last executing test programs:

9.444006557s ago: executing program 1 (id=3226):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, 0x0, 0x0, 0x1000000000)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x26, 0xc, "88c85939e9cfc6ff71918879297beb01b412cb393d3a49d83009b409216eb3a70dcc"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65ce8338}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}, 0x1, 0x0, 0x0, 0x2400d050}, 0x88)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0)
syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0xa47, &(0x7f0000000b40)="$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")

8.276553767s ago: executing program 1 (id=3230):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)

8.097133147s ago: executing program 1 (id=3231):
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

4.5399006s ago: executing program 1 (id=3240):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a"], 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140))
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f00000000c0))

4.284947275s ago: executing program 2 (id=3244):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x54, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)

4.098764796s ago: executing program 0 (id=3245):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x24004880)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40)

4.024190811s ago: executing program 2 (id=3246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
write$bt_hci(r5, &(0x7f0000000180)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x101, 0x9}}}, 0x8)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0)

3.944181215s ago: executing program 0 (id=3247):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a"], 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, 0x0)
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x1)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x0, 0x1}, 0x10)

2.507491071s ago: executing program 0 (id=3250):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
sched_setscheduler(0x0, 0x1, 0x0)

2.506602301s ago: executing program 2 (id=3251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d50800044000000000080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x8000)

2.393273668s ago: executing program 3 (id=3252):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)

2.379111849s ago: executing program 2 (id=3253):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x101, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
fdatasync(r0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_PEC(r2, 0x708, 0xb8f7)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x4, 0x1cb, 0x12d61, 0x12d58}}, 0x44)

2.245507136s ago: executing program 3 (id=3254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, 0x0, 0x4804)

2.169790381s ago: executing program 2 (id=3255):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x24004880)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40)

2.01638383s ago: executing program 3 (id=3256):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x49)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x500, 0x4, 0x800d0040})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x4, 0x6, 0x0, 0x100, 0x6, 0x110022})
mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x2, 0x1)

1.810242393s ago: executing program 2 (id=3257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x13}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40040)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105c2, &(0x7f0000020b80)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000000400)="00da703b7ef8c18d37eced1d250000008094013037449b5a062f20d8020000003d02a6", 0x23)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)

1.743040947s ago: executing program 0 (id=3258):
userfaultfd(0x80001)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000800)

1.500223781s ago: executing program 0 (id=3259):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a"], 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, 0x0)
sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x1)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet_tcp_int(r8, 0x6, 0x2, 0x0, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x0, 0x1}, 0x10)

638.946852ms ago: executing program 3 (id=3260):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000000)

450.745634ms ago: executing program 3 (id=3261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d50800044000000000080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x8000)

348.34471ms ago: executing program 1 (id=3262):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)

263.613555ms ago: executing program 3 (id=3263):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x101, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
fdatasync(r0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_PEC(r2, 0x708, 0xb8f7)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x4, 0x1cb, 0x12d61, 0x12d58}}, 0x44)

197.607139ms ago: executing program 1 (id=3264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, 0x0, 0x4804)

0s ago: executing program 0 (id=3265):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x24004880)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40)

kernel console output (not intermixed with test programs):

r=0
[  679.757776][ T7459] usb 2-1: config 0 descriptor??
[  679.763840][T11260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  680.591221][ T7459] usbhid 2-1:0.0: can't add hid device: -71
[  680.600972][ T7459] usbhid: probe of 2-1:0.0 failed with error -71
[  680.610090][ T7459] usb 2-1: USB disconnect, device number 15
[  682.098402][T11295] binder: Unknown parameter '3ta4s'
[  682.893441][T11295] syz.3.1447 (11295) used greatest stack depth: 17864 bytes left
[  685.233504][ T7459] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  685.503819][ T7459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  685.528833][ T7459] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  685.556838][ T7459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.576018][ T7459] usb 1-1: config 0 descriptor??
[  685.596350][T11316] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  686.019134][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.026472][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.060664][ T7459] usbhid 1-1:0.0: can't add hid device: -71
[  686.071311][ T7459] usbhid: probe of 1-1:0.0 failed with error -71
[  686.091452][T11321] overlayfs: missing 'lowerdir'
[  686.101268][ T7459] usb 1-1: USB disconnect, device number 22
[  686.610309][T11327] binder: Unknown parameter '3ta4s'
[  690.264983][T11358] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  690.463732][ T5819] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  690.663685][T11359] ceph: No mds server is up or the cluster is laggy
[  690.693662][ T5819] usb 1-1: Using ep0 maxpacket: 32
[  690.696365][    T8] libceph: connect (1)[c::]:6789 error -101
[  690.711719][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0
[  690.925042][ T5819] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  690.934605][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.947937][ T5819] usb 1-1: Product: syz
[  690.955004][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  690.956137][ T5819] usb 1-1: Manufacturer: syz
[  690.966135][ T5819] usb 1-1: SerialNumber: syz
[  690.983891][ T5819] usb 1-1: config 0 descriptor??
[  690.998599][ T5819] gs_usb 1-1:0.0: Required endpoints not found
[  691.573559][    T8] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  691.765857][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  691.781876][    T8] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  691.791548][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.808068][    T8] usb 4-1: config 0 descriptor??
[  691.818224][T11364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  692.253791][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  692.264320][    T8] usbhid: probe of 4-1:0.0 failed with error -71
[  692.288745][    T8] usb 4-1: USB disconnect, device number 30
[  694.076485][    T8] usb 1-1: USB disconnect, device number 23
[  694.176424][T11391] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  694.894255][ T5784] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  694.920077][  T787] libceph: connect (1)[c::]:6789 error -101
[  694.931141][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  694.948745][  T787] libceph: connect (1)[c::]:6789 error -101
[  694.955970][T11393] ceph: No mds server is up or the cluster is laggy
[  694.975894][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  695.089747][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  695.153278][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  695.251490][ T5784] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  695.290901][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.330482][ T5784] usb 4-1: config 0 descriptor??
[  695.351848][ T5784] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  695.563538][ T7459] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  695.624257][T11411] QAT: failed to copy from user cfg_data.
[  695.759026][ T7459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  695.785476][ T7459] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  695.797433][ T7459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.810746][ T7459] usb 1-1: config 0 descriptor??
[  695.819616][T11407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  696.841824][ T7459] usbhid 1-1:0.0: can't add hid device: -71
[  696.858121][ T7459] usbhid: probe of 1-1:0.0 failed with error -71
[  696.885529][ T7459] usb 1-1: USB disconnect, device number 24
[  698.113728][ T5819] usb 4-1: USB disconnect, device number 31
[  702.713484][ T5858] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  702.915797][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  702.993316][ T5858] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  703.057465][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.089690][ T5858] usb 1-1: config 0 descriptor??
[  703.110906][T11468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  703.579077][ T5858] usbhid 1-1:0.0: can't add hid device: -71
[  703.615390][ T5858] usbhid: probe of 1-1:0.0 failed with error -71
[  703.650786][ T5858] usb 1-1: USB disconnect, device number 25
[  704.804747][T11496] overlay: Unknown parameter '/'
[  706.579218][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'.
[  706.588360][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'.
[  706.597464][T11514] netlink: 'syz.3.1513': attribute type 13 has an invalid length.
[  706.605448][T11514] netlink: 'syz.3.1513': attribute type 12 has an invalid length.
[  711.713377][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  711.933354][    T8] usb 3-1: Using ep0 maxpacket: 8
[  711.947056][    T8] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  711.970814][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.994707][    T8] usb 3-1: Product: syz
[  712.001316][    T8] usb 3-1: Manufacturer: syz
[  712.011658][    T8] usb 3-1: SerialNumber: syz
[  712.032657][    T8] usb 3-1: config 0 descriptor??
[  712.067770][    T8] option 3-1:0.0: GSM modem (1-port) converter detected
[  713.378184][  T787] usb 3-1: USB disconnect, device number 16
[  713.409775][  T787] option 3-1:0.0: device disconnected
[  714.204001][ T5839] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  714.453487][ T5839] usb 2-1: Using ep0 maxpacket: 32
[  714.552045][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0
[  714.760210][ T5839] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  714.826611][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.859888][ T5839] usb 2-1: Product: syz
[  714.875258][ T5839] usb 2-1: Manufacturer: syz
[  714.906826][ T5839] usb 2-1: SerialNumber: syz
[  714.989880][ T5839] usb 2-1: config 0 descriptor??
[  715.015806][ T5839] gs_usb 2-1:0.0: Required endpoints not found
[  717.151864][    T8] usb 2-1: USB disconnect, device number 16
[  719.323632][    T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  719.773734][    T8] usb 4-1: Using ep0 maxpacket: 32
[  719.842760][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  719.907699][    T8] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  720.008265][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.040658][    T8] usb 4-1: Product: syz
[  720.069491][    T8] usb 4-1: Manufacturer: syz
[  720.093575][    T8] usb 4-1: SerialNumber: syz
[  720.104552][    T8] usb 4-1: config 0 descriptor??
[  720.529756][    T8] gs_usb 4-1:0.0: Couldn't get device config: (err=-32)
[  720.539275][    T8] gs_usb: probe of 4-1:0.0 failed with error -32
[  722.062979][  T787] usb 4-1: USB disconnect, device number 32
[  722.195096][ T5839] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  722.394199][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  722.430771][ T5839] usb 3-1: config 0 interface 0 has no altsetting 0
[  722.462303][ T5839] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  722.472660][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.484129][ T5839] usb 3-1: Product: syz
[  722.488472][ T5839] usb 3-1: Manufacturer: syz
[  722.497560][ T5839] usb 3-1: SerialNumber: syz
[  722.541692][ T5839] usb 3-1: config 0 descriptor??
[  723.110620][ T5839] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  723.119108][ T5839] gs_usb: probe of 3-1:0.0 failed with error -121
[  724.049414][    T8] usb 3-1: USB disconnect, device number 17
[  724.543666][   T28] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  724.763583][   T28] usb 4-1: Using ep0 maxpacket: 8
[  724.862054][   T28] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  724.992347][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.021025][   T28] usb 4-1: Product: syz
[  725.038133][   T28] usb 4-1: Manufacturer: syz
[  725.042839][   T28] usb 4-1: SerialNumber: syz
[  725.165778][   T28] usb 4-1: config 0 descriptor??
[  725.187707][   T28] option 4-1:0.0: GSM modem (1-port) converter detected
[  725.643583][ T5819] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  725.863756][ T5819] usb 3-1: Using ep0 maxpacket: 32
[  725.890680][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0
[  726.135709][ T5819] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  726.242675][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.272815][ T5819] usb 3-1: Product: syz
[  726.293107][ T5819] usb 3-1: Manufacturer: syz
[  726.311561][ T5819] usb 3-1: SerialNumber: syz
[  726.397989][ T5819] usb 3-1: config 0 descriptor??
[  726.433740][   T28] usb 4-1: USB disconnect, device number 33
[  726.450637][   T28] option 4-1:0.0: device disconnected
[  726.900079][ T5819] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  726.910182][ T5819] gs_usb: probe of 3-1:0.0 failed with error -32
[  727.093422][   T28] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  727.123014][T11745] sd 0:0:1:0: device reset
[  727.283395][   T28] usb 2-1: Using ep0 maxpacket: 32
[  727.292735][   T28] usb 2-1: config 0 interface 0 has no altsetting 0
[  727.312321][   T28] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  727.326168][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.336434][   T28] usb 2-1: Product: syz
[  727.340803][   T28] usb 2-1: Manufacturer: syz
[  727.350099][   T28] usb 2-1: SerialNumber: syz
[  727.361230][   T28] usb 2-1: config 0 descriptor??
[  727.794308][   T28] gs_usb 2-1:0.0: Couldn't get device config: (err=-121)
[  727.813391][   T28] gs_usb: probe of 2-1:0.0 failed with error -121
[  728.008906][ T5858] usb 2-1: USB disconnect, device number 17
[  728.113495][   T28] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  728.306360][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  728.317817][   T28] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  728.329345][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.340192][   T28] usb 1-1: config 0 descriptor??
[  728.346326][T11749] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  728.403711][ T5839] usb 3-1: USB disconnect, device number 18
[  728.652843][T11756] netlink: 'syz.3.1592': attribute type 6 has an invalid length.
[  728.781280][   T28] usbhid 1-1:0.0: can't add hid device: -71
[  728.808201][   T28] usbhid: probe of 1-1:0.0 failed with error -71
[  728.850860][   T28] usb 1-1: USB disconnect, device number 26
[  728.954611][ T5858] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  729.257996][ T5858] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  729.314314][ T5858] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  729.450033][ T5858] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  729.482898][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.885362][ T5858] usb 2-1: usb_control_msg returned -32
[  729.926738][ T5858] usbtmc 2-1:16.0: can't read capabilities
[  730.466901][ T5839] usb 2-1: USB disconnect, device number 18
[  730.613494][   T28] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  730.793303][   T28] usb 4-1: Using ep0 maxpacket: 32
[  730.802327][   T28] usb 4-1: config 0 interface 0 has no altsetting 0
[  730.812652][   T28] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  730.822147][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.830264][   T28] usb 4-1: Product: syz
[  730.834844][   T28] usb 4-1: Manufacturer: syz
[  730.839506][   T28] usb 4-1: SerialNumber: syz
[  730.847161][   T28] usb 4-1: config 0 descriptor??
[  731.265568][   T28] gs_usb 4-1:0.0: Couldn't get device config: (err=-32)
[  731.291183][   T28] gs_usb: probe of 4-1:0.0 failed with error -32
[  731.513614][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  731.763692][ T5839] usb 1-1: Using ep0 maxpacket: 32
[  731.852642][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0
[  731.903386][ T5839] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  731.930648][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.952840][ T5839] usb 1-1: Product: syz
[  731.962930][ T5839] usb 1-1: Manufacturer: syz
[  731.976463][ T5839] usb 1-1: SerialNumber: syz
[  732.064776][ T5839] usb 1-1: config 0 descriptor??
[  732.482193][ T5839] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  732.522607][ T5839] gs_usb: probe of 1-1:0.0 failed with error -121
[  732.630237][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'.
[  732.732941][ T5839] usb 1-1: USB disconnect, device number 27
[  733.425368][ T5858] usb 4-1: USB disconnect, device number 34
[  734.023310][ T5858] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  734.225552][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.243274][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  734.283467][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  734.313371][ T5858] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  734.322478][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.377703][ T5858] usb 4-1: config 0 descriptor??
[  734.619727][T11798] input: syz1 as /devices/virtual/input/input31
[  734.933410][ T5858] usbhid 4-1:0.0: can't add hid device: -71
[  734.939485][ T5858] usbhid: probe of 4-1:0.0 failed with error -71
[  734.949494][ T5858] usb 4-1: USB disconnect, device number 35
[  736.577706][T11820] sd 0:0:1:0: device reset
[  737.063356][T11711] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  737.313284][T11711] usb 3-1: Using ep0 maxpacket: 32
[  737.324962][T11711] usb 3-1: config 0 interface 0 has no altsetting 0
[  737.346445][T11711] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  737.355703][T11711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.373259][T11711] usb 3-1: Product: syz
[  737.377488][T11711] usb 3-1: Manufacturer: syz
[  737.382141][T11711] usb 3-1: SerialNumber: syz
[  737.395965][T11711] usb 3-1: config 0 descriptor??
[  737.810128][T11711] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  737.817854][T11711] gs_usb: probe of 3-1:0.0 failed with error -121
[  738.166945][ T5858] usb 3-1: USB disconnect, device number 19
[  739.607334][ T7459] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  740.230667][ T7459] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  740.241760][ T7459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.337018][ T5783] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  740.716056][ T7459] usb 4-1: config 0 descriptor??
[  740.737256][T11858] sd 0:0:1:0: device reset
[  740.769508][ T7459] cp210x 4-1:0.0: cp210x converter detected
[  741.173580][ T7459] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  741.446074][ T7459] usb 4-1: cp210x converter now attached to ttyUSB0
[  741.968837][ T5819] usb 4-1: USB disconnect, device number 36
[  742.308727][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  742.358953][ T5819] cp210x 4-1:0.0: device disconnected
[  744.600549][T11879] syz.0.1630 uses obsolete (PF_INET,SOCK_PACKET)
[  744.676789][    T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  744.893276][    T8] usb 3-1: Using ep0 maxpacket: 8
[  744.917697][    T8] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  745.096102][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.117816][    T8] usb 3-1: Product: syz
[  745.123818][    T8] usb 3-1: Manufacturer: syz
[  745.245067][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'.
[  745.254292][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'.
[  745.263511][T11892] netlink: 'syz.0.1633': attribute type 13 has an invalid length.
[  745.271506][T11892] netlink: 'syz.0.1633': attribute type 12 has an invalid length.
[  745.495333][    T8] usb 3-1: SerialNumber: syz
[  745.502922][    T8] usb 3-1: config 0 descriptor??
[  745.879943][    T8] usb 3-1: can't set config #0, error -71
[  746.036646][    T8] usb 3-1: USB disconnect, device number 20
[  747.466396][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.682156][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.387496][T11919] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  748.903502][T11922] xt_TPROXY: Can be used only with -p tcp or -p udp
[  750.329880][ T5839] libceph: connect (1)[c::]:6789 error -101
[  750.338279][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  750.345112][T11927] ceph: No mds server is up or the cluster is laggy
[  750.456791][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  750.465855][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'.
[  750.474931][T11935] netlink: 'syz.1.1643': attribute type 13 has an invalid length.
[  750.482834][T11935] netlink: 'syz.1.1643': attribute type 12 has an invalid length.
[  751.111605][ T5839] libceph: connect (1)[c::]:6789 error -101
[  752.914547][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  753.193315][T11711] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  754.343353][T11711] usb 3-1: device not accepting address 21, error -71
[  755.767428][T11967] input: syz0 as /devices/virtual/input/input32
[  758.493521][T11989] xt_TPROXY: Can be used only with -p tcp or -p udp
[  762.825636][T12020] sd 0:0:1:0: device reset
[  764.893345][T11711] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  765.083731][T11711] usb 2-1: Using ep0 maxpacket: 8
[  765.283296][T11711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  765.295319][T11711] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  765.309740][T11711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.334067][T11711] usb 2-1: config 0 descriptor??
[  765.466244][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'.
[  765.475226][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'.
[  765.484281][T12044] netlink: 'syz.3.1673': attribute type 13 has an invalid length.
[  765.492130][T12044] netlink: 'syz.3.1673': attribute type 12 has an invalid length.
[  766.180312][T11711] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  766.411315][T12048] overlayfs: missing 'workdir'
[  766.690166][T11711] usb 2-1: USB disconnect, device number 19
[  767.544363][T12064] input: syz0 as /devices/virtual/input/input33
[  767.967563][T12076] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1682'.
[  769.653344][T11711] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  769.853578][T11711] usb 3-1: Using ep0 maxpacket: 8
[  769.865631][T11711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  769.893473][T11711] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  769.913359][T11711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.934772][T11711] usb 3-1: config 0 descriptor??
[  770.173993][T11711] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  770.205471][T12096] input: syz0 as /devices/virtual/input/input34
[  770.995934][ T5784] usb 3-1: USB disconnect, device number 23
[  771.699860][T12110] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1693'.
[  773.244560][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  773.253538][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  773.262470][T12133] netlink: 'syz.1.1699': attribute type 13 has an invalid length.
[  773.270532][T12133] netlink: 'syz.1.1699': attribute type 12 has an invalid length.
[  773.932630][T12136] input: syz1 as /devices/virtual/input/input35
[  775.963516][ T7459] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  776.313327][ T7459] usb 4-1: Using ep0 maxpacket: 8
[  776.328254][ T7459] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  776.367063][ T7459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.389632][ T7459] usb 4-1: Product: syz
[  776.403610][ T7459] usb 4-1: Manufacturer: syz
[  776.427965][ T7459] usb 4-1: SerialNumber: syz
[  776.470315][ T7459] usb 4-1: config 0 descriptor??
[  777.187203][ T7459] option 4-1:0.0: GSM modem (1-port) converter detected
[  777.598646][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'.
[  777.607744][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[  777.616901][T12168] netlink: 'syz.2.1709': attribute type 13 has an invalid length.
[  777.624843][T12168] netlink: 'syz.2.1709': attribute type 12 has an invalid length.
[  778.403913][   T28] usb 4-1: USB disconnect, device number 37
[  778.411862][   T28] option 4-1:0.0: device disconnected
[  779.488834][T12184] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  779.619535][ T5858] libceph: connect (1)[c::]:6789 error -101
[  779.625807][ T5858] libceph: mon0 (1)[c::]:6789 connect error
[  779.638520][ T5858] libceph: connect (1)[c::]:6789 error -101
[  779.646198][ T5858] libceph: mon0 (1)[c::]:6789 connect error
[  779.654348][T12185] ceph: No mds server is up or the cluster is laggy
[  780.819171][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  780.828552][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'.
[  780.837827][T12204] netlink: 'syz.1.1719': attribute type 13 has an invalid length.
[  780.845829][T12204] netlink: 'syz.1.1719': attribute type 12 has an invalid length.
[  783.187010][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  783.773250][    T9] usb 2-1: Using ep0 maxpacket: 8
[  783.792259][    T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  783.815277][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.833088][    T9] usb 2-1: Product: syz
[  783.842623][    T9] usb 2-1: Manufacturer: syz
[  783.851852][    T9] usb 2-1: SerialNumber: syz
[  783.886761][    T9] usb 2-1: config 0 descriptor??
[  783.916344][    T9] option 2-1:0.0: GSM modem (1-port) converter detected
[  785.181816][    T9] usb 2-1: USB disconnect, device number 20
[  785.183660][   T28] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  785.191471][    T9] option 2-1:0.0: device disconnected
[  785.999254][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'.
[  786.008483][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'.
[  786.018318][T12240] netlink: 'syz.0.1730': attribute type 13 has an invalid length.
[  786.026434][T12240] netlink: 'syz.0.1730': attribute type 12 has an invalid length.
[  786.933323][   T28] usb 4-1: Using ep0 maxpacket: 8
[  786.971441][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  787.081112][   T28] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  787.090376][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.965808][   T28] usb 4-1: config 0 descriptor??
[  788.010596][   T28] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  788.032483][   T28] usb 4-1: USB disconnect, device number 38
[  788.552068][T12258] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  788.630842][ T7459] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  788.659108][T12134] libceph: connect (1)[c::]:6789 error -101
[  788.665959][T12134] libceph: mon0 (1)[c::]:6789 connect error
[  788.856587][ T7459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  788.875563][ T7459] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  788.884847][ T7459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.901900][ T7459] usb 1-1: config 0 descriptor??
[  788.917612][T12250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  788.934372][T12134] libceph: connect (1)[c::]:6789 error -101
[  788.940756][T12134] libceph: mon0 (1)[c::]:6789 connect error
[  789.456745][   T28] libceph: connect (1)[c::]:6789 error -101
[  789.462829][   T28] libceph: mon0 (1)[c::]:6789 connect error
[  789.469964][T12258] ceph: No mds server is up or the cluster is laggy
[  789.683531][ T7459] usbhid 1-1:0.0: can't add hid device: -71
[  789.712599][ T7459] usbhid: probe of 1-1:0.0 failed with error -71
[  789.767396][ T7459] usb 1-1: USB disconnect, device number 28
[  790.179493][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  790.188597][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'.
[  790.197712][T12276] netlink: 'syz.1.1740': attribute type 13 has an invalid length.
[  790.205678][T12276] netlink: 'syz.1.1740': attribute type 12 has an invalid length.
[  791.723432][ T5784] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  791.976783][ T5784] usb 3-1: Using ep0 maxpacket: 8
[  792.330039][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  792.342044][ T5784] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  792.353036][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.390737][ T5784] usb 3-1: config 0 descriptor??
[  792.773694][ T5784] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  793.675352][T12302] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  793.827619][ T5784] libceph: connect (1)[c::]:6789 error -101
[  793.839665][ T5784] libceph: mon0 (1)[c::]:6789 connect error
[  794.103795][ T5784] libceph: connect (1)[c::]:6789 error -101
[  794.125814][ T5784] libceph: mon0 (1)[c::]:6789 connect error
[  794.424023][   T28] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  794.488831][T12134] usb 3-1: USB disconnect, device number 24
[  794.496296][T12302] ceph: No mds server is up or the cluster is laggy
[  794.635651][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  794.889585][   T28] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  794.899629][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.912260][   T28] usb 4-1: config 0 descriptor??
[  794.918506][T12309] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  795.042466][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'.
[  795.051597][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'.
[  795.061053][T12315] netlink: 'syz.0.1750': attribute type 13 has an invalid length.
[  795.069282][T12315] netlink: 'syz.0.1750': attribute type 12 has an invalid length.
[  795.851761][   T28] usbhid 4-1:0.0: can't add hid device: -71
[  795.872098][   T28] usbhid: probe of 4-1:0.0 failed with error -71
[  795.885574][T12317] xt_NFQUEUE: number of queues (63489) out of range (got 96768)
[  796.086564][   T28] usb 4-1: USB disconnect, device number 39
[  797.769788][T12337] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  798.207427][T12338] ceph: No mds server is up or the cluster is laggy
[  798.225762][ T5784] libceph: connect (1)[c::]:6789 error -101
[  798.288436][ T5784] libceph: mon0 (1)[c::]:6789 connect error
[  798.963505][ T5819] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  799.140508][T12356] sd 0:0:1:0: device reset
[  799.178473][ T5819] usb 3-1: Using ep0 maxpacket: 32
[  799.212676][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0
[  799.285665][ T5819] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  799.415782][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.500366][ T5819] usb 3-1: Product: syz
[  799.553023][ T5819] usb 3-1: Manufacturer: syz
[  799.598371][ T5819] usb 3-1: SerialNumber: syz
[  799.675198][ T5819] usb 3-1: config 0 descriptor??
[  800.186847][ T5819] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  800.195625][ T5819] gs_usb: probe of 3-1:0.0 failed with error -121
[  800.574044][ T5819] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  800.788523][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  800.818638][ T5819] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  800.843455][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.864876][ T5819] usb 2-1: config 0 descriptor??
[  800.870667][T12364] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  802.138334][ T7459] usb 3-1: USB disconnect, device number 25
[  802.374579][ T5819] usbhid 2-1:0.0: can't add hid device: -71
[  802.380652][ T5819] usbhid: probe of 2-1:0.0 failed with error -71
[  802.465229][ T5819] usb 2-1: USB disconnect, device number 21
[  807.361864][T12423] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  808.905445][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.911849][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  811.544952][T12465] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  811.566518][ T5819] libceph: connect (1)[c::]:6789 error -101
[  811.572978][ T5819] libceph: mon0 (1)[c::]:6789 connect error
[  811.612171][T12465] ceph: No mds server is up or the cluster is laggy
[  812.182396][T12476] sd 0:0:1:0: device reset
[  812.944685][T12480] overlayfs: failed to resolve './file1/file0': -2
[  814.475202][T12506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1809'.
[  814.732476][ T5784] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  815.149138][T12516] overlayfs: failed to resolve './file1/file0': -2
[  815.195572][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  815.215274][ T5784] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  815.241856][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.265444][ T5784] usb 3-1: config 0 descriptor??
[  815.303682][T12505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  815.749558][ T5784] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  815.766774][ T5784] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  815.780360][ T5784] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  815.980816][ T5784] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  815.987756][ T5784] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  816.009115][ T5784] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  816.076047][ T5784] usb 3-1: USB disconnect, device number 26
[  817.004201][T12527] fido_id[12527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  817.800777][T12539] overlayfs: failed to resolve './file1/file0': -2
[  817.808233][ T5819] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  818.001059][T12544] fuse: Unknown parameter '0x00000000000000050000000000000000000000000000000000000000'
[  818.011060][ T5819] usb 2-1: Using ep0 maxpacket: 16
[  818.043796][ T5819] usb 2-1: config 1 has an invalid interface number: 36 but max is 0
[  818.066438][ T5819] usb 2-1: config 1 has no interface number 0
[  818.078603][ T5819] usb 2-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  818.101531][ T5819] usb 2-1: config 1 interface 36 has no altsetting 0
[  818.110266][ T5839] libceph: connect (1)[c::]:6789 error -101
[  818.121457][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  818.130894][ T5819] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  818.140415][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.149981][T12544] ceph: No mds server is up or the cluster is laggy
[  818.157709][ T5819] usb 2-1: Product: syz
[  818.162079][ T5819] usb 2-1: Manufacturer: syz
[  818.178908][ T5819] usb 2-1: SerialNumber: syz
[  818.196573][T12520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  818.411865][ T5819] ums-usbat 2-1:1.36: USB Mass Storage device detected
[  818.527136][ T5819] usb 2-1: USB disconnect, device number 22
[  820.183515][ T5784] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  820.404739][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  820.427145][ T5784] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  820.477274][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.529985][ T5784] usb 1-1: config 0 descriptor??
[  820.555938][T12561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  821.073723][ T5784] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  821.191052][ T5784] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  821.294824][ T5784] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  821.399798][ T5784] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  821.471095][ T5784] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  821.558139][ T5784] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  821.607709][ T5784] usb 1-1: USB disconnect, device number 29
[  821.716154][T12575] fido_id[12575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  822.423232][ T5784] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  822.643336][ T5784] usb 1-1: Using ep0 maxpacket: 8
[  822.650885][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  822.683296][ T5784] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  822.727665][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.759052][ T5784] usb 1-1: config 0 descriptor??
[  823.391023][    T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  824.473700][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  824.495197][    T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  824.523251][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.558766][    T9] usb 3-1: config 0 descriptor??
[  824.584313][T12600] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  824.639133][T12614] syzkaller1: entered promiscuous mode
[  824.657827][T12614] syzkaller1: entered allmulticast mode
[  825.029874][    T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  825.047633][    T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  825.063291][    T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  825.083461][    T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  825.090376][    T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  825.135041][    T9] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  825.233650][ T5784] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  825.251946][ T5858] usb 3-1: USB disconnect, device number 27
[  825.307728][ T5784] usb 1-1: USB disconnect, device number 30
[  825.411594][T12618] fido_id[12618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  827.813338][T12134] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  828.013757][T12134] usb 1-1: Using ep0 maxpacket: 8
[  828.023756][T12134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  828.053557][T12134] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  828.066661][T12134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.077781][T12134] usb 1-1: config 0 descriptor??
[  828.353274][ T5784] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  828.555570][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  828.583803][ T5784] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  828.594773][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.625786][ T5784] usb 3-1: config 0 descriptor??
[  828.635137][T12648] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  829.105194][ T5784] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  829.128199][ T5784] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  829.136223][ T5784] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  829.144778][ T5784] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  829.163231][ T5784] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  829.202461][ T5784] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  829.310016][ T5784] usb 3-1: USB disconnect, device number 28
[  829.467073][T12656] fido_id[12656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  829.996989][ T5858] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  830.120056][T12668] sd 0:0:1:0: device reset
[  830.765208][T12134] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  830.840782][T12134] usb 1-1: USB disconnect, device number 31
[  830.907951][ T5858] usb 4-1: Using ep0 maxpacket: 32
[  831.172008][ T5858] usb 4-1: config 0 interface 0 has no altsetting 0
[  831.320583][ T5858] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  831.453707][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.459229][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'.
[  831.471794][ T5858] usb 4-1: Product: syz
[  831.476436][ T5858] usb 4-1: Manufacturer: syz
[  831.508973][ T5858] usb 4-1: SerialNumber: syz
[  831.518071][ T5858] usb 4-1: config 0 descriptor??
[  831.923390][ T5839] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  831.977993][ T5858] gs_usb 4-1:0.0: Couldn't get device config: (err=-121)
[  831.993425][ T5858] gs_usb: probe of 4-1:0.0 failed with error -121
[  832.117454][ T5839] usb 3-1: Using ep0 maxpacket: 16
[  832.125422][ T5839] usb 3-1: config 1 has an invalid interface number: 36 but max is 0
[  832.144576][ T5839] usb 3-1: config 1 has no interface number 0
[  832.169579][ T5839] usb 3-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  832.188791][ T5839] usb 3-1: config 1 interface 36 has no altsetting 0
[  832.212374][ T5839] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  832.239248][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.265347][ T5839] usb 3-1: Product: syz
[  832.278049][ T5839] usb 3-1: Manufacturer: syz
[  832.306487][ T5839] usb 3-1: SerialNumber: syz
[  832.330007][T12665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  832.552076][ T5839] ums-usbat 3-1:1.36: USB Mass Storage device detected
[  832.652581][ T5839] usb 3-1: USB disconnect, device number 29
[  832.824576][T12689] overlayfs: failed to clone upperpath
[  833.383810][    T9] usb 4-1: USB disconnect, device number 40
[  833.922608][    T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  834.123379][    T9] usb 4-1: Using ep0 maxpacket: 8
[  834.149311][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  834.165302][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  834.181286][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.214765][    T9] usb 4-1: config 0 descriptor??
[  834.217634][T12716] overlayfs: failed to clone upperpath
[  835.183512][ T5839] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  835.415785][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  835.442536][ T5839] usb 3-1: config 0 interface 0 has no altsetting 0
[  835.465285][ T5839] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  835.493347][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.516524][ T5839] usb 3-1: Product: syz
[  835.527311][ T5839] usb 3-1: Manufacturer: syz
[  835.538628][ T5839] usb 3-1: SerialNumber: syz
[  835.556646][ T5839] usb 3-1: config 0 descriptor??
[  835.995362][ T5839] gs_usb 3-1:0.0: Configuring for 222 interfaces
[  836.125145][T12741] overlayfs: failed to clone upperpath
[  836.344708][ T5839] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  836.354123][ T5839] gs_usb: probe of 3-1:0.0 failed with error -32
[  836.369215][ T5839] usb 3-1: USB disconnect, device number 30
[  836.550499][    T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  836.606271][    T9] usb 4-1: USB disconnect, device number 41
[  836.889269][T12751] Cannot find add_set index 65532 as target
[  839.520511][T12779] sd 0:0:1:0: device reset
[  840.563239][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  840.765501][    T9] usb 3-1: Using ep0 maxpacket: 32
[  840.786822][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  840.816815][    T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  840.847369][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.886486][    T9] usb 3-1: Product: syz
[  840.890764][    T9] usb 3-1: Manufacturer: syz
[  840.942799][    T9] usb 3-1: SerialNumber: syz
[  840.965979][    T9] usb 3-1: config 0 descriptor??
[  842.059928][    T9] gs_usb 3-1:0.0: Configuring for 222 interfaces
[  842.296129][    T9] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  842.524300][    T9] gs_usb: probe of 3-1:0.0 failed with error -32
[  842.540375][    T9] usb 3-1: USB disconnect, device number 31
[  844.497743][T12827] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  849.633379][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  849.835503][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  849.853642][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  849.886367][    T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  849.903216][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.912862][    T9] usb 1-1: Product: syz
[  849.926777][    T9] usb 1-1: Manufacturer: syz
[  849.936595][    T9] usb 1-1: SerialNumber: syz
[  849.951310][    T9] usb 1-1: config 0 descriptor??
[  849.961549][T12882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  849.970716][T12882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  850.266872][T12882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  850.293498][T12882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  851.374088][    T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  852.047395][    T9] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  852.526013][    T9] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6a:0b:e4:de:65:4b
[  852.627361][    T9] usb 1-1: USB disconnect, device number 32
[  852.695379][    T9] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  858.999410][T12971] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  867.703285][ T5839] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  867.873260][ T5839] usb 4-1: device descriptor read/64, error -71
[  868.283406][ T5839] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  868.433403][ T5839] usb 4-1: device descriptor read/64, error -71
[  868.564895][ T5839] usb usb4-port1: attempt power cycle
[  869.003379][ T5839] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  869.063650][ T5839] usb 4-1: device descriptor read/8, error -71
[  869.433515][ T5839] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  869.465821][ T5839] usb 4-1: device descriptor read/8, error -71
[  869.596865][ T5839] usb usb4-port1: unable to enumerate USB device
[  870.404120][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.411079][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  870.449388][T11711] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  870.693695][T11711] usb 3-1: Using ep0 maxpacket: 16
[  871.215662][T11711] usb 3-1: config 1 has an invalid interface number: 36 but max is 0
[  871.224067][T11711] usb 3-1: config 1 has no interface number 0
[  871.230227][T11711] usb 3-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  871.250106][T11711] usb 3-1: config 1 interface 36 has no altsetting 0
[  871.274729][T11711] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  871.293640][T11711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.304423][T11711] usb 3-1: Product: syz
[  871.311406][T11711] usb 3-1: Manufacturer: syz
[  871.343553][T11711] usb 3-1: SerialNumber: syz
[  871.366145][T13066] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  872.019189][T11711] ums-usbat 3-1:1.36: USB Mass Storage device detected
[  872.151038][T11711] usb 3-1: USB disconnect, device number 32
[  873.215193][T13091] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  876.778785][T13134] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1996'.
[  881.453558][ T5783] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff
[  882.123447][ T5858] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  882.319344][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'.
[  882.333442][ T5858] usb 1-1: device descriptor read/64, error -71
[  882.623597][ T5858] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  882.788245][ T5858] usb 1-1: device descriptor read/64, error -71
[  882.916252][ T5858] usb usb1-port1: attempt power cycle
[  883.333468][ T5858] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  883.348447][T11711] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  883.384381][ T5858] usb 1-1: device descriptor read/8, error -71
[  883.541248][T11711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  883.551271][T11711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  883.570056][T11711] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  883.579985][T11711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.603332][T11711] usb 3-1: Product: syz
[  883.607576][T11711] usb 3-1: Manufacturer: syz
[  883.612320][T11711] usb 3-1: SerialNumber: syz
[  883.631807][T11711] usb 3-1: config 0 descriptor??
[  883.643457][T13195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  883.650871][T13195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  883.673266][ T5858] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  883.713647][ T5858] usb 1-1: device descriptor read/8, error -71
[  883.833427][ T5858] usb usb1-port1: unable to enumerate USB device
[  883.870279][T13195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  883.879116][T13195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  884.649506][T11711] Error reading MAC address
[  884.774253][T11711] usb 3-1: USB disconnect, device number 33
[  886.271819][T13227] lo speed is unknown, defaulting to 1000
[  886.278687][T13227] lo speed is unknown, defaulting to 1000
[  886.307364][T13227] lo speed is unknown, defaulting to 1000
[  886.352294][T13227] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  886.421862][T13227] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  886.649484][T13227] lo speed is unknown, defaulting to 1000
[  886.667062][T13227] lo speed is unknown, defaulting to 1000
[  886.683485][T13227] lo speed is unknown, defaulting to 1000
[  886.700865][T13227] lo speed is unknown, defaulting to 1000
[  886.871240][T11711] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  887.118113][T11711] usb 4-1: config 0 interface 0 altsetting 68 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  887.143138][T11711] usb 4-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  887.173885][T11711] usb 4-1: config 0 interface 0 has no altsetting 0
[  887.193183][T11711] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  887.222789][T11711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.248406][T11711] usb 4-1: config 0 descriptor??
[  887.264012][T13219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  887.722569][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'.
[  887.731710][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  887.740832][T13236] netlink: 'syz.1.2031': attribute type 13 has an invalid length.
[  887.748847][T13236] netlink: 'syz.1.2031': attribute type 12 has an invalid length.
[  888.334540][T11711] hid-led 0003:1294:1320.000B: hidraw0: USB HID v0.04 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0
[  888.420570][T11711] hid-led 0003:1294:1320.000B: Riso Kagaku Webmail Notifier initialized
[  888.471642][T11711] usb 4-1: USB disconnect, device number 46
[  888.522668][ T5819] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  888.555731][ T5819] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  888.584927][ T5819] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  889.193395][T11711] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  889.343322][T11711] usb 4-1: device descriptor read/64, error -71
[  889.553553][ T5819] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  889.636161][T11711] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  889.764929][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  889.793650][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  889.808939][T11711] usb 4-1: device descriptor read/64, error -71
[  889.830218][ T5819] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  889.847443][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.863652][ T5819] usb 3-1: Product: syz
[  889.868017][ T5819] usb 3-1: Manufacturer: syz
[  889.872750][ T5819] usb 3-1: SerialNumber: syz
[  889.891984][ T5819] usb 3-1: config 0 descriptor??
[  889.902754][T13249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  889.910970][T13249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  889.943564][T11711] usb usb4-port1: attempt power cycle
[  890.078889][T13258] overlayfs: failed to clone lowerpath
[  891.280668][T13249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  891.288154][T13249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  891.835151][T11711] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  891.913730][T11711] usb 4-1: device descriptor read/8, error -71
[  892.063080][ T5819] Error reading MAC address
[  892.092743][ T5819] usb 3-1: USB disconnect, device number 34
[  893.114439][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2045'.
[  894.857282][T13301] wg1: entered promiscuous mode
[  894.872538][T13301] wg1: entered allmulticast mode
[  897.143644][ T5819] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  897.343563][ T5819] usb 4-1: Using ep0 maxpacket: 8
[  897.364267][ T5819] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  897.387542][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  897.397921][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  897.408081][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  897.418634][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  897.432200][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  897.441836][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.945961][ T5819] usb 4-1: usb_control_msg returned -32
[  897.951623][ T5819] usbtmc 4-1:16.0: can't read capabilities
[  898.601808][T13330] tmpfs: Unknown parameter 'fscontext'
[  900.580001][T11711] usb 4-1: USB disconnect, device number 51
[  900.913218][ T5819] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  901.095892][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  901.109443][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  901.124176][ T5819] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  901.134985][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.143073][ T5819] usb 3-1: Product: syz
[  901.149808][ T5819] usb 3-1: Manufacturer: syz
[  901.154996][ T5819] usb 3-1: SerialNumber: syz
[  901.174168][ T5819] usb 3-1: config 0 descriptor??
[  901.190103][T13340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  901.211366][T13340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  901.443672][T13340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  901.451013][T13340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  902.016644][ T5819] Error reading MAC address
[  902.036334][ T5819] usb 3-1: USB disconnect, device number 35
[  904.831655][ T5819] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  905.013327][ T5819] usb 3-1: Using ep0 maxpacket: 32
[  905.021858][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0
[  905.034150][ T5819] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  905.053752][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.067498][ T5819] usb 3-1: Product: syz
[  905.077385][ T5819] usb 3-1: Manufacturer: syz
[  905.087803][ T5819] usb 3-1: SerialNumber: syz
[  905.108665][ T5819] usb 3-1: config 0 descriptor??
[  905.535256][ T5819] gs_usb 3-1:0.0: Configuring for 222 interfaces
[  905.736250][ T5819] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  905.776445][ T5819] gs_usb: probe of 3-1:0.0 failed with error -22
[  905.941692][ T5819] usb 3-1: USB disconnect, device number 36
[  906.016781][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  907.377869][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'.
[  909.188714][T13454] xt_CT: You must specify a L4 protocol and not use inversions on it
[  910.509878][T13478] lo speed is unknown, defaulting to 1000
[  913.526899][T13514] netlink: 'syz.0.2133': attribute type 33 has an invalid length.
[  913.567667][T13514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2133'.
[  918.485904][T13571] ceph: No mds server is up or the cluster is laggy
[  918.493685][ T5839] libceph: connect (1)[c::]:6789 error -101
[  918.499978][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  919.513843][T13587] sctp: failed to load transform for md5: -2
[  920.749488][T13609] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2161'.
[  921.753704][T11711] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  921.957050][T11711] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  921.982458][T11711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.011403][T11711] usb 4-1: config 0 has no interface number 0
[  922.018445][T11711] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  922.046392][T11711] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  922.099700][T11711] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  922.109671][T11711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.131272][T11711] usb 4-1: Product: syz
[  922.142800][T11711] usb 4-1: Manufacturer: syz
[  922.163221][T11711] usb 4-1: SerialNumber: syz
[  922.192361][T11711] usb 4-1: config 0 descriptor??
[  922.706444][T11711] usbtouchscreen: probe of 4-1:0.117 failed with error -71
[  922.746411][T11711] usb 4-1: USB disconnect, device number 52
[  925.148423][T13660] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2176'.
[  930.898089][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  930.904466][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  940.292441][T13818] mmap: syz.3.2232 (13818) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  940.839395][T13168] Bluetooth: hci1: unexpected event for opcode 0x1408
[  943.152412][ T5771] Bluetooth: hci1: command 0x0406 tx timeout
[  943.430978][T13840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.087903][T13840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.285754][T13840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.470723][T13840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.615782][T13840] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  944.630853][T13840] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  944.647168][T13840] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  944.661610][T13840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  945.995072][T13851] overlayfs: failed to clone upperpath
[  949.132639][T13871] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  957.109747][T13953] xt_CT: You must specify a L4 protocol and not use inversions on it
[  957.290441][T13957] lo speed is unknown, defaulting to 1000
[  962.543852][T13992] overlayfs: failed to resolve './bus': -2
[  963.533073][T14004] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  963.588425][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'.
[  970.892066][T14077] fuse: Bad value for 'fd'
[  971.244662][ T2918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.137867][ T2918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.420194][ T2918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.533731][ T2918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.093721][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  973.154252][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  973.170553][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  973.194452][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  973.228635][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  973.251682][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  973.456725][T14088] lo speed is unknown, defaulting to 1000
[  973.947062][ T2918] tipc: Left network mode
[  975.397025][ T5771] Bluetooth: hci3: command tx timeout
[  975.461200][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'.
[  975.470470][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2316'.
[  975.479487][T14108] netlink: 'syz.3.2316': attribute type 13 has an invalid length.
[  975.487399][T14108] netlink: 'syz.3.2316': attribute type 12 has an invalid length.
[  975.578944][T14088] chnl_net:caif_netlink_parms(): no params data found
[  976.543581][T14127] lo speed is unknown, defaulting to 1000
[  977.026976][T14088] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.044619][T14088] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.051895][T14088] bridge_slave_0: entered allmulticast mode
[  977.059705][T14088] bridge_slave_0: entered promiscuous mode
[  977.076722][T14088] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.089887][T14088] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.098336][T14088] bridge_slave_1: entered allmulticast mode
[  977.142412][T14088] bridge_slave_1: entered promiscuous mode
[  977.442129][ T5771] Bluetooth: hci3: command tx timeout
[  977.924160][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.056488][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.276252][T14088] team0: Port device team_slave_0 added
[  978.305406][T14088] team0: Port device team_slave_1 added
[  978.412146][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.451056][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.482417][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.626189][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.739409][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.808956][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.444462][ T5771] Bluetooth: hci3: command tx timeout
[  979.733770][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  979.744695][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'.
[  979.753684][T14170] netlink: 'syz.2.2328': attribute type 13 has an invalid length.
[  979.761662][T14170] netlink: 'syz.2.2328': attribute type 12 has an invalid length.
[  979.784390][ T2918] hsr_slave_0: left promiscuous mode
[  979.797011][ T2918] hsr_slave_1: left promiscuous mode
[  979.820245][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  980.092012][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  980.134039][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  980.202651][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  980.264994][ T2918] bridge_slave_1: left allmulticast mode
[  980.292096][ T2918] bridge_slave_1: left promiscuous mode
[  980.300039][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.578188][ T2918] bridge_slave_0: left allmulticast mode
[  980.584094][ T2918] bridge_slave_0: left promiscuous mode
[  980.598031][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.700150][ T2918] veth1_macvtap: left promiscuous mode
[  980.715475][ T2918] veth0_macvtap: left promiscuous mode
[  980.744108][ T2918] veth1_vlan: left promiscuous mode
[  980.758836][ T2918] veth0_vlan: left promiscuous mode
[  981.412447][ T5771] Bluetooth: hci3: command tx timeout
[  983.801942][ T2918] team0 (unregistering): Port device team_slave_1 removed
[  983.862303][ T2918] team0 (unregistering): Port device team_slave_0 removed
[  983.918471][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  983.976330][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.341587][ T2918] bond0 (unregistering): Released all slaves
[  984.476505][T14209] lo speed is unknown, defaulting to 1000
[  984.604184][T14088] hsr_slave_0: entered promiscuous mode
[  984.629624][T14088] hsr_slave_1: entered promiscuous mode
[  984.638313][T14088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  984.646784][T14088] Cannot create hsr debugfs directory
[  985.006422][    T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  985.138654][ T2918] IPVS: stop unused estimator thread 0...
[  985.206896][    T8] usb 4-1: Using ep0 maxpacket: 8
[  985.216340][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  985.238857][    T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  985.256362][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.276695][    T8] usb 4-1: config 0 descriptor??
[  985.561133][    T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  986.085638][T14088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  986.109379][T14088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  986.142942][T14088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  986.181517][T14088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  986.365067][T14088] 8021q: adding VLAN 0 to HW filter on device bond0
[  986.428352][T14088] 8021q: adding VLAN 0 to HW filter on device team0
[  986.454849][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  986.463382][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  986.519076][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.526327][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  987.184285][T14088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  987.456652][T14088] veth0_vlan: entered promiscuous mode
[  987.491732][T14088] veth1_vlan: entered promiscuous mode
[  988.335826][T11711] usb 4-1: USB disconnect, device number 53
[  988.489142][T14088] veth0_macvtap: entered promiscuous mode
[  988.493926][T14288] comedi comedi1: adq12b: I/O port conflict (0x4000000,16)
[  988.555650][T14088] veth1_macvtap: entered promiscuous mode
[  988.651983][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  988.671351][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.695633][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  988.711767][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.726210][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  988.745435][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.760511][T14088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  988.785246][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.806962][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.826102][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  988.940104][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  988.997320][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.054390][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.101069][T14088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  989.117624][T14088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  989.181732][T14088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  989.190612][T14088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  989.199519][T14088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  989.410771][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  989.417894][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  989.597467][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  989.797330][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  989.822002][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  990.166559][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.143311][T13168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  992.156821][T13168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  992.170289][T13168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  992.538595][T13168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  992.557739][T13168] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  992.571004][T13168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  993.334699][T14349] lo speed is unknown, defaulting to 1000
[  994.021241][T14368] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  994.385122][T14349] chnl_net:caif_netlink_parms(): no params data found
[  994.836192][T13168] Bluetooth: hci1: command tx timeout
[  995.242630][T14349] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.251353][T14349] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.261067][T14349] bridge_slave_0: entered allmulticast mode
[  995.269593][T14349] bridge_slave_0: entered promiscuous mode
[  995.280598][T14349] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.288065][T14349] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.295557][T14349] bridge_slave_1: entered allmulticast mode
[  995.304524][T14349] bridge_slave_1: entered promiscuous mode
[  995.391180][T14349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  995.410885][T14349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  995.644582][T14349] team0: Port device team_slave_0 added
[  995.656871][T14349] team0: Port device team_slave_1 added
[  995.701826][T14349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.609144][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.671616][T14349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  996.692565][T14349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.706997][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.758538][T14349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.798714][T13168] Bluetooth: hci1: command tx timeout
[  997.085263][T14349] hsr_slave_0: entered promiscuous mode
[  997.112562][T14349] hsr_slave_1: entered promiscuous mode
[  997.131404][T14349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  997.139108][T14349] Cannot create hsr debugfs directory
[  997.548790][T12134] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  998.250604][T12134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  998.303622][T12134] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  998.362448][T12134] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  998.407544][T12134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.466236][T12134] usb 4-1: Product: syz
[  998.470833][T12134] usb 4-1: Manufacturer: syz
[  998.484634][T12134] usb 4-1: SerialNumber: syz
[  998.523670][T12134] usb 4-1: config 0 descriptor??
[  998.706825][T14349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.770257][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  998.779871][T13168] Bluetooth: hci1: command tx timeout
[  998.787508][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'.
[  998.823729][T14429] netlink: 'syz.2.2383': attribute type 11 has an invalid length.
[  998.841184][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  998.891717][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'.
[  998.949380][T14429] netlink: 'syz.2.2383': attribute type 11 has an invalid length.
[  999.181236][T14349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.301107][T14349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.535576][T14349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.905552][T14349] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  999.963165][T14349] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  999.988740][T12134] usb 4-1: USB disconnect, device number 54
[ 1000.052782][T14349] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1000.111160][T14349] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1000.594937][T14349] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1000.670929][T14349] 8021q: adding VLAN 0 to HW filter on device team0
[ 1000.745012][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.752356][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.761513][T13168] Bluetooth: hci1: command tx timeout
[ 1000.834930][T10640] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.842217][T10640] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1001.434943][T14473] xt_hashlimit: size too large, truncated to 1048576
[ 1003.478602][T14349] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1003.609938][T14349] veth0_vlan: entered promiscuous mode
[ 1003.630902][T14349] veth1_vlan: entered promiscuous mode
[ 1003.720698][T14349] veth0_macvtap: entered promiscuous mode
[ 1003.747958][T14349] veth1_macvtap: entered promiscuous mode
[ 1003.801941][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.846013][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.917984][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.980748][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.014392][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.025406][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.035390][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.055297][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.117562][T14349] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1005.459157][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.526564][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.536918][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.547718][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.560782][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.571573][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.582159][T14349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.593502][T14349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.630448][T14349] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1005.666779][T14349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.706860][T14349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.717855][T14349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.728157][T14349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.994305][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.023838][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.116675][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.130375][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.645819][T12134] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1006.867280][T12134] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1006.903156][T12134] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1006.981256][T12134] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1007.026585][T12134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.053146][T14514] input: syz0 as /devices/virtual/input/input37
[ 1007.595630][T12134] usb 2-1: Product: syz
[ 1007.600063][T12134] usb 2-1: Manufacturer: syz
[ 1007.604717][T12134] usb 2-1: SerialNumber: syz
[ 1007.627137][T12134] usb 2-1: config 0 descriptor??
[ 1008.064371][ T1074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.257229][ T1074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.360452][    T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1008.384678][ T1074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.420926][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1008.432338][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1008.449436][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1008.493176][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1008.522868][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1008.531274][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1008.542685][    T8] usb 4-1: Using ep0 maxpacket: 8
[ 1008.562100][    T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1008.583560][    T8] usb 4-1: config 179 has no interface number 0
[ 1008.646541][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1008.701543][T14519] lo speed is unknown, defaulting to 1000
[ 1008.714278][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1008.751308][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1008.781588][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1008.953448][    T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1009.103764][    T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1009.274288][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.427650][T14517] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1009.469807][T12134] usb 2-1: USB disconnect, device number 23
[ 1009.915814][    T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input38
[ 1010.110131][ T1074] tipc: Left network mode
[ 1010.449825][T14519] chnl_net:caif_netlink_parms(): no params data found
[ 1010.523089][T13168] Bluetooth: hci2: command tx timeout
[ 1011.965484][ T7459] usb 4-1: USB disconnect, device number 55
[ 1011.972260][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1011.972368][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1012.066870][ T7459] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1012.494794][T13168] Bluetooth: hci2: command tx timeout
[ 1012.557280][T14519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.564800][T14519] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.577337][T14519] bridge_slave_0: entered allmulticast mode
[ 1012.590887][T14519] bridge_slave_0: entered promiscuous mode
[ 1012.603954][T14519] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1012.624709][T14519] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.679920][T14519] bridge_slave_1: entered allmulticast mode
[ 1012.747259][T14519] bridge_slave_1: entered promiscuous mode
[ 1013.085666][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.108214][T14573] loop8: detected capacity change from 0 to 7
[ 1013.124237][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.145881][T14573] Dev loop8: unable to read RDB block 7
[ 1013.154934][T14573]  loop8: unable to read partition table
[ 1013.161863][T14573] loop8: partition table beyond EOD, truncated
[ 1013.177791][T14573] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1013.342923][T14519] team0: Port device team_slave_0 added
[ 1013.367191][T14519] team0: Port device team_slave_1 added
[ 1013.468656][ T1074] hsr_slave_0: left promiscuous mode
[ 1013.659444][ T1074] hsr_slave_1: left promiscuous mode
[ 1014.420152][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.428914][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.447325][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.473408][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1014.481433][T13168] Bluetooth: hci2: command tx timeout
[ 1014.525929][ T1074] bridge_slave_1: left allmulticast mode
[ 1014.531661][ T1074] bridge_slave_1: left promiscuous mode
[ 1014.562377][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.808229][ T1074] bridge_slave_0: left allmulticast mode
[ 1014.858712][ T1074] bridge_slave_0: left promiscuous mode
[ 1014.920761][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.288724][ T1074] veth1_macvtap: left promiscuous mode
[ 1015.306537][ T1074] veth0_macvtap: left promiscuous mode
[ 1015.328837][ T1074] veth1_vlan: left promiscuous mode
[ 1015.341883][ T1074] veth0_vlan: left promiscuous mode
[ 1016.456648][T13168] Bluetooth: hci2: command tx timeout
[ 1017.212450][ T1074] team0 (unregistering): Port device team_slave_1 removed
[ 1017.272631][ T1074] team0 (unregistering): Port device team_slave_0 removed
[ 1017.329804][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1017.397235][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1017.802839][ T1074] bond0 (unregistering): Released all slaves
[ 1017.960824][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1017.975733][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1018.001888][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1018.027220][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1018.069877][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1018.107253][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1018.133218][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1018.148661][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1018.187839][T14593] vxcan1: entered promiscuous mode
[ 1018.194852][T14593] team0: Device vxcan1 is of different type
[ 1018.558286][T14519] hsr_slave_0: entered promiscuous mode
[ 1018.628906][T14519] hsr_slave_1: entered promiscuous mode
[ 1018.932065][T14634] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1019.491904][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'.
[ 1021.808500][T14649] overlayfs: missing 'lowerdir'
[ 1023.333706][ T1074] IPVS: stop unused estimator thread 0...
[ 1025.747039][T14519] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1025.782847][T14519] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1025.824902][T14519] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1025.848573][T14519] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1026.636480][T14519] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.660433][T14519] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.675775][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.683004][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1026.745581][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.752834][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.378050][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1027.494443][T14519] veth0_vlan: entered promiscuous mode
[ 1027.537981][T14519] veth1_vlan: entered promiscuous mode
[ 1027.630986][T14519] veth0_macvtap: entered promiscuous mode
[ 1027.666273][T14519] veth1_macvtap: entered promiscuous mode
[ 1027.787277][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1027.842655][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.853496][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1027.864167][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.895828][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1028.120118][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.270421][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1028.420167][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.468407][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1028.581581][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.621181][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.695830][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.724899][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.742254][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.763451][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.777323][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.788213][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.820347][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1028.843275][T14519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.876093][T14519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.884869][T14519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.933733][T14519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.300854][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1029.643772][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1029.998677][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.020712][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.361652][T14761] Set syz1 is full, maxelem 6117 reached
[ 1036.206169][T14834] trusted_key: syz.1.2463 sent an empty control message without MSG_MORE.
[ 1040.735036][T14868] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1044.076332][T14902] overlayfs: failed to clone upperpath
[ 1046.088180][T14921] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1047.956019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1047.963474][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.050168][ T1090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.077967][ T1090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.242374][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1057.253618][T14981] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1057.265253][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1057.275984][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1057.280596][ T1090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.310701][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1057.319656][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1057.327345][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1057.594785][T14979] lo speed is unknown, defaulting to 1000
[ 1058.099359][ T1090] tipc: Left network mode
[ 1059.665623][ T5771] Bluetooth: hci0: command tx timeout
[ 1060.062903][T14979] chnl_net:caif_netlink_parms(): no params data found
[ 1061.296939][T14979] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1061.305095][T14979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1061.315220][T14979] bridge_slave_0: entered allmulticast mode
[ 1061.551896][T14979] bridge_slave_0: entered promiscuous mode
[ 1061.641226][ T5771] Bluetooth: hci0: command tx timeout
[ 1061.772136][T14979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1061.944342][T14979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1062.107084][T14979] bridge_slave_1: entered allmulticast mode
[ 1062.161107][T14979] bridge_slave_1: entered promiscuous mode
[ 1062.283402][T14979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1062.432605][T14979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1062.591531][T14979] team0: Port device team_slave_0 added
[ 1063.622017][ T5771] Bluetooth: hci0: command tx timeout
[ 1063.692286][T14979] team0: Port device team_slave_1 added
[ 1063.967114][T14979] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1063.993319][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.082314][T14979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1064.243742][T14979] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1064.269442][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.349196][T14979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1066.595043][ T5771] Bluetooth: hci0: command tx timeout
[ 1066.972891][T14979] hsr_slave_0: entered promiscuous mode
[ 1067.016359][T14979] hsr_slave_1: entered promiscuous mode
[ 1067.098520][T14979] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1067.106156][T14979] Cannot create hsr debugfs directory
[ 1067.176195][ T1090] hsr_slave_0: left promiscuous mode
[ 1067.203696][ T1090] hsr_slave_1: left promiscuous mode
[ 1067.236151][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1067.260236][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1067.271102][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1067.289749][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1067.319238][ T1090] bridge_slave_1: left allmulticast mode
[ 1067.324908][ T1090] bridge_slave_1: left promiscuous mode
[ 1067.366632][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.385177][ T1090] bridge_slave_0: left allmulticast mode
[ 1067.393718][ T1090] bridge_slave_0: left promiscuous mode
[ 1067.399561][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.518982][ T1090] veth1_macvtap: left promiscuous mode
[ 1067.524583][ T1090] veth0_macvtap: left promiscuous mode
[ 1067.556013][ T1090] veth1_vlan: left promiscuous mode
[ 1067.561424][ T1090] veth0_vlan: left promiscuous mode
[ 1069.192150][ T1090] team0 (unregistering): Port device team_slave_1 removed
[ 1069.259337][ T1090] team0 (unregistering): Port device team_slave_0 removed
[ 1069.352339][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1069.436741][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1070.543070][ T1090] bond0 (unregistering): Released all slaves
[ 1073.688094][ T1090] IPVS: stop unused estimator thread 0...
[ 1074.299588][T14979] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1074.344195][T14979] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1074.392715][T14979] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1074.427022][T14979] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1074.809566][T14979] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1074.876722][T14979] 8021q: adding VLAN 0 to HW filter on device team0
[ 1075.034596][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1075.041950][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1075.107290][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.114586][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1075.846363][T14979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1076.506361][T14979] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.636363][T14979] veth0_vlan: entered promiscuous mode
[ 1076.760211][T14979] veth1_vlan: entered promiscuous mode
[ 1077.908184][T14979] veth0_macvtap: entered promiscuous mode
[ 1078.907548][T14979] veth1_macvtap: entered promiscuous mode
[ 1079.002145][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.032878][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.061819][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.074475][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.084947][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.096020][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.113385][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.124485][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.151021][T14979] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1079.192689][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1079.232777][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.268932][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1079.297127][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.362586][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1079.401204][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.413517][T14979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1079.437009][T14979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.478396][T14979] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1079.522104][T14979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.585008][T14979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.613901][T14979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.622781][T14979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.019691][T14010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.108700][T14010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.281406][T14010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.289388][T14010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.715371][T15216] netlink: 'syz.3.2558': attribute type 39 has an invalid length.
[ 1081.140229][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2559'.
[ 1082.339967][T12134] IPVS: starting estimator thread 0...
[ 1082.348411][T15242] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1082.432735][T15243] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1087.860119][T15318] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.792552][ T7459] IPVS: starting estimator thread 0...
[ 1088.802595][T15324] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1088.900252][T15325] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1090.060028][T15334] loop3: detected capacity change from 0 to 256
[ 1090.130006][T15334] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1090.152035][T15334] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1090.191519][T15334] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[ 1094.178395][ T5771] Bluetooth: hci3: command 0x0406 tx timeout
[ 1096.464726][T15386] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1096.998243][T15390] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1102.135965][T15430] lo speed is unknown, defaulting to 1000
[ 1106.006698][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'.
[ 1106.047692][T15454] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2616'.
[ 1106.068785][T15454] gretap0: entered promiscuous mode
[ 1106.807731][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1106.866520][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1110.158664][ T5819] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1110.473316][ T5819] usb 4-1: Using ep0 maxpacket: 8
[ 1110.492389][ T5819] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1110.520499][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.529386][ T5819] usb 4-1: Product: syz
[ 1110.534309][ T5819] usb 4-1: Manufacturer: syz
[ 1110.539325][ T5819] usb 4-1: SerialNumber: syz
[ 1110.573185][T11711] libceph: connect (1)[b::]:6789 error -101
[ 1110.583848][ T5819] usb 4-1: config 0 descriptor??
[ 1110.596545][T11711] libceph: mon0 (1)[b::]:6789 connect error
[ 1110.612219][ T5819] option 4-1:0.0: GSM modem (1-port) converter detected
[ 1110.708465][T15501] fuse: Bad value for 'fd'
[ 1110.804557][ T7459] usb 4-1: USB disconnect, device number 56
[ 1110.819807][ T7459] option 4-1:0.0: device disconnected
[ 1110.863938][T11711] libceph: connect (1)[b::]:6789 error -101
[ 1110.880211][T11711] libceph: mon0 (1)[b::]:6789 connect error
[ 1111.082097][T15497] ceph: No mds server is up or the cluster is laggy
[ 1112.912230][T15514] loop3: detected capacity change from 0 to 256
[ 1113.628185][T13168] Bluetooth: hci1: command 0x0406 tx timeout
[ 1121.325673][T14599] tipc: Left network mode
[ 1121.941648][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'.
[ 1123.576682][ T7459] IPVS: starting estimator thread 0...
[ 1123.586587][T15618] IPVS: wrr: FWM 3 0x00000003 - no destination available
[ 1123.693470][T15620] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1123.821610][T13168] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1123.835749][T13168] CPU: 1 PID: 13168 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1123.843436][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1123.853511][T13168] Workqueue: hci1 hci_rx_work
[ 1123.858216][T13168] Call Trace:
[ 1123.861533][T13168]  <TASK>
[ 1123.864476][T13168]  dump_stack_lvl+0x18c/0x250
[ 1123.869177][T13168]  ? show_regs_print_info+0x20/0x20
[ 1123.874396][T13168]  ? load_image+0x400/0x400
[ 1123.878932][T13168]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1123.884081][T13168]  ? sysfs_warn_dup+0xa0/0xa0
[ 1123.888802][T13168]  ? do_raw_spin_unlock+0x121/0x230
[ 1123.894026][T13168]  kobject_add_internal+0x61c/0xcc0
[ 1123.899256][T13168]  kobject_add+0x164/0x240
[ 1123.903703][T13168]  ? __rwlock_init+0x150/0x150
[ 1123.908500][T13168]  ? kobject_init+0x1e0/0x1e0
[ 1123.913197][T13168]  ? _raw_spin_unlock+0x28/0x40
[ 1123.918066][T13168]  ? get_device_parent+0x366/0x390
[ 1123.923198][T13168]  device_add+0x408/0xc20
[ 1123.927543][T13168]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1123.932506][T13168]  le_conn_complete_evt+0xf5d/0x1540
[ 1123.937838][T13168]  ? hci_event_packet+0x4cb/0x1270
[ 1123.942969][T13168]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1123.949235][T13168]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1123.954885][T13168]  ? skb_pull_data+0xfb/0x200
[ 1123.959579][T13168]  hci_le_conn_complete_evt+0x187/0x440
[ 1123.965176][T13168]  ? hci_remote_host_features_evt+0x150/0x150
[ 1123.971257][T13168]  hci_event_packet+0x7ba/0x1270
[ 1123.976210][T13168]  ? bis_list+0x290/0x290
[ 1123.980555][T13168]  ? lockdep_hardirqs_on+0x98/0x150
[ 1123.985769][T13168]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1123.990991][T13168]  hci_rx_work+0x43a/0xd60
[ 1123.995435][T13168]  ? process_scheduled_works+0x96f/0x15d0
[ 1124.001174][T13168]  process_scheduled_works+0xa5d/0x15d0
[ 1124.006757][T13168]  ? assign_work+0x430/0x430
[ 1124.011376][T13168]  ? assign_work+0x3d0/0x430
[ 1124.015987][T13168]  worker_thread+0xa55/0xfc0
[ 1124.020597][T13168]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1124.026531][T13168]  ? _raw_spin_unlock+0x40/0x40
[ 1124.031402][T13168]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1124.037324][T13168]  kthread+0x2fa/0x390
[ 1124.041405][T13168]  ? pr_cont_work+0x560/0x560
[ 1124.046096][T13168]  ? kthread_blkcg+0xd0/0xd0
[ 1124.050700][T13168]  ret_from_fork+0x48/0x80
[ 1124.055156][T13168]  ? kthread_blkcg+0xd0/0xd0
[ 1124.059770][T13168]  ret_from_fork_asm+0x11/0x20
[ 1124.064558][T13168]  </TASK>
[ 1124.071600][T13168] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1124.085844][T13168] Bluetooth: hci1: failed to register connection device
[ 1124.918276][T14599] hsr_slave_0: left promiscuous mode
[ 1124.930836][T14599] hsr_slave_1: left promiscuous mode
[ 1125.066534][T14599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1125.141150][T14599] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1125.266113][T14599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1125.471137][T14599] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1126.147617][T14599] bridge_slave_1: left allmulticast mode
[ 1126.191849][T14599] bridge_slave_1: left promiscuous mode
[ 1126.197710][T14599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.263308][T14599] bridge_slave_0: left allmulticast mode
[ 1126.289684][T14599] bridge_slave_0: left promiscuous mode
[ 1126.356055][T14599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.756853][T14599] veth1_macvtap: left promiscuous mode
[ 1127.936708][T14599] veth0_macvtap: left promiscuous mode
[ 1127.943113][T13168] Bluetooth: hci2: command 0x0406 tx timeout
[ 1127.983528][T14599] veth1_vlan: left promiscuous mode
[ 1128.163708][T14599] veth0_vlan: left promiscuous mode
[ 1135.458323][T15702] loop3: detected capacity change from 0 to 1024
[ 1135.539312][T15702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1135.570213][T15702] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1135.693063][T15706] EXT4-fs error (device loop3): ext4_free_blocks:6692: comm syz.3.2698: Freeing blocks not in datazone - block = 0, count = 16
[ 1135.728530][T15706] EXT4-fs (loop3): Remounting filesystem read-only
[ 1135.784703][T14979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1136.125213][T14599] team0 (unregistering): Port device team_slave_1 removed
[ 1136.197396][T14599] team0 (unregistering): Port device team_slave_0 removed
[ 1136.253854][T14599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1136.318769][T14599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1136.736192][T14599] bond0 (unregistering): Released all slaves
[ 1136.851037][ T5858] lo speed is unknown, defaulting to 1000
[ 1141.756233][T14599] IPVS: stop unused estimator thread 0...
[ 1142.718232][T15758] loop3: detected capacity change from 0 to 256
[ 1142.814441][T15758] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1148.003586][T15785] IPVS: wrr: FWM 3 0x00000003 - no destination available
[ 1151.308357][T15809] ipt_REJECT: ECHOREPLY no longer supported.
[ 1155.205762][T15847] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1155.423519][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2741'.
[ 1156.265630][T15855] syz_tun: entered allmulticast mode
[ 1156.289081][T15854] syz_tun: left allmulticast mode
[ 1159.236979][T15879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2751'.
[ 1160.867837][T15890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[ 1160.972535][T15890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[ 1160.990688][T15893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[ 1163.408335][T15926] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1164.980699][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1164.987194][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1166.457971][T15963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2781'.
[ 1167.760673][T15975] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2775'.
[ 1168.400522][   T28] IPVS: starting estimator thread 0...
[ 1168.407144][T15982] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1168.515768][T15987] IPVS: using max 17 ests per chain, 40800 per kthread
[ 1169.546475][T16016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'.
[ 1169.555884][T16016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'.
[ 1169.574369][T16016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'.
[ 1169.967776][T16011] loop3: detected capacity change from 0 to 40427
[ 1170.015237][T16011] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 1170.030760][T16011] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1170.046597][T16011] F2FS-fs (loop3): invalid crc value
[ 1170.067806][T16011] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1170.149718][T16011] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[ 1170.161177][T16011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[ 1170.228060][T16011] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[ 1170.275391][T16032] f2fs_ckpt-7:3: attempt to access beyond end of device
[ 1170.275391][T16032] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1170.299625][T16032] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1170.621653][T16011] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2796'.
[ 1170.971815][T16040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2809'.
[ 1171.218257][T16046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2812'.
[ 1171.256743][T16046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2812'.
[ 1171.290555][T16049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2812'.
[ 1172.303838][T16062] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2819'.
[ 1172.331587][T16062] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2819'.
[ 1172.959247][T16081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2821'.
[ 1174.600201][T16098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2833'.
[ 1176.150487][T16117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2834'.
[ 1176.993822][T16105] Bluetooth: hci0: command 0x0406 tx timeout
[ 1178.134768][T16144] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1180.257053][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'.
[ 1180.310432][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'.
[ 1180.880099][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'.
[ 1180.889213][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'.
[ 1183.561282][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'.
[ 1183.570534][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'.
[ 1186.870211][T16238] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1192.485205][T16312] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2903'.
[ 1192.708472][T16319] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2910'.
[ 1194.632072][T16352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2922'.
[ 1194.674336][T16352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2922'.
[ 1194.710674][T16353] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2922'.
[ 1194.777445][T16352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2922'.
[ 1195.919337][T16382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2933'.
[ 1198.761857][T16423] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1199.583692][T16435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2953'.
[ 1200.034920][T16446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2955'.
[ 1202.438665][T16478] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1203.229566][T16490] netlink: 'syz.3.2972': attribute type 22 has an invalid length.
[ 1204.639668][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[ 1204.648755][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2977'.
[ 1206.079484][T16517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'.
[ 1206.105247][T16517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'.
[ 1206.122407][T16520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2981'.
[ 1206.142381][T16522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'.
[ 1206.243149][T16517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'.
[ 1206.587396][T16537] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1207.793453][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'.
[ 1207.802535][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'.
[ 1209.444282][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'.
[ 1209.454351][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'.
[ 1210.779105][T16585] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1211.204793][  T787] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1211.481008][  T787] usb 4-1: Using ep0 maxpacket: 16
[ 1211.520171][  T787] usb 4-1: config 1 has an invalid interface number: 36 but max is 0
[ 1211.543984][  T787] usb 4-1: config 1 has no interface number 0
[ 1211.577255][  T787] usb 4-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1211.593035][  T787] usb 4-1: config 1 interface 36 has no altsetting 0
[ 1211.618146][  T787] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[ 1211.641993][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.656889][  T787] usb 4-1: Product: syz
[ 1211.661292][  T787] usb 4-1: Manufacturer: syz
[ 1211.668495][  T787] usb 4-1: SerialNumber: syz
[ 1211.696722][T16581] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1211.810349][  T787] ums-usbat 4-1:1.36: USB Mass Storage device detected
[ 1211.962241][  T787] usb 4-1: USB disconnect, device number 57
[ 1212.745500][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'.
[ 1212.754868][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'.
[ 1216.710879][T16641] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1216.924877][T16645] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1217.214855][  T787] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1217.415066][  T787] usb 4-1: Using ep0 maxpacket: 16
[ 1217.427091][  T787] usb 4-1: config 1 has an invalid interface number: 36 but max is 0
[ 1217.452988][  T787] usb 4-1: config 1 has no interface number 0
[ 1217.459652][  T787] usb 4-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1217.480159][  T787] usb 4-1: config 1 interface 36 has no altsetting 0
[ 1217.504537][  T787] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[ 1217.520059][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.528107][  T787] usb 4-1: Product: syz
[ 1217.538931][  T787] usb 4-1: Manufacturer: syz
[ 1217.543624][  T787] usb 4-1: SerialNumber: syz
[ 1217.570929][T16631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1217.694664][  T787] ums-usbat 4-1:1.36: USB Mass Storage device detected
[ 1218.024550][  T787] usb 4-1: USB disconnect, device number 58
[ 1219.110353][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'.
[ 1219.119424][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'.
[ 1222.981195][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'.
[ 1223.442795][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3038'.
[ 1223.499220][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1223.508204][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1223.749047][T16714] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1226.860465][T16746] loop3: detected capacity change from 0 to 256
[ 1227.728931][T16759] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1227.954772][T16767] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[ 1229.414591][T16792] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1231.579160][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'.
[ 1232.935781][T16843] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1234.397709][ T7459] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1234.597506][ T7459] usb 4-1: Using ep0 maxpacket: 8
[ 1234.618762][ T7459] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1234.633560][ T7459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.663316][ T7459] usb 4-1: Product: syz
[ 1234.673454][ T7459] usb 4-1: Manufacturer: syz
[ 1234.679286][ T7459] usb 4-1: SerialNumber: syz
[ 1234.694461][ T7459] usb 4-1: config 0 descriptor??
[ 1234.709081][ T7459] option 4-1:0.0: GSM modem (1-port) converter detected
[ 1235.169165][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3095'.
[ 1235.903694][T15687] usb 4-1: USB disconnect, device number 59
[ 1236.278033][T15687] option 4-1:0.0: device disconnected
[ 1236.717991][T16887] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 1237.185285][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'.
[ 1237.240881][T16897] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1239.486402][T16926] capability: warning: `syz.2.3116' uses deprecated v2 capabilities in a way that may be insecure
[ 1241.275238][T16950] loop3: detected capacity change from 0 to 512
[ 1241.954649][T16950] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1242.141137][T16950] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[ 1242.190673][T16950] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.3127: Invalid inode table block 1 in block_group 0
[ 1242.233782][T16950] EXT4-fs (loop3): get root inode failed
[ 1242.245323][T16950] EXT4-fs (loop3): mount failed
[ 1245.512779][T15687] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1245.703129][T15687] usb 4-1: Using ep0 maxpacket: 16
[ 1245.709987][T15687] usb 4-1: config 1 has an invalid interface number: 36 but max is 0
[ 1245.718871][T15687] usb 4-1: config 1 has no interface number 0
[ 1245.725114][T15687] usb 4-1: config 1 interface 36 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1245.736248][T15687] usb 4-1: config 1 interface 36 has no altsetting 0
[ 1245.747602][T15687] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[ 1245.757114][T15687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.766305][T15687] usb 4-1: Product: syz
[ 1245.771282][T15687] usb 4-1: Manufacturer: syz
[ 1245.776463][T15687] usb 4-1: SerialNumber: syz
[ 1245.790895][T16987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1245.865748][T16994] overlayfs: failed to clone upperpath
[ 1246.006497][T15687] ums-usbat 4-1:1.36: USB Mass Storage device detected
[ 1246.108198][T15687] usb 4-1: USB disconnect, device number 60
[ 1246.416615][T17004] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1253.697558][T17071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3164'.
[ 1254.853926][T17081] overlayfs: failed to clone upperpath
[ 1255.152035][T17087] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1256.176283][T17102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3174'.
[ 1256.850329][T17110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3177'.
[ 1258.137966][T17120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3180'.
[ 1258.791374][T17128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3183'.
[ 1259.845072][T17139] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1260.271051][T17149] netlink: 'syz.1.3190': attribute type 8 has an invalid length.
[ 1260.283583][T17149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3190'.
[ 1260.487082][T17153] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1260.922435][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3192'.
[ 1261.677418][T17162] loop3: detected capacity change from 0 to 256
[ 1262.161238][T17162] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1262.172294][T17162] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1262.193653][T17162] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[ 1264.299169][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3201'.
[ 1266.139999][T17200] loop3: detected capacity change from 0 to 32768
[ 1266.171804][T17200] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1266.234247][T17200] XFS (loop3): Ending clean mount
[ 1266.260085][T17200] XFS (loop3): Quotacheck needed: Please wait.
[ 1266.379798][T17200] XFS (loop3): Quotacheck: Done.
[ 1266.473669][   T27] audit: type=1326 audit(1770197617.282:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.548615][   T27] audit: type=1326 audit(1770197617.282:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.636401][   T27] audit: type=1326 audit(1770197617.293:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.712284][   T27] audit: type=1800 audit(1770197617.293:47): pid=17200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3206" name="bus" dev="loop3" ino=6155 res=0 errno=0
[ 1266.780181][   T27] audit: type=1326 audit(1770197617.293:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.846801][   T27] audit: type=1326 audit(1770197617.293:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.895088][T14979] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1266.898479][   T27] audit: type=1326 audit(1770197617.293:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.975404][   T27] audit: type=1326 audit(1770197617.293:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1266.999224][   T27] audit: type=1326 audit(1770197617.293:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1267.022467][   T27] audit: type=1326 audit(1770197617.293:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9dc019aeb9 code=0x7ffc0000
[ 1267.882278][T17224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3213'.
[ 1270.514871][T17258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3225'.
[ 1270.550184][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'.
[ 1274.005971][T17287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3234'.
[ 1276.149888][T17312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3244'.
[ 1277.383029][T17324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3246'.
[ 1278.155550][T17341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3254'.
[ 1278.238533][T17343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3255'.
[ 1280.316006][T17362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3264'.
[ 1384.419992][    C1] ------------[ cut here ]------------
[ 1384.427343][    C1] WARNING: CPU: 1 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.437674][    C1] Modules linked in:
[ 1384.441638][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1384.448713][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1384.458845][    C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.465421][    C1] Code: ff ff ff 48 c7 c7 a0 84 30 97 be 04 00 00 00 e8 6a ca 6d 00 48 89 df b8 01 00 00 00 87 05 1c 11 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 72 13 8d 74 47 48 c7 c0 6c 14 8b 8e 48 c1 e8 03
[ 1384.485186][    C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046
[ 1384.491391][    C1] RAX: 0000000000000000 RBX: ffffffff8d137240 RCX: ffffffff81717376
[ 1384.499397][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137240
[ 1384.507402][    C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004
[ 1384.515428][    C1] R10: dffffc0000000000 R11: fffffbfff2e61094 R12: 0000000000002904
[ 1384.523448][    C1] R13: ffffffff8d137240 R14: 0000000000000a02 R15: dffffc0000000000
[ 1384.531457][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1384.540447][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1384.547078][    C1] CR2: 0000200000029000 CR3: 0000000060478000 CR4: 00000000003506e0
[ 1384.555107][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1384.563137][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1384.571164][    C1] Call Trace:
[ 1384.574489][    C1]  <IRQ>
[ 1384.577388][    C1]  rcu_core+0x635/0x1770
[ 1384.581680][    C1]  ? lock_chain_count+0x20/0x20
[ 1384.586577][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1384.592180][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1384.597429][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1384.602675][    C1]  ? rcu_cpu_kthread_park+0x90/0x90
[ 1384.607925][    C1]  ? __run_timers+0x7a0/0x800
[ 1384.612643][    C1]  ? __run_timers+0x763/0x800
[ 1384.617370][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1384.622102][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1384.626823][    C1]  ? lock_chain_count+0x20/0x20
[ 1384.631758][    C1]  handle_softirqs+0x280/0x820
[ 1384.636588][    C1]  ? __irq_exit_rcu+0xd3/0x190
[ 1384.641418][    C1]  ? do_softirq+0x1a0/0x1a0
[ 1384.646007][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 1384.651266][    C1]  __irq_exit_rcu+0xd3/0x190
[ 1384.655909][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1384.660565][    C1]  irq_exit_rcu+0x9/0x20
[ 1384.664848][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1384.670526][    C1]  </IRQ>
[ 1384.673499][    C1]  <TASK>
[ 1384.676467][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1384.682494][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 1384.688180][    C1] Code: f8 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 33 02 44 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80
[ 1384.707835][    C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2
[ 1384.713948][    C1] RAX: 3ff014ff67583100 RBX: ffffffff8162a490 RCX: 3ff014ff67583100
[ 1384.721984][    C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0
[ 1384.730030][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65
[ 1384.738067][    C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff1100384a780
[ 1384.746086][    C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000
[ 1384.754153][    C1]  ? do_idle+0x1f0/0x4e0
[ 1384.758456][    C1]  default_idle+0x13/0x20
[ 1384.762832][    C1]  default_idle_call+0x6c/0xa0
[ 1384.767646][    C1]  do_idle+0x1f0/0x4e0
[ 1384.771773][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1384.777027][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1384.782287][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1384.788506][    C1]  cpu_startup_entry+0x43/0x60
[ 1384.793318][    C1]  start_secondary+0xee/0xf0
[ 1384.798010][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[ 1384.804158][    C1]  </TASK>
[ 1384.807218][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1384.814543][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1384.821679][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1384.831763][    C1] Call Trace:
[ 1384.835071][    C1]  <IRQ>
[ 1384.837945][    C1]  dump_stack_lvl+0x18c/0x250
[ 1384.842672][    C1]  ? show_regs_print_info+0x20/0x20
[ 1384.847916][    C1]  ? load_image+0x400/0x400
[ 1384.852524][    C1]  panic+0x2dc/0x730
[ 1384.856469][    C1]  ? bpf_jit_dump+0xd0/0xd0
[ 1384.861033][    C1]  ? secondary_startup_64_no_verify+0x179/0x17b
[ 1384.867336][    C1]  __warn+0x2e0/0x470
[ 1384.871702][    C1]  ? rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.877466][    C1]  ? rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.883236][    C1]  report_bug+0x2be/0x4f0
[ 1384.887616][    C1]  ? rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.893487][    C1]  ? rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.899257][    C1]  ? rcu_check_gp_start_stall+0x2de/0x460
[ 1384.905021][    C1]  handle_bug+0xcf/0x120
[ 1384.909325][    C1]  exc_invalid_op+0x1a/0x50
[ 1384.913884][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 1384.918778][    C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460
[ 1384.925156][    C1] Code: ff ff ff 48 c7 c7 a0 84 30 97 be 04 00 00 00 e8 6a ca 6d 00 48 89 df b8 01 00 00 00 87 05 1c 11 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 72 13 8d 74 47 48 c7 c0 6c 14 8b 8e 48 c1 e8 03
[ 1384.944806][    C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046
[ 1384.950912][    C1] RAX: 0000000000000000 RBX: ffffffff8d137240 RCX: ffffffff81717376
[ 1384.958915][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137240
[ 1384.966929][    C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004
[ 1384.974937][    C1] R10: dffffc0000000000 R11: fffffbfff2e61094 R12: 0000000000002904
[ 1384.982982][    C1] R13: ffffffff8d137240 R14: 0000000000000a02 R15: dffffc0000000000
[ 1384.991004][    C1]  ? rcu_check_gp_start_stall+0x2c6/0x460
[ 1384.996799][    C1]  ? rcu_check_gp_start_stall+0x2c6/0x460
[ 1385.002725][    C1]  rcu_core+0x635/0x1770
[ 1385.007013][    C1]  ? lock_chain_count+0x20/0x20
[ 1385.011905][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1385.017511][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1385.022752][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1385.028010][    C1]  ? rcu_cpu_kthread_park+0x90/0x90
[ 1385.033260][    C1]  ? __run_timers+0x7a0/0x800
[ 1385.037980][    C1]  ? __run_timers+0x763/0x800
[ 1385.042709][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1385.047442][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1385.052184][    C1]  ? lock_chain_count+0x20/0x20
[ 1385.057171][    C1]  handle_softirqs+0x280/0x820
[ 1385.062160][    C1]  ? __irq_exit_rcu+0xd3/0x190
[ 1385.066975][    C1]  ? do_softirq+0x1a0/0x1a0
[ 1385.071536][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 1385.076878][    C1]  __irq_exit_rcu+0xd3/0x190
[ 1385.081515][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1385.086069][    C1]  irq_exit_rcu+0x9/0x20
[ 1385.090347][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1385.096030][    C1]  </IRQ>
[ 1385.099003][    C1]  <TASK>
[ 1385.101985][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1385.108021][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 1385.113712][    C1] Code: f8 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 33 02 44 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80
[ 1385.133448][    C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2
[ 1385.139561][    C1] RAX: 3ff014ff67583100 RBX: ffffffff8162a490 RCX: 3ff014ff67583100
[ 1385.147660][    C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0
[ 1385.155681][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65
[ 1385.163706][    C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff1100384a780
[ 1385.171736][    C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000
[ 1385.179839][    C1]  ? do_idle+0x1f0/0x4e0
[ 1385.184146][    C1]  default_idle+0x13/0x20
[ 1385.188512][    C1]  default_idle_call+0x6c/0xa0
[ 1385.193316][    C1]  do_idle+0x1f0/0x4e0
[ 1385.197436][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1385.202681][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1385.207919][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1385.214136][    C1]  cpu_startup_entry+0x43/0x60
[ 1385.219042][    C1]  start_secondary+0xee/0xf0
[ 1385.223674][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[ 1385.229805][    C1]  </TASK>
[ 1385.233439][    C1] Kernel Offset: disabled
[ 1385.238523][    C1] Rebooting in 86400 seconds..