 1451.843899][ T5831] Rebooting in 86400 seconds..