last executing test programs:

16.352662184s ago: executing program 2 (id=2949):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca1cb72}, 0x4000)

16.136505993s ago: executing program 2 (id=2952):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x8c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)

15.882507922s ago: executing program 2 (id=2955):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})

5.03925947s ago: executing program 0 (id=3033):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4.949075308s ago: executing program 0 (id=3035):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf2505000000080002000800000005000500c00000002c000180060001000a00000005000200040000000500020008000000080003006401010108000300ac1414aa08000200000000000500050006000000050005000700000005000500090000004c00018005000200dc000000060005004e24000008000700", @ANYRES32=r2, @ANYBLOB="0502000a00000014000400fc0100faffffffffffffff000000000014000400ff020000000000000000000000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0xd10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000095)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)
ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r9, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

4.449860408s ago: executing program 0 (id=3039):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket(0x2, 0x80805, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.113474226s ago: executing program 0 (id=3042):
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, 0x0, 0x41)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002)

3.413836088s ago: executing program 1 (id=3048):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf2505000000080002000800000005000500c00000002c000180060001000a00000005000200040000000500020008000000080003006401010108000300ac1414aa08000200000000000500050006000000050005000700000005000500090000004c00018005000200dc000000060005004e24000008000700", @ANYRES32=r2, @ANYBLOB="0502000a00000014000400fc0100faffffffffffffff000000000014000400ff020000000000000000000000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0xd10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000095)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)
ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r10, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

3.119976811s ago: executing program 0 (id=3049):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.956332235s ago: executing program 1 (id=3050):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf2505000000080002000800000005000500c00000002c000180060001000a00000005000200040000000500020008000000080003006401010108000300ac1414aa08000200000000000500050006000000050005000700000005000500090000004c00018005000200dc000000060005004e24000008000700", @ANYRES32=r2, @ANYBLOB="0502000a00000014000400fc0100faffffffffffffff000000000014000400ff020000000000000000000000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0xd10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000095)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

2.819907004s ago: executing program 3 (id=3051):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.720925148s ago: executing program 4 (id=3053):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)

2.700074883s ago: executing program 0 (id=3054):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$int_in(r2, 0x5452, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.353671194s ago: executing program 1 (id=3055):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2.266118272s ago: executing program 3 (id=3056):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
close(0x4)
socket$tipc(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)

1.984791025s ago: executing program 4 (id=3057):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000082"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.919999667s ago: executing program 1 (id=3058):
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, 0x0, 0x41)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002)

1.823809023s ago: executing program 4 (id=3059):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf2505000000080002000800000005000500c00000002c000180060001000a00000005000200040000000500020008000000080003006401010108000300ac1414aa08000200000000000500050006000000050005000700000005000500090000004c00018005000200dc000000060005004e24000008000700", @ANYRES32=r2, @ANYBLOB="0502000a00000014000400fc0100faffffffffffffff000000000014000400ff020000000000000000000000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0xd10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000095)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)
ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r10, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

1.769091988s ago: executing program 2 (id=2958):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

1.446609527s ago: executing program 2 (id=3060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r0, 0x0, 0x8800)
socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x4000c00)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
accept$netrom(r2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x20000000000000e4, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000010010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb7140000088148e24090a3e1e6ac4245e770b10b9b49c7e87804233739afcd4fe05160ca0df75801bbd9f0a0e70ee115fca44f3b20020e4e1211df754d5843346761e7b437a55bf15e941d8dd94421aab2eccc9a13742bacff5e680f3d175be331960f90e12f8ae34381da64eba24ec315e5d0d3620b0a55978c0137d5594268317a32ac5e326fbd40e380", @ANYRESOCT, @ANYRESOCT=r4, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r2, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000200)={'geneve1\x00', 0x500})

1.44143185s ago: executing program 4 (id=3061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890)

1.171441763s ago: executing program 3 (id=3063):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.170968491s ago: executing program 4 (id=3064):
r0 = socket(0x28, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x0)
socket(0x28, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
accept4$unix(r0, 0x0, 0x0, 0x80800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1.055030924s ago: executing program 3 (id=3065):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff3}, {}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x91d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)

927.748488ms ago: executing program 1 (id=3066):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4})

574.381592ms ago: executing program 1 (id=3067):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x80000000, 0x46f, 0xfff, 0x5, 0x1fe}, [@TCA_NETEM_RATE={0x14, 0x6, {0xff, 0x2, 0x6, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

560.169316ms ago: executing program 3 (id=3068):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000082"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

278.92916ms ago: executing program 3 (id=3069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)

150.395501ms ago: executing program 4 (id=3070):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

0s ago: executing program 2 (id=3071):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x1d, 0x3, 0x9, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

s leftover after parsing attributes in process `syz.4.1654'.
[  355.121198][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  355.143787][ T5896] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  355.539386][  T980] usb 4-1: USB disconnect, device number 23
[  356.018697][T11074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.070815][T11074] tipc: Resetting bearer <eth:syzkaller0>
[  356.191114][T11079] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1667'.
[  356.311959][  T980] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  356.335895][T11072] tipc: Disabling bearer <eth:syzkaller0>
[  356.516434][  T980] usb 4-1: device descriptor read/64, error -71
[  356.573498][ T5928] usb 2-1: USB disconnect, device number 30
[  356.806607][  T980] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  356.920140][T11096] netlink: 'syz.1.1675': attribute type 1 has an invalid length.
[  356.933310][T11096] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1675'.
[  356.966659][ T1541] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  356.966659][  T980] usb 4-1: device descriptor read/64, error -71
[  357.096769][  T980] usb usb4-port1: attempt power cycle
[  357.126419][ T1541] usb 5-1: Using ep0 maxpacket: 32
[  357.134707][ T1541] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  357.143277][ T1541] usb 5-1: config 0 has no interface number 0
[  357.151627][ T1541] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  357.168457][ T1541] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  357.194386][ T1541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.213437][ T1541] usb 5-1: Product: syz
[  357.218267][ T1541] usb 5-1: Manufacturer: syz
[  357.222992][ T1541] usb 5-1: SerialNumber: syz
[  357.247454][ T1541] usb 5-1: config 0 descriptor??
[  357.267980][T11087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  357.313352][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1681'.
[  357.437159][  T980] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  357.638491][T11087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  357.671590][  T980] usb 4-1: device descriptor read/8, error -71
[  357.696887][ T5928] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  357.906267][ T5928] usb 3-1: Using ep0 maxpacket: 32
[  357.937168][  T980] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  358.001969][ T5928] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  358.024459][ T5928] usb 3-1: config 0 has no interface number 0
[  358.041915][  T980] usb 4-1: device descriptor read/8, error -71
[  358.053179][ T5928] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  358.066610][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.074823][ T5928] usb 3-1: Product: syz
[  358.080614][ T5928] usb 3-1: Manufacturer: syz
[  358.085327][ T5928] usb 3-1: SerialNumber: syz
[  358.119991][ T5928] usb 3-1: config 0 descriptor??
[  358.150736][ T5928] smsc95xx v2.0.0
[  358.161592][  T980] usb usb4-port1: unable to enumerate USB device
[  358.284629][T11121] vlan2: entered promiscuous mode
[  358.310540][ T1541] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  358.326389][ T1541] asix 5-1:0.188: probe with driver asix failed with error -61
[  358.449325][T11125] netlink: 'syz.1.1687': attribute type 1 has an invalid length.
[  358.457949][T11125] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1687'.
[  358.551528][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  358.565731][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  358.961272][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1692'.
[  359.627205][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  359.651307][ T5928] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[  359.722081][T11149] netlink: 'syz.3.1696': attribute type 1 has an invalid length.
[  359.774027][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'.
[  359.789340][ T5896] usb 5-1: USB disconnect, device number 45
[  359.816003][T11149] 8021q: adding VLAN 0 to HW filter on device bond3
[  360.302274][T11175] syzkaller0: entered promiscuous mode
[  360.327465][T11175] syzkaller0: entered allmulticast mode
[  360.448639][T11183] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  360.480037][  T980] usb 3-1: USB disconnect, device number 21
[  360.634032][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'.
[  360.942885][T11199] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1715'.
[  361.018857][T11202] netlink: 'syz.1.1717': attribute type 1 has an invalid length.
[  361.032492][T11202] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1717'.
[  361.194633][T11211] syzkaller0: entered promiscuous mode
[  361.213732][T11211] syzkaller0: entered allmulticast mode
[  361.296375][ T5928] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  361.460502][ T5928] usb 1-1: Using ep0 maxpacket: 32
[  361.506495][ T5928] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  361.555659][ T5928] usb 1-1: config 0 has no interface number 0
[  361.597457][ T5928] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  361.629117][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.647326][ T5928] usb 1-1: Product: syz
[  361.657642][ T5928] usb 1-1: Manufacturer: syz
[  361.670377][ T5928] usb 1-1: SerialNumber: syz
[  361.696933][ T5928] usb 1-1: config 0 descriptor??
[  361.717289][ T5928] smsc95xx v2.0.0
[  362.113634][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  362.143093][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  362.647034][ T5896] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  362.810437][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.841904][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  362.878134][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.911978][ T5896] usb 4-1: config 0 descriptor??
[  362.929796][ T5896] pwc: Askey VC010 type 2 USB webcam detected.
[  362.992476][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  363.035082][ T5928] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  363.134164][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'.
[  363.188809][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'.
[  363.207609][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  363.207686][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'.
[  363.217119][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.278731][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'.
[  363.298059][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  363.312686][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  363.333323][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00
[  363.350603][ T5896] pwc: recv_control_msg error -32 req 02 val 2700
[  363.377744][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00
[  363.393104][ T5896] pwc: recv_control_msg error -32 req 04 val 1000
[  363.411281][ T5896] pwc: recv_control_msg error -32 req 04 val 1300
[  363.488364][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'.
[  363.629356][ T5896] pwc: recv_control_msg error -32 req 02 val 2000
[  363.655677][ T5896] pwc: recv_control_msg error -32 req 02 val 2100
[  363.697622][ T5896] pwc: recv_control_msg error -32 req 04 val 1500
[  363.707176][ T5896] pwc: recv_control_msg error -32 req 02 val 2500
[  363.715981][ T5896] pwc: recv_control_msg error -32 req 02 val 2400
[  363.725002][ T5896] pwc: recv_control_msg error -32 req 02 val 2600
[  363.935075][ T5896] pwc: recv_control_msg error -71 req 02 val 2800
[  363.946808][ T5896] pwc: recv_control_msg error -71 req 04 val 1100
[  363.954162][ T5896] pwc: recv_control_msg error -71 req 04 val 1200
[  363.966702][ T5896] pwc: Registered as video103.
[  363.985617][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37
[  364.048543][ T5896] usb 4-1: USB disconnect, device number 28
[  364.159795][   T42] usb 1-1: USB disconnect, device number 22
[  365.147948][  T980] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  365.337512][  T980] usb 1-1: Using ep0 maxpacket: 32
[  365.414798][  T980] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  365.419270][T11343] syzkaller0: entered promiscuous mode
[  365.423907][  T980] usb 1-1: config 0 has no interface number 0
[  365.458825][T11343] syzkaller0: entered allmulticast mode
[  365.546759][  T980] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  365.555818][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.583641][  T980] usb 1-1: Product: syz
[  365.612022][  T980] usb 1-1: Manufacturer: syz
[  365.631984][  T980] usb 1-1: SerialNumber: syz
[  365.649362][  T980] usb 1-1: config 0 descriptor??
[  365.678477][  T980] smsc95xx v2.0.0
[  365.858193][   T42] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  366.021989][   T42] usb 2-1: Using ep0 maxpacket: 32
[  366.030850][   T42] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  366.046379][   T42] usb 2-1: config 0 has no interface number 0
[  366.056892][   T42] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  366.069964][   T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  366.080129][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.095063][   T42] usb 2-1: Product: syz
[  366.095429][  T980] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  366.099750][   T42] usb 2-1: Manufacturer: syz
[  366.115747][   T42] usb 2-1: SerialNumber: syz
[  366.141545][   T42] usb 2-1: config 0 descriptor??
[  366.146302][  T980] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  366.165198][T11360] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  366.410305][T11360] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  367.037032][  T980] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  367.048303][   T42] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  367.076975][   T42] asix 2-1:0.188: probe with driver asix failed with error -61
[  367.077290][  T980] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  368.085468][   T42] usb 1-1: USB disconnect, device number 23
[  368.640590][ T5896] usb 2-1: USB disconnect, device number 31
[  368.882532][T11387] sctp: [Deprecated]: syz.1.1779 (pid 11387) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.882532][T11387] Use struct sctp_sack_info instead
[  368.938005][T11387] sctp: [Deprecated]: syz.1.1779 (pid 11387) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.938005][T11387] Use struct sctp_sack_info instead
[  369.381121][T11404] netlink: 'syz.3.1787': attribute type 1 has an invalid length.
[  369.396956][T11404] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1787'.
[  369.416411][ T5896] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  369.586336][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  369.598289][ T5896] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  369.611815][ T5896] usb 5-1: config 0 has no interface number 0
[  369.629137][ T5896] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  369.645550][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.668372][ T5896] usb 5-1: Product: syz
[  369.693234][ T5896] usb 5-1: Manufacturer: syz
[  369.706634][ T5896] usb 5-1: SerialNumber: syz
[  369.738623][ T5896] usb 5-1: config 0 descriptor??
[  369.763366][ T5896] smsc95xx v2.0.0
[  370.177442][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  370.226300][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  370.362959][T11425] bond_slave_0: entered promiscuous mode
[  370.368791][T11425] bond_slave_1: entered promiscuous mode
[  370.374526][T11425] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  370.463375][T11425] vlan3: entered promiscuous mode
[  370.490247][T11425] bond0: entered promiscuous mode
[  370.863792][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'.
[  371.080745][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  371.102741][ T5896] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32
[  372.110928][T11466] netlink: 'syz.2.1806': attribute type 1 has an invalid length.
[  372.157605][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'.
[  372.191967][ T5841] usb 5-1: USB disconnect, device number 46
[  372.284973][   T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.294204][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'.
[  372.331710][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.359763][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.407689][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.910760][T11483] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  372.926320][  T980] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  373.038369][T11483] 8021q: adding VLAN 0 to HW filter on device bond2
[  373.150433][  T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.179870][  T980] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  373.216364][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.266789][  T980] usb 5-1: config 0 descriptor??
[  373.283627][  T980] pwc: Askey VC010 type 2 USB webcam detected.
[  373.397853][T11500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  373.408832][T11500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  373.419242][T11500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'.
[  373.516355][ T5896] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  373.666581][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  373.683797][ T5896] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  373.693057][ T5896] usb 2-1: config 0 has no interface number 0
[  373.703707][  T980] pwc: recv_control_msg error -32 req 02 val 2b00
[  373.716877][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  373.716972][  T980] pwc: recv_control_msg error -32 req 02 val 2700
[  373.726046][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.726072][ T5896] usb 2-1: Product: syz
[  373.726087][ T5896] usb 2-1: Manufacturer: syz
[  373.726101][ T5896] usb 2-1: SerialNumber: syz
[  373.751968][  T980] pwc: recv_control_msg error -32 req 02 val 2c00
[  373.763370][  T980] pwc: recv_control_msg error -32 req 04 val 1000
[  373.772294][ T5896] usb 2-1: config 0 descriptor??
[  373.773588][  T980] pwc: recv_control_msg error -32 req 04 val 1300
[  373.787533][  T980] pwc: recv_control_msg error -32 req 04 val 1400
[  373.795347][  T980] pwc: recv_control_msg error -32 req 02 val 2000
[  373.803075][  T980] pwc: recv_control_msg error -32 req 02 val 2100
[  373.803929][ T5896] smsc95xx v2.0.0
[  373.810952][  T980] pwc: recv_control_msg error -32 req 04 val 1500
[  373.811795][  T980] pwc: recv_control_msg error -32 req 02 val 2500
[  373.828862][  T980] pwc: recv_control_msg error -32 req 02 val 2400
[  373.836488][  T980] pwc: recv_control_msg error -32 req 02 val 2600
[  373.844221][  T980] pwc: recv_control_msg error -32 req 02 val 2900
[  373.857120][  T980] pwc: recv_control_msg error -32 req 02 val 2800
[  374.067957][  T980] pwc: recv_control_msg error -71 req 04 val 1200
[  374.077081][  T980] pwc: Registered as video103.
[  374.098593][  T980] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38
[  374.133065][  T980] usb 5-1: USB disconnect, device number 47
[  374.210322][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  374.228352][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  374.292883][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  375.061017][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  375.082211][ T5896] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  376.032765][T11533] netlink: 'syz.0.1828': attribute type 1 has an invalid length.
[  376.119914][T11533] 8021q: adding VLAN 0 to HW filter on device bond4
[  376.144626][T11536] syzkaller0: entered promiscuous mode
[  376.150999][T11536] syzkaller0: entered allmulticast mode
[  376.253465][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1831'.
[  376.265088][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1831'.
[  376.351758][T11545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1831'.
[  376.370243][   T42] usb 2-1: USB disconnect, device number 32
[  376.844872][T11554] syzkaller0: entered promiscuous mode
[  376.854517][T11554] syzkaller0: entered allmulticast mode
[  377.058120][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  377.459783][T11566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1840'.
[  378.547148][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  378.751623][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.774761][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  379.046217][ T5928] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  379.198329][ T5928] usb 3-1: Using ep0 maxpacket: 32
[  379.212383][ T5928] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  379.233188][ T5928] usb 3-1: config 0 has no interface number 0
[  379.249018][ T5928] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  379.268053][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.289249][ T5928] usb 3-1: Product: syz
[  379.314423][ T5928] usb 3-1: Manufacturer: syz
[  379.329037][ T5928] usb 3-1: SerialNumber: syz
[  379.349406][ T5928] usb 3-1: config 0 descriptor??
[  379.371234][ T5928] smsc95xx v2.0.0
[  379.774987][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  379.796475][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  379.917401][T11602] syzkaller0: entered promiscuous mode
[  379.923155][T11602] syzkaller0: entered allmulticast mode
[  380.052731][T11605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1855'.
[  380.689370][ T5928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  380.701226][ T5928] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[  381.805135][   T42] usb 3-1: USB disconnect, device number 22
[  382.736351][ T5841] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  382.934226][ T5841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  382.960820][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.986462][ T5841] usb 2-1: Product: syz
[  383.008023][ T5841] usb 2-1: Manufacturer: syz
[  383.063509][ T5841] usb 2-1: SerialNumber: syz
[  383.100152][ T5841] usb 2-1: config 0 descriptor??
[  383.346271][ T5841] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  383.516308][ T5928] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  383.736333][ T5928] usb 1-1: Using ep0 maxpacket: 32
[  383.754448][ T5928] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  383.783825][ T5928] usb 1-1: config 0 has no interface number 0
[  383.804682][ T5928] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  383.856228][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.884880][ T5928] usb 1-1: Product: syz
[  383.905149][ T5928] usb 1-1: Manufacturer: syz
[  383.916363][ T5928] usb 1-1: SerialNumber: syz
[  383.940053][ T5928] usb 1-1: config 0 descriptor??
[  383.969797][ T5928] smsc95xx v2.0.0
[  384.395518][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  384.456408][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  384.601355][T11639] netlink: 'syz.3.1868': attribute type 1 has an invalid length.
[  384.725417][T11639] 8021q: adding VLAN 0 to HW filter on device bond4
[  384.783968][ T5841] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  384.835329][ T5841] usb 2-1: USB disconnect, device number 33
[  385.315405][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  385.352477][ T5928] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  385.968284][T11672] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  386.357192][ T5841] usb 1-1: USB disconnect, device number 24
[  387.243905][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1891'.
[  388.775548][T11728] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1902'.
[  388.916840][T11731] netlink: 'syz.1.1904': attribute type 1 has an invalid length.
[  389.048052][T11731] 8021q: adding VLAN 0 to HW filter on device bond3
[  390.661347][T11769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.699848][T11769] tipc: Disabling bearer <eth:syzkaller0>
[  391.992126][T11803] syzkaller0: entered promiscuous mode
[  392.011238][T11803] syzkaller0: entered allmulticast mode
[  392.466921][T11814] netlink: 'syz.2.1937': attribute type 1 has an invalid length.
[  392.659504][T11814] 8021q: adding VLAN 0 to HW filter on device bond1
[  392.817215][T11818] bond1: (slave ip6gretap1): making interface the new active one
[  392.845630][T11818] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  392.975717][T11821] veth5: entered promiscuous mode
[  393.010985][T11821] bond1: (slave veth5): Enslaving as an active interface with a down link
[  393.035444][T11814] erspan0: entered allmulticast mode
[  393.065787][T11814] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  393.354526][T11833] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input39
[  394.199108][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'.
[  394.237359][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'.
[  395.088695][T11887] loop2: detected capacity change from 0 to 512
[  395.122828][T11887] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  395.586526][ T5841] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  395.997128][ T5841] usb 5-1: device descriptor read/64, error -71
[  396.268730][ T5841] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  396.332407][T11905] netlink: 'syz.1.1975': attribute type 1 has an invalid length.
[  396.412514][T11909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1975'.
[  396.422418][ T5841] usb 5-1: device descriptor read/64, error -71
[  396.436302][T11905] 8021q: adding VLAN 0 to HW filter on device bond4
[  396.558883][T11915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'.
[  396.566292][ T5841] usb usb5-port1: attempt power cycle
[  396.568154][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1978'.
[  396.596253][T11915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'.
[  397.439343][T11922] loop1: detected capacity change from 0 to 512
[  397.447153][T11922] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  397.516501][ T5841] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  397.567296][ T5841] usb 5-1: device descriptor read/8, error -71
[  397.816709][ T5841] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  397.847012][ T5841] usb 5-1: device descriptor read/8, error -71
[  397.958207][ T5841] usb usb5-port1: unable to enumerate USB device
[  398.036222][   T42] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  398.186859][   T42] usb 2-1: Using ep0 maxpacket: 32
[  398.229764][   T42] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  398.246548][   T42] usb 2-1: config 0 has no interface number 0
[  398.320949][   T42] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  398.382233][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.421808][   T42] usb 2-1: Product: syz
[  398.450314][   T42] usb 2-1: Manufacturer: syz
[  398.475442][   T42] usb 2-1: SerialNumber: syz
[  398.641512][   T42] usb 2-1: config 0 descriptor??
[  398.702142][   T42] smsc95xx v2.0.0
[  399.219456][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  399.266576][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  399.552890][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  399.575682][   T42] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  400.261968][T11962] loop4: detected capacity change from 0 to 512
[  400.273574][T11962] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  401.150831][   T42] usb 2-1: USB disconnect, device number 34
[  401.476261][  T980] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  401.606534][  T980] usb 3-1: device descriptor read/64, error -71
[  401.846245][  T980] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  402.016257][  T980] usb 3-1: device descriptor read/64, error -71
[  402.169401][  T980] usb usb3-port1: attempt power cycle
[  402.537801][  T980] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  402.619851][  T980] usb 3-1: device descriptor read/8, error -71
[  402.881478][  T980] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  402.930859][  T980] usb 3-1: device descriptor read/8, error -71
[  403.048135][  T980] usb usb3-port1: unable to enumerate USB device
[  403.266247][  T980] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  403.417616][  T980] usb 4-1: Using ep0 maxpacket: 32
[  403.428906][  T980] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  403.439539][  T980] usb 4-1: config 0 has no interface number 0
[  403.455816][  T980] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  403.472813][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.488440][  T980] usb 4-1: Product: syz
[  403.497486][  T980] usb 4-1: Manufacturer: syz
[  403.508670][  T980] usb 4-1: SerialNumber: syz
[  403.530023][  T980] usb 4-1: config 0 descriptor??
[  403.547518][  T980] smsc95xx v2.0.0
[  403.770991][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2011'.
[  403.957412][  T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  403.971236][  T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  404.184955][  T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  404.199765][  T980] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  404.675340][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'.
[  404.702103][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'.
[  406.071472][ T5928] usb 4-1: USB disconnect, device number 29
[  406.340733][T12044] loop3: detected capacity change from 0 to 512
[  406.351782][T12044] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  406.637493][T12032] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  407.304236][T12058] 8021q: VLANs not supported on vcan0
[  407.511235][  T980] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  407.677523][  T980] usb 4-1: no configurations
[  407.682311][  T980] usb 4-1: can't read configurations, error -22
[  407.696255][ T5928] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  407.817257][  T980] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  407.849242][ T5928] usb 5-1: Using ep0 maxpacket: 32
[  407.863610][ T5928] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  407.883260][ T5928] usb 5-1: config 0 has no interface number 0
[  407.898455][ T5928] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  407.908611][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.917259][ T5928] usb 5-1: Product: syz
[  407.921756][ T5928] usb 5-1: Manufacturer: syz
[  407.926899][ T5928] usb 5-1: SerialNumber: syz
[  407.936292][ T5928] usb 5-1: config 0 descriptor??
[  407.945795][ T5928] smsc95xx v2.0.0
[  408.031837][T12075] loop1: detected capacity change from 0 to 512
[  408.041973][T12075] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  408.796999][  T980] usb 4-1: no configurations
[  408.801709][  T980] usb 4-1: can't read configurations, error -22
[  408.816779][  T980] usb usb4-port1: attempt power cycle
[  408.835311][ T5928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  408.866279][ T5928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  409.094788][ T5928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  409.107106][ T5928] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32
[  409.167518][  T980] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  409.198592][  T980] usb 4-1: no configurations
[  409.206233][  T980] usb 4-1: can't read configurations, error -22
[  409.336401][  T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  409.357818][  T980] usb 4-1: no configurations
[  409.362518][  T980] usb 4-1: can't read configurations, error -22
[  409.369834][  T980] usb usb4-port1: unable to enumerate USB device
[  410.497115][ T5841] usb 5-1: USB disconnect, device number 52
[  411.320173][T12101] nbd: must specify an index to disconnect
[  411.446882][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  411.699209][T12117] netlink: 'syz.4.2050': attribute type 1 has an invalid length.
[  411.711157][T12117] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2050'.
[  411.856406][T12121] loop1: detected capacity change from 0 to 512
[  411.867262][T12121] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  413.440014][T12112] syzkaller0: entered promiscuous mode
[  413.475543][T12112] syzkaller0: entered allmulticast mode
[  413.766577][   T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  413.936491][   T42] usb 3-1: Using ep0 maxpacket: 32
[  413.950744][   T42] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  413.959370][   T42] usb 3-1: config 0 has no interface number 0
[  413.981751][   T42] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  413.998429][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.007079][   T42] usb 3-1: Product: syz
[  414.021166][   T42] usb 3-1: Manufacturer: syz
[  414.037159][   T42] usb 3-1: SerialNumber: syz
[  414.052757][   T42] usb 3-1: config 0 descriptor??
[  414.069919][   T42] smsc95xx v2.0.0
[  414.481860][   T42] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  414.495527][   T42] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  414.730127][   T42] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  414.745884][   T42] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[  415.741939][T12153] netlink: 'syz.0.2060': attribute type 1 has an invalid length.
[  415.764878][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'.
[  416.665986][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'.
[  416.790075][   T42] usb 3-1: USB disconnect, device number 27
[  416.850084][T12153] bond5: entered promiscuous mode
[  416.868565][T12153] 8021q: adding VLAN 0 to HW filter on device bond5
[  416.938979][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'.
[  416.976955][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'.
[  417.002874][T12164] bond5: (slave bridge1): making interface the new active one
[  417.028412][T12164] bridge1: entered promiscuous mode
[  417.039002][T12164] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  418.876552][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  418.938254][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'.
[  418.977635][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'.
[  419.021205][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'.
[  419.045014][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'.
[  419.054778][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  419.071542][ T5896] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  419.100947][ T5896] usb 1-1: config 0 has no interface number 0
[  419.123539][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  419.143098][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.165667][ T5896] usb 1-1: Product: syz
[  419.187039][ T5896] usb 1-1: Manufacturer: syz
[  419.191786][ T5896] usb 1-1: SerialNumber: syz
[  419.217773][ T5896] usb 1-1: config 0 descriptor??
[  419.249583][ T5896] smsc95xx v2.0.0
[  419.657681][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  419.689099][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  419.920022][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  419.957514][ T5896] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  420.279946][  T980] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  420.383103][T12256] syzkaller0: entered promiscuous mode
[  420.397946][T12256] syzkaller0: entered allmulticast mode
[  420.456237][  T980] usb 4-1: Using ep0 maxpacket: 32
[  420.468313][  T980] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  420.486229][  T980] usb 4-1: config 0 has no interface number 0
[  420.502698][  T980] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  420.532100][  T980] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  420.556242][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.584533][  T980] usb 4-1: Product: syz
[  420.596367][  T980] usb 4-1: Manufacturer: syz
[  420.601020][  T980] usb 4-1: SerialNumber: syz
[  420.620763][  T980] usb 4-1: config 0 descriptor??
[  420.631599][T12244] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  420.863093][T12244] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  421.281684][T12272] bond_slave_0: entered promiscuous mode
[  421.287506][T12272] bond_slave_1: entered promiscuous mode
[  421.313783][T12272] vlan2: entered promiscuous mode
[  421.336830][T12272] bond0: entered promiscuous mode
[  421.673090][ T5928] usb 1-1: USB disconnect, device number 25
[  421.806668][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'.
[  421.832133][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'.
[  421.904005][  T980] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  421.933967][  T980] asix 4-1:0.188: probe with driver asix failed with error -32
[  421.977713][T12283] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  422.012760][T12283] bond6: entered promiscuous mode
[  422.056866][T12283] 8021q: adding VLAN 0 to HW filter on device bond6
[  422.105942][T12283] bond6: (slave bridge2): making interface the new active one
[  422.113812][T12283] bridge2: entered promiscuous mode
[  422.122528][T12283] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  422.782619][T12302] syzkaller0: entered promiscuous mode
[  422.793923][T12302] syzkaller0: entered allmulticast mode
[  423.072855][  T980] usb 4-1: USB disconnect, device number 34
[  423.262420][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'.
[  423.278648][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'.
[  423.536277][  T980] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  423.706582][  T980] usb 4-1: Using ep0 maxpacket: 32
[  423.730537][  T980] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  423.739299][  T980] usb 4-1: config 0 has no interface number 0
[  423.753388][  T980] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  423.787866][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.795929][  T980] usb 4-1: Product: syz
[  423.808811][  T980] usb 4-1: Manufacturer: syz
[  423.822010][  T980] usb 4-1: SerialNumber: syz
[  423.840006][  T980] usb 4-1: config 0 descriptor??
[  423.864516][  T980] smsc95xx v2.0.0
[  423.869943][T12328] netlink: 'syz.2.2124': attribute type 1 has an invalid length.
[  423.931750][T12328] 8021q: adding VLAN 0 to HW filter on device bond2
[  423.970787][T12328] veth7: entered promiscuous mode
[  423.979676][T12331] syzkaller0: entered promiscuous mode
[  423.985177][T12331] syzkaller0: entered allmulticast mode
[  423.995371][T12328] bond1: (slave erspan0): Releasing active interface
[  424.002492][T12328] ip6gretap1: entered promiscuous mode
[  424.015185][T12328] bond2: (slave erspan0): making interface the new active one
[  424.025110][T12328] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  424.260407][  T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  424.286183][  T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  424.376375][   T87] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  424.507837][  T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  424.529039][  T980] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  424.558453][T12348] syzkaller0: entered promiscuous mode
[  424.561809][   T87] usb 3-1: Using ep0 maxpacket: 32
[  424.564051][T12348] syzkaller0: entered allmulticast mode
[  424.574738][   T87] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  424.574767][   T87] usb 3-1: config 0 has no interface number 0
[  424.574810][   T87] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  424.608952][   T87] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  424.619841][   T87] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.628474][   T87] usb 3-1: Product: syz
[  424.632858][   T87] usb 3-1: Manufacturer: syz
[  424.637795][   T87] usb 3-1: SerialNumber: syz
[  424.647776][   T87] usb 3-1: config 0 descriptor??
[  424.661183][T12334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  424.899001][T12334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  425.080956][T12358] netlink: 'syz.4.2134': attribute type 1 has an invalid length.
[  425.156912][T12358] bond2: entered promiscuous mode
[  425.162587][T12358] 8021q: adding VLAN 0 to HW filter on device bond2
[  425.270102][T12358] bond2: (slave bridge1): making interface the new active one
[  425.278150][T12358] bridge1: entered promiscuous mode
[  425.285298][T12358] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  425.382644][T12366] syzkaller0: entered promiscuous mode
[  425.388897][T12366] syzkaller0: entered allmulticast mode
[  425.923962][   T87] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  425.943006][   T87] asix 3-1:0.188: probe with driver asix failed with error -32
[  426.227568][   T87] usb 4-1: USB disconnect, device number 35
[  427.159402][ T1541] usb 3-1: USB disconnect, device number 28
[  427.427891][T12373] syzkaller0: entered promiscuous mode
[  427.433669][T12373] syzkaller0: entered allmulticast mode
[  427.552840][T12399] netlink: 'syz.2.2147': attribute type 1 has an invalid length.
[  427.561073][T12399] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2147'.
[  429.109867][   T87] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  429.288585][   T87] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.300773][   T87] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  429.310517][   T87] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.326946][   T87] usb 2-1: config 0 descriptor??
[  429.342314][   T87] pwc: Askey VC010 type 2 USB webcam detected.
[  429.745195][   T87] pwc: recv_control_msg error -32 req 02 val 2b00
[  429.766491][   T87] pwc: recv_control_msg error -32 req 02 val 2700
[  429.774934][   T87] pwc: recv_control_msg error -32 req 02 val 2c00
[  429.782474][   T87] pwc: recv_control_msg error -32 req 04 val 1000
[  429.790320][   T87] pwc: recv_control_msg error -32 req 04 val 1300
[  429.799246][   T87] pwc: recv_control_msg error -32 req 04 val 1400
[  429.806906][   T87] pwc: recv_control_msg error -32 req 02 val 2000
[  429.814196][   T87] pwc: recv_control_msg error -32 req 02 val 2100
[  429.821903][   T87] pwc: recv_control_msg error -32 req 04 val 1500
[  429.829365][   T87] pwc: recv_control_msg error -32 req 02 val 2500
[  429.842474][   T87] pwc: recv_control_msg error -32 req 02 val 2400
[  429.849932][   T87] pwc: recv_control_msg error -32 req 02 val 2600
[  429.857825][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  429.865110][   T87] pwc: recv_control_msg error -32 req 02 val 2900
[  429.880694][   T87] pwc: recv_control_msg error -71 req 02 val 2800
[  429.888281][   T87] pwc: recv_control_msg error -71 req 04 val 1100
[  429.895252][   T87] pwc: recv_control_msg error -71 req 04 val 1200
[  429.912557][   T87] pwc: Registered as video103.
[  429.926021][   T87] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40
[  429.969736][   T87] usb 2-1: USB disconnect, device number 35
[  431.919391][T12436] netlink: 'syz.1.2158': attribute type 1 has an invalid length.
[  431.957993][T12432] syzkaller0: entered promiscuous mode
[  431.963497][T12432] syzkaller0: entered allmulticast mode
[  431.990843][T12436] bond5: entered promiscuous mode
[  431.997594][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  432.005676][T12436] 8021q: adding VLAN 0 to HW filter on device bond5
[  432.179150][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  432.200923][ T5896] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  432.216171][ T5896] usb 1-1: config 0 has no interface number 0
[  432.222430][ T5896] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  432.269076][ T5896] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  432.278314][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.286517][ T5896] usb 1-1: Product: syz
[  432.297554][ T5896] usb 1-1: Manufacturer: syz
[  432.302470][ T5896] usb 1-1: SerialNumber: syz
[  432.316812][ T5896] usb 1-1: config 0 descriptor??
[  432.322781][T12430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  432.541462][T12430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  433.579465][ T5896] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  433.592178][ T5896] asix 1-1:0.188: probe with driver asix failed with error -32
[  433.709356][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  433.719231][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  433.886388][T12451] batadv0: mtu less than device minimum
[  433.954986][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'.
[  434.017886][T12455] netlink: 'syz.1.2162': attribute type 1 has an invalid length.
[  434.059836][T12453] bridge_slave_1: left allmulticast mode
[  434.065617][T12453] bridge_slave_1: left promiscuous mode
[  434.073058][T12453] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.073253][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'.
[  434.092400][T12453] bridge_slave_0: left allmulticast mode
[  434.098556][T12453] bridge_slave_0: left promiscuous mode
[  434.104526][T12453] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.198580][T12455] 8021q: adding VLAN 0 to HW filter on device bond6
[  434.276980][ T6011] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  434.453031][ T6011] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.479576][ T6011] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  434.498985][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.518762][ T6011] usb 5-1: config 0 descriptor??
[  434.548288][ T6011] pwc: Askey VC010 type 2 USB webcam detected.
[  434.561719][T12471] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  434.767104][ T5896] usb 1-1: USB disconnect, device number 26
[  434.862073][T12483] netlink: 'syz.2.2172': attribute type 1 has an invalid length.
[  434.896448][T12483] bond3: entered promiscuous mode
[  434.902293][T12483] 8021q: adding VLAN 0 to HW filter on device bond3
[  434.930426][ T6011] pwc: recv_control_msg error -32 req 02 val 2b00
[  434.965992][ T6011] pwc: recv_control_msg error -32 req 02 val 2700
[  434.993321][ T6011] pwc: recv_control_msg error -32 req 02 val 2c00
[  435.004813][ T6011] pwc: recv_control_msg error -32 req 04 val 1000
[  435.013364][ T6011] pwc: recv_control_msg error -32 req 04 val 1300
[  435.021652][ T6011] pwc: recv_control_msg error -32 req 04 val 1400
[  435.029517][ T6011] pwc: recv_control_msg error -32 req 02 val 2000
[  435.036996][ T6011] pwc: recv_control_msg error -32 req 02 val 2100
[  435.044242][ T6011] pwc: recv_control_msg error -32 req 04 val 1500
[  435.052082][ T6011] pwc: recv_control_msg error -32 req 02 val 2500
[  435.060801][ T6011] pwc: recv_control_msg error -32 req 02 val 2400
[  435.069627][ T6011] pwc: recv_control_msg error -32 req 02 val 2600
[  435.082643][ T6011] pwc: recv_control_msg error -71 req 02 val 2900
[  435.089855][ T6011] pwc: recv_control_msg error -71 req 02 val 2800
[  435.097148][ T6011] pwc: recv_control_msg error -71 req 04 val 1100
[  435.103948][ T6011] pwc: recv_control_msg error -71 req 04 val 1200
[  435.117622][ T6011] pwc: Registered as video103.
[  435.127624][ T6618] ip6gretap1: left promiscuous mode
[  435.134998][ T6011] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41
[  435.167477][ T6011] usb 5-1: USB disconnect, device number 53
[  435.355147][T12497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2177'.
[  435.364464][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'.
[  435.549894][T12503] netlink: 'syz.1.2180': attribute type 1 has an invalid length.
[  435.659391][T12503] 8021q: adding VLAN 0 to HW filter on device bond7
[  435.695886][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'.
[  435.720791][T12508] bond7: (slave ip6gretap1): making interface the new active one
[  435.733216][T12508] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  435.743589][T12503] erspan0: entered allmulticast mode
[  435.770333][T12503] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  435.796029][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'.
[  435.796232][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.816001][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.845508][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.864747][ T1541] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  435.885010][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.068465][ T1541] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  436.096219][ T1541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.106211][ T1541] usb 4-1: Product: syz
[  436.110420][ T1541] usb 4-1: Manufacturer: syz
[  436.115218][ T1541] usb 4-1: SerialNumber: syz
[  436.550119][ T1541] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  436.565554][ T1541] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  436.581289][ T1541] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  436.612498][ T1541] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  436.635272][ T1541] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  436.664833][ T1541] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  437.256595][T12556] netlink: 'syz.1.2197': attribute type 1 has an invalid length.
[  438.347152][T12556] bond8: entered promiscuous mode
[  438.366807][T12556] 8021q: adding VLAN 0 to HW filter on device bond8
[  438.613178][T12572] infiniband: Added to hash: ib_dev=ffff88801b774000 (0)() ndev=ffff8880270bc000 (28)(lo)
[  438.665855][T12572] lo speed is unknown, defaulting to 1000
[  438.684416][T12572] lo speed is unknown, defaulting to 1000
[  438.693479][ T5841] usb 4-1: USB disconnect, device number 36
[  438.728382][T12572] lo speed is unknown, defaulting to 1000
[  438.763188][T12572] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  438.855202][T12572] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  438.875448][T12582] syzkaller0: entered promiscuous mode
[  438.884032][T12582] syzkaller0: entered allmulticast mode
[  439.013749][T12572] lo speed is unknown, defaulting to 1000
[  439.029976][T12572] lo speed is unknown, defaulting to 1000
[  439.048962][T12572] lo speed is unknown, defaulting to 1000
[  439.077650][T12572] lo speed is unknown, defaulting to 1000
[  439.085878][T12572] lo speed is unknown, defaulting to 1000
[  439.291673][T12591] vlan2: entered promiscuous mode
[  439.729976][T12604] netlink: 'syz.3.2212': attribute type 21 has an invalid length.
[  439.738345][T12604] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2212'.
[  440.207220][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.213892][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.516487][   T87] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  440.714316][   T87] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  440.723938][   T87] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.732143][   T87] usb 2-1: Product: syz
[  440.736700][   T87] usb 2-1: Manufacturer: syz
[  440.741357][   T87] usb 2-1: SerialNumber: syz
[  441.163340][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  441.176362][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  441.593900][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  441.606854][T12604] netlink: 'syz.3.2212': attribute type 5 has an invalid length.
[  441.614588][T12604] netlink: 'syz.3.2212': attribute type 6 has an invalid length.
[  441.622854][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  441.626053][T12604] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2212'.
[  441.637273][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  441.653343][   T87] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  441.929672][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2221'.
[  442.131972][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'.
[  442.134661][T12646] lo speed is unknown, defaulting to 1000
[  443.269418][ T5841] usb 2-1: USB disconnect, device number 36
[  443.521082][T12684] infiniband: Added to hash: ib_dev=ffff88804ae58000 (0)() ndev=ffff88803767c000 (235)(lo)
[  443.551879][T12684] siw: device registration error -23
[  443.570028][T12684] infiniband: Removed from hash: ib_dev=ffff88804ae58000 (0)() ndev=ffff88803767c000 (235)(lo)
[  443.661626][T12688] infiniband: Removed from hash: ib_dev=ffff88801b774000 (0)(syz2) ndev=ffff8880270bc000 (28)(lo)
[  443.688820][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2236'.
[  443.964782][T12699] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  444.065639][T12699] bond7: entered promiscuous mode
[  444.071978][T12699] 8021q: adding VLAN 0 to HW filter on device bond7
[  444.108044][T12699] bond7: (slave bridge3): making interface the new active one
[  444.116275][T12699] bridge3: entered promiscuous mode
[  444.123523][T12699] bond7: (slave bridge3): Enslaving as an active interface with an up link
[  444.288081][   T87] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  444.483804][   T87] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  444.507989][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.517889][   T87] usb 4-1: Product: syz
[  444.522640][   T87] usb 4-1: Manufacturer: syz
[  444.528187][   T87] usb 4-1: SerialNumber: syz
[  444.626612][ T1541] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  444.645171][T12719] infiniband: Added to hash: ib_dev=ffff888051304000 (0)() ndev=ffff888036216000 (255)(lo)
[  444.671796][T12719] lo speed is unknown, defaulting to 1000
[  444.678040][T12719] lo speed is unknown, defaulting to 1000
[  444.685850][T12719] lo speed is unknown, defaulting to 1000
[  444.693949][T12721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2249'.
[  444.729615][T12719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  444.785767][T12719] lo speed is unknown, defaulting to 1000
[  444.798167][T12719] lo speed is unknown, defaulting to 1000
[  444.809412][T12719] lo speed is unknown, defaulting to 1000
[  444.819015][T12719] lo speed is unknown, defaulting to 1000
[  444.848676][T12719] lo speed is unknown, defaulting to 1000
[  444.862007][ T1541] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.889081][ T1541] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  444.926290][ T1541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.947044][ T1541] usb 1-1: config 0 descriptor??
[  444.960208][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  444.962722][ T1541] pwc: Askey VC010 type 2 USB webcam detected.
[  445.009658][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  445.377442][ T1541] pwc: recv_control_msg error -32 req 02 val 2b00
[  445.471382][ T1541] pwc: recv_control_msg error -32 req 02 val 2700
[  445.471826][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  445.502882][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  445.510981][ T1541] pwc: recv_control_msg error -32 req 02 val 2c00
[  445.570724][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  445.585815][ T1541] pwc: recv_control_msg error -32 req 04 val 1000
[  445.647669][ T1541] pwc: recv_control_msg error -32 req 04 val 1300
[  445.764640][ T1541] pwc: recv_control_msg error -32 req 04 val 1400
[  445.766851][   T87] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  445.793742][ T1541] pwc: recv_control_msg error -32 req 02 val 2000
[  445.844552][ T1541] pwc: recv_control_msg error -32 req 02 val 2100
[  445.861773][ T1541] pwc: recv_control_msg error -32 req 04 val 1500
[  445.904893][ T1541] pwc: recv_control_msg error -32 req 02 val 2500
[  445.934652][ T1541] pwc: recv_control_msg error -32 req 02 val 2400
[  445.964398][ T1541] pwc: recv_control_msg error -32 req 02 val 2600
[  445.967041][T12742] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  445.987449][ T1541] pwc: recv_control_msg error -71 req 02 val 2900
[  446.000288][ T1541] pwc: recv_control_msg error -71 req 02 val 2800
[  446.016980][ T1541] pwc: recv_control_msg error -71 req 04 val 1100
[  446.034213][ T1541] pwc: recv_control_msg error -71 req 04 val 1200
[  446.049375][ T1541] pwc: Registered as video103.
[  446.075109][ T1541] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42
[  446.109268][T12742] syzkaller0: entered promiscuous mode
[  446.129589][T12742] syzkaller0: entered allmulticast mode
[  446.141468][ T1541] usb 1-1: USB disconnect, device number 27
[  447.133917][ T1541] usb 4-1: USB disconnect, device number 37
[  448.533253][T12792] lo speed is unknown, defaulting to 1000
[  449.173154][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'.
[  449.195431][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'.
[  449.221823][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'.
[  449.241822][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'.
[  449.386678][   T87] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  449.527962][T12829] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  449.572581][   T87] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  449.592026][   T87] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.614023][   T87] usb 3-1: Product: syz
[  449.629889][   T87] usb 3-1: Manufacturer: syz
[  449.644861][   T87] usb 3-1: SerialNumber: syz
[  449.696928][T12829] syzkaller0: entered promiscuous mode
[  449.703116][T12829] syzkaller0: entered allmulticast mode
[  450.079121][   T87] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  450.156269][   T87] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  450.594361][   T87] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  450.614120][   T87] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  450.632923][   T87] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  450.656328][   T87] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  450.699532][T12862] netlink: 'syz.0.2290': attribute type 4 has an invalid length.
[  451.781710][T12852] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  451.791253][T12852] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  451.801218][T12852] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  451.811844][T12861] veth1_macvtap: left promiscuous mode
[  451.821773][T12861] macsec0: entered allmulticast mode
[  451.843820][T12863] veth1_macvtap: entered promiscuous mode
[  451.869297][T12863] veth1_macvtap: entered allmulticast mode
[  451.875295][T12863] macsec0: left allmulticast mode
[  451.895269][T12863] veth1_macvtap: left allmulticast mode
[  452.136482][T12875] syzkaller0: entered promiscuous mode
[  452.146430][T12875] syzkaller0: entered allmulticast mode
[  452.197015][   T42] usb 3-1: USB disconnect, device number 29
[  454.646253][   T42] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  454.828801][   T42] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  454.848200][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.862532][T12938] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  454.863263][   T42] usb 1-1: Product: syz
[  454.875982][   T42] usb 1-1: Manufacturer: syz
[  454.879946][T12938] syzkaller0: entered promiscuous mode
[  454.881638][   T42] usb 1-1: SerialNumber: syz
[  454.893089][T12938] syzkaller0: entered allmulticast mode
[  455.220539][T12955] batadv0: mtu less than device minimum
[  455.237329][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'.
[  455.253754][T12950] bridge_slave_1: left allmulticast mode
[  455.260746][T12950] bridge_slave_1: left promiscuous mode
[  455.267273][T12950] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.279659][T12950] bridge_slave_0: left allmulticast mode
[  455.285665][T12950] bridge_slave_0: left promiscuous mode
[  455.292041][T12950] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.310843][   T42] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  455.338467][   T42] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  455.530795][T12963] netlink: 'syz.1.2326': attribute type 1 has an invalid length.
[  455.785193][   T42] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  455.823920][   T42] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  455.856927][   T42] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  455.919757][   T42] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  456.137178][   T42] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  456.319745][   T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.330454][   T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  456.339947][   T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  456.350111][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.363004][   T42] usb 2-1: config 0 descriptor??
[  456.375018][T12990] netlink: 'syz.4.2338': attribute type 1 has an invalid length.
[  457.000901][T13016] syzkaller0: entered promiscuous mode
[  457.006587][T13016] syzkaller0: entered allmulticast mode
[  457.424589][ T5928] usb 1-1: USB disconnect, device number 28
[  457.493056][T13026] netlink: 'syz.3.2352': attribute type 1 has an invalid length.
[  458.934767][ T5896] usb 2-1: USB disconnect, device number 37
[  459.346231][ T5928] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  459.530378][ T5928] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  459.565973][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.579720][T13070] netlink: 'syz.3.2367': attribute type 1 has an invalid length.
[  459.585541][ T5928] usb 3-1: Product: syz
[  459.601042][ T5928] usb 3-1: Manufacturer: syz
[  459.606036][ T5928] usb 3-1: SerialNumber: syz
[  459.624863][T13070] bond5: entered promiscuous mode
[  459.635027][T13070] 8021q: adding VLAN 0 to HW filter on device bond5
[  459.803949][T13080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2371'.
[  459.971548][T13084] infiniband: Added to hash: ib_dev=ffff88806aebc000 (0)() ndev=ffff88803767c000 (231)(lo)
[  459.983428][T13084] siw: device registration error -23
[  459.988989][T13084] infiniband: Removed from hash: ib_dev=ffff88806aebc000 (0)() ndev=ffff88803767c000 (231)(lo)
[  460.030668][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  460.044817][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  460.211858][T13091] netlink: 'syz.3.2376': attribute type 1 has an invalid length.
[  460.283164][T13091] 8021q: adding VLAN 0 to HW filter on device bond6
[  460.461308][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  460.477490][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  460.492885][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  460.510277][ T5928] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  460.609993][T13106] netlink: 'syz.0.2380': attribute type 1 has an invalid length.
[  462.134554][   T42] usb 3-1: USB disconnect, device number 30
[  462.224881][T13125] infiniband: Added to hash: ib_dev=ffff888049444000 (0)() ndev=ffff888079198000 (35)(lo)
[  462.235168][T13125] siw: device registration error -23
[  462.242643][T13125] infiniband: Removed from hash: ib_dev=ffff888049444000 (0)() ndev=ffff888079198000 (35)(lo)
[  462.277133][T13106] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  462.825438][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'.
[  462.872677][T13147] batadv0: mtu less than device minimum
[  462.898580][T13152] bridge_slave_1: left allmulticast mode
[  462.917747][T13152] bridge_slave_1: left promiscuous mode
[  462.930943][T13152] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.954363][T13156] infiniband: Added to hash: ib_dev=ffff88804fb58000 (0)() ndev=ffff88803767c000 (231)(lo)
[  462.973459][T13152] bridge_slave_0: left allmulticast mode
[  462.986355][T13152] bridge_slave_0: left promiscuous mode
[  462.990212][T13156] siw: device registration error -23
[  462.996482][T13152] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.013140][T13156] infiniband: Removed from hash: ib_dev=ffff88804fb58000 (0)() ndev=ffff88803767c000 (231)(lo)
[  463.166297][   T87] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  463.201341][T13165] netlink: 'syz.0.2398': attribute type 1 has an invalid length.
[  463.291151][T13165] bond8: entered promiscuous mode
[  463.346485][T13165] 8021q: adding VLAN 0 to HW filter on device bond8
[  463.381101][   T87] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  463.406497][   T87] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.414868][   T87] usb 2-1: Product: syz
[  463.419978][   T87] usb 2-1: Manufacturer: syz
[  463.424735][   T87] usb 2-1: SerialNumber: syz
[  463.564669][T13181] netlink: 'syz.0.2404': attribute type 1 has an invalid length.
[  463.623861][T13181] veth3: entered promiscuous mode
[  463.660453][T13181] erspan0: entered allmulticast mode
[  463.806930][T13189] netlink: 'syz.2.2408': attribute type 1 has an invalid length.
[  463.857066][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  463.869847][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  463.890910][T13189] bond4: entered promiscuous mode
[  463.896801][T13189] 8021q: adding VLAN 0 to HW filter on device bond4
[  463.918876][T13188] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  464.154481][T13197] syzkaller0: entered promiscuous mode
[  464.158556][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  464.160340][T13197] syzkaller0: entered allmulticast mode
[  464.170468][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'.
[  464.233572][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  464.243388][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'.
[  464.296476][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  464.349918][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  464.385316][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  464.419653][   T87] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  464.485616][T13209] netlink: 'syz.2.2417': attribute type 1 has an invalid length.
[  464.511026][T13209] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2417'.
[  465.790217][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  465.923342][   T42] usb 2-1: USB disconnect, device number 38
[  467.624952][T13303] batadv0: mtu less than device minimum
[  467.640482][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2449'.
[  467.716203][   T87] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  467.884468][   T87] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  467.895822][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.905216][   T87] usb 4-1: Product: syz
[  467.910569][   T87] usb 4-1: Manufacturer: syz
[  467.915376][   T87] usb 4-1: SerialNumber: syz
[  468.339046][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  468.353278][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  468.874780][T13343] batadv0: mtu less than device minimum
[  468.915562][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'.
[  468.987619][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE
[  469.009276][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  469.042806][   T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  469.148958][   T87] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  469.865505][T13364] syzkaller0: entered promiscuous mode
[  469.872197][T13364] syzkaller0: entered allmulticast mode
[  470.347210][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'.
[  470.495040][ T5928] usb 4-1: USB disconnect, device number 38
[  472.498737][T13415] syzkaller0: entered promiscuous mode
[  472.504508][T13415] syzkaller0: entered allmulticast mode
[  472.596274][   T87] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  472.692206][ T5841] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  472.785407][   T87] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  472.811320][   T87] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.833544][   T87] usb 2-1: Product: syz
[  472.838908][   T87] usb 2-1: Manufacturer: syz
[  472.843543][   T87] usb 2-1: SerialNumber: syz
[  472.879119][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.901917][ T5841] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  472.919788][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.957393][ T5841] usb 5-1: config 0 descriptor??
[  472.981798][ T5841] pwc: Askey VC010 type 2 USB webcam detected.
[  473.290631][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  473.312225][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  473.388480][ T5841] pwc: recv_control_msg error -32 req 02 val 2b00
[  473.404341][ T5841] pwc: recv_control_msg error -32 req 02 val 2700
[  473.411933][ T5841] pwc: recv_control_msg error -32 req 02 val 2c00
[  473.419865][ T5841] pwc: recv_control_msg error -32 req 04 val 1000
[  473.427694][ T5841] pwc: recv_control_msg error -32 req 04 val 1300
[  473.435221][ T5841] pwc: recv_control_msg error -32 req 04 val 1400
[  473.444508][ T5841] pwc: recv_control_msg error -32 req 02 val 2000
[  473.452481][ T5841] pwc: recv_control_msg error -32 req 02 val 2100
[  473.461085][ T5841] pwc: recv_control_msg error -32 req 04 val 1500
[  473.469339][ T5841] pwc: recv_control_msg error -32 req 02 val 2500
[  473.478379][ T5841] pwc: recv_control_msg error -32 req 02 val 2400
[  473.485869][ T5841] pwc: recv_control_msg error -32 req 02 val 2600
[  473.493589][ T5841] pwc: recv_control_msg error -32 req 02 val 2900
[  473.501643][ T5841] pwc: recv_control_msg error -32 req 02 val 2800
[  473.509469][ T5841] pwc: recv_control_msg error -32 req 04 val 1100
[  473.524736][ T5841] pwc: recv_control_msg error -32 req 04 val 1200
[  473.545807][ T5841] pwc: Registered as video103.
[  473.557807][ T5841] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43
[  473.589351][ T5841] usb 5-1: USB disconnect, device number 54
[  473.936337][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE
[  473.949359][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  473.959810][   T87] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  473.971656][   T87] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  475.041187][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'.
[  475.344249][ T5896] usb 2-1: USB disconnect, device number 39
[  475.478187][T13474] syzkaller0: entered promiscuous mode
[  475.485754][T13474] syzkaller0: entered allmulticast mode
[  475.661563][T13472] Bluetooth: MGMT ver 1.23
[  475.771842][T13480] lo speed is unknown, defaulting to 1000
[  477.676674][ T5896] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  477.903607][ T5896] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  477.917462][T13533] syzkaller0: entered promiscuous mode
[  477.922983][T13533] syzkaller0: entered allmulticast mode
[  477.927770][T13536] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2518'.
[  477.936683][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.947582][ T5896] usb 4-1: Product: syz
[  477.951785][ T5896] usb 4-1: Manufacturer: syz
[  477.970168][ T5896] usb 4-1: SerialNumber: syz
[  478.306292][   T87] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  478.414381][ T5896] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  478.446222][ T5896] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  478.487875][   T87] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  478.513450][   T87] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.551723][   T87] usb 1-1: Product: syz
[  478.560284][   T87] usb 1-1: Manufacturer: syz
[  478.569751][   T87] usb 1-1: SerialNumber: syz
[  479.015805][   T87] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  479.046278][   T87] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  479.092853][ T5896] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE
[  479.125340][ T5896] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  479.138164][ T5896] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  479.166576][ T5896] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  479.447909][T13564] syzkaller0: entered promiscuous mode
[  479.453665][T13564] syzkaller0: entered allmulticast mode
[  479.967319][T13576] netlink: 'syz.1.2537': attribute type 1 has an invalid length.
[  480.009194][T13576] 8021q: adding VLAN 0 to HW filter on device bond9
[  480.095504][   T87] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  480.127446][   T87] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  480.128373][T13576] veth9: entered promiscuous mode
[  480.153102][   T87] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  480.177140][T13585] bond7: (slave erspan0): Releasing active interface
[  480.184346][   T87] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  480.187414][T13585] ip6gretap1: entered promiscuous mode
[  480.217236][   T87] usb 1-1: USB disconnect, device number 29
[  480.408129][T13597] syzkaller0: entered promiscuous mode
[  480.414557][T13597] syzkaller0: entered allmulticast mode
[  480.480449][ T5896] usb 4-1: USB disconnect, device number 39
[  480.624280][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'.
[  480.837727][ T5896] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  480.854884][T13614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.999216][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.016234][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  481.032180][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.059337][ T5896] usb 4-1: config 0 descriptor??
[  481.076011][ T5896] pwc: Askey VC010 type 2 USB webcam detected.
[  481.172715][T13624] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2556'.
[  481.196405][T13626] netlink: 'syz.1.2557': attribute type 1 has an invalid length.
[  481.240860][T13626] bond10: entered promiscuous mode
[  481.247171][T13626] 8021q: adding VLAN 0 to HW filter on device bond10
[  481.487698][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00
[  481.506162][ T5896] pwc: recv_control_msg error -32 req 02 val 2700
[  481.518124][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00
[  481.548420][ T5896] pwc: recv_control_msg error -32 req 04 val 1000
[  481.557925][ T5896] pwc: recv_control_msg error -32 req 04 val 1300
[  481.572989][ T5896] pwc: recv_control_msg error -32 req 04 val 1400
[  481.581237][ T5896] pwc: recv_control_msg error -32 req 02 val 2000
[  481.589097][ T5896] pwc: recv_control_msg error -32 req 02 val 2100
[  481.607925][ T5896] pwc: recv_control_msg error -32 req 04 val 1500
[  481.622408][ T5896] pwc: recv_control_msg error -32 req 02 val 2500
[  481.639892][ T5896] pwc: recv_control_msg error -32 req 02 val 2400
[  481.647909][ T5896] pwc: recv_control_msg error -32 req 02 val 2600
[  481.659150][ T5896] pwc: recv_control_msg error -32 req 02 val 2900
[  481.667907][ T5896] pwc: recv_control_msg error -32 req 02 val 2800
[  481.677570][ T5896] pwc: recv_control_msg error -71 req 04 val 1100
[  481.688098][ T5896] pwc: recv_control_msg error -71 req 04 val 1200
[  481.716697][ T5896] pwc: Registered as video103.
[  481.750369][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44
[  481.814279][ T5896] usb 4-1: USB disconnect, device number 40
[  482.046315][ T1541] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  482.219230][ T1541] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.229608][ T1541] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  482.248350][ T1541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.299843][ T1541] usb 3-1: config 0 descriptor??
[  482.330532][ T1541] pwc: Askey VC010 type 2 USB webcam detected.
[  482.758944][ T1541] pwc: recv_control_msg error -32 req 02 val 2b00
[  482.767676][ T1541] pwc: recv_control_msg error -32 req 02 val 2700
[  482.797114][ T1541] pwc: recv_control_msg error -32 req 02 val 2c00
[  482.809102][ T1541] pwc: recv_control_msg error -32 req 04 val 1000
[  482.823372][ T1541] pwc: recv_control_msg error -32 req 04 val 1300
[  482.843000][ T1541] pwc: recv_control_msg error -32 req 04 val 1400
[  482.858341][ T1541] pwc: recv_control_msg error -32 req 02 val 2000
[  482.872134][ T1541] pwc: recv_control_msg error -32 req 02 val 2100
[  482.885148][ T1541] pwc: recv_control_msg error -32 req 04 val 1500
[  482.900549][ T1541] pwc: recv_control_msg error -32 req 02 val 2500
[  482.910172][ T1541] pwc: recv_control_msg error -32 req 02 val 2400
[  482.921744][ T1541] pwc: recv_control_msg error -32 req 02 val 2600
[  482.930322][ T1541] pwc: recv_control_msg error -32 req 02 val 2900
[  482.938141][ T1541] pwc: recv_control_msg error -32 req 02 val 2800
[  482.956269][ T1541] pwc: recv_control_msg error -32 req 04 val 1100
[  482.963589][ T1541] pwc: recv_control_msg error -32 req 04 val 1200
[  482.994959][ T1541] pwc: Registered as video103.
[  483.020272][ T1541] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45
[  483.058273][ T1541] usb 3-1: USB disconnect, device number 31
[  483.413760][T13692] syzkaller0: entered promiscuous mode
[  483.444568][T13692] syzkaller0: entered allmulticast mode
[  483.639856][T13700] infiniband: Added to hash: ib_dev=ffff888047e38000 (0)() ndev=ffff888079198000 (34)(lo)
[  483.656430][T13700] siw: device registration error -23
[  483.670876][T13700] infiniband: Removed from hash: ib_dev=ffff888047e38000 (0)() ndev=ffff888079198000 (34)(lo)
[  483.829220][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'.
[  484.353242][T13730] netlink: 'syz.2.2592': attribute type 1 has an invalid length.
[  484.378976][T13732] infiniband: Added to hash: ib_dev=ffff888049564000 (0)() ndev=ffff8880270ba000 (259)(lo)
[  484.400312][T13732] siw: device registration error -23
[  484.412431][T13732] infiniband: Removed from hash: ib_dev=ffff888049564000 (0)() ndev=ffff8880270ba000 (259)(lo)
[  484.483443][T13730] bond5: entered promiscuous mode
[  484.504025][T13730] 8021q: adding VLAN 0 to HW filter on device bond5
[  484.575060][T13743] netlink: 'syz.3.2595': attribute type 1 has an invalid length.
[  484.669223][T13747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2595'.
[  484.877177][T13751] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2597'.
[  486.193933][T13743] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  486.457484][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'.
[  486.848590][T13782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  486.864050][T13779] syzkaller0: MTU too low for tipc bearer
[  486.876281][T13779] tipc: Disabling bearer <eth:syzkaller0>
[  487.567725][T13796] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  487.656831][T13800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2611'.
[  487.687695][T13796] 8021q: adding VLAN 0 to HW filter on device bond11
[  487.705582][T13799] syzkaller0: entered promiscuous mode
[  487.719319][T13799] syzkaller0: entered allmulticast mode
[  488.204974][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'.
[  488.299687][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'.
[  488.355528][T13823] netlink: 'syz.3.2622': attribute type 1 has an invalid length.
[  488.421240][T13825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2623'.
[  488.576013][T13823] veth13: entered promiscuous mode
[  488.604395][T13829] erspan0: entered allmulticast mode
[  488.625504][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'.
[  488.634957][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'.
[  488.646453][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'.
[  488.647973][T13834] netlink: 'syz.2.2626': attribute type 1 has an invalid length.
[  488.675481][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'.
[  488.711982][T13834] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2626'.
[  490.759935][T13878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  491.362587][   T35] ip6gretap1: left promiscuous mode
[  491.496310][T13891] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2645'.
[  491.718010][T13895] lo speed is unknown, defaulting to 1000
[  492.783704][T13914] syzkaller0: entered promiscuous mode
[  492.789499][T13914] syzkaller0: entered allmulticast mode
[  493.634861][T13935] netlink: 'syz.1.2658': attribute type 1 has an invalid length.
[  493.697000][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'.
[  494.611845][T13935] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  494.864948][T13943] syzkaller0: entered promiscuous mode
[  494.879736][T13943] syzkaller0: entered allmulticast mode
[  495.323413][T13967] netlink: 'syz.0.2670': attribute type 1 has an invalid length.
[  495.378353][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'.
[  496.809875][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'.
[  497.091210][T13967] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  497.995243][T14007] syzkaller0: entered promiscuous mode
[  498.049678][T14007] syzkaller0: entered allmulticast mode
[  498.078764][T14013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2681'.
[  498.305951][T14024] netlink: 'syz.3.2684': attribute type 1 has an invalid length.
[  498.423275][T14024] 8021q: adding VLAN 0 to HW filter on device bond7
[  498.500971][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'.
[  498.564673][T14027] syzkaller0: entered promiscuous mode
[  498.570353][T14027] syzkaller0: entered allmulticast mode
[  498.586615][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'.
[  498.989404][T14057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2695'.
[  500.683343][T14076] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  501.635157][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.641788][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.722203][T14126] syzkaller0: entered promiscuous mode
[  501.728188][T14126] syzkaller0: entered allmulticast mode
[  502.567889][T14138] syzkaller0: entered promiscuous mode
[  502.589653][T14138] syzkaller0: entered allmulticast mode
[  502.923883][T14161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2731'.
[  503.143382][T14170] netlink: 'syz.0.2735': attribute type 1 has an invalid length.
[  503.220307][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2735'.
[  503.244234][T14170] 8021q: adding VLAN 0 to HW filter on device bond9
[  503.263989][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'.
[  503.273135][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'.
[  503.283310][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'.
[  503.292885][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'.
[  503.704375][T14197] syzkaller0: entered promiscuous mode
[  503.710409][T14197] syzkaller0: entered allmulticast mode
[  503.771265][T14201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.111211][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'.
[  504.158358][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'.
[  504.199486][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'.
[  504.216297][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'.
[  504.271776][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  504.281655][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  504.302643][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  504.317859][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  504.337843][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  504.703826][T14222] syzkaller0: entered promiscuous mode
[  504.717222][T14222] syzkaller0: entered allmulticast mode
[  504.727204][T14214] lo speed is unknown, defaulting to 1000
[  504.856202][   T87] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  504.875922][T14231] veth13: entered promiscuous mode
[  504.922101][T14234] bond2: (slave erspan0): Releasing active interface
[  504.957852][ T6613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.020334][   T87] usb 4-1: Using ep0 maxpacket: 32
[  505.035427][   T87] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.077014][   T87] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.092732][   T87] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  505.094638][T14233] syzkaller0: entered promiscuous mode
[  505.103486][   T87] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.111958][T14233] syzkaller0: entered allmulticast mode
[  505.136846][T14244] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  505.161696][   T87] usb 4-1: config 0 descriptor??
[  505.189566][   T87] hub 4-1:0.0: USB hub found
[  505.208309][ T6613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.374925][   T87] hub 4-1:0.0: 1 port detected
[  505.996269][   T87] hub 4-1:0.0: activate --> -90
[  506.202301][   T42] usb 4-1: USB disconnect, device number 41
[  506.206423][   T87] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  506.428138][ T5838] Bluetooth: hci5: command tx timeout
[  506.979868][ T6613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  507.097924][ T6613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  507.267900][T14214] chnl_net:caif_netlink_parms(): no params data found
[  507.375633][T14261] vlan2: entered promiscuous mode
[  507.383596][T14261] team0: entered promiscuous mode
[  507.389182][T14261] team_slave_0: entered promiscuous mode
[  507.395086][T14261] team_slave_1: entered promiscuous mode
[  507.628935][T14214] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.636495][T14214] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.643878][T14214] bridge_slave_0: entered allmulticast mode
[  507.652751][T14214] bridge_slave_0: entered promiscuous mode
[  507.700031][T14214] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.724384][T14214] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.747586][T14214] bridge_slave_1: entered allmulticast mode
[  507.755846][T14214] bridge_slave_1: entered promiscuous mode
[  507.782232][ T6613] bridge_slave_1: left allmulticast mode
[  507.798530][ T6613] bridge_slave_1: left promiscuous mode
[  507.806446][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.839031][ T6613] bridge_slave_0: left allmulticast mode
[  507.844762][ T6613] bridge_slave_0: left promiscuous mode
[  507.854375][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.994189][ T6613] bond7 (unregistering): (slave ip6gretap1): Releasing active interface
[  508.220692][ T6613] bond1 (unregistering): (slave gretap1): Releasing active interface
[  508.508219][ T5838] Bluetooth: hci5: command tx timeout
[  508.525424][ T6613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.535842][ T6613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.546983][ T6613] bond0 (unregistering): Released all slaves
[  508.658279][ T6613] bond1 (unregistering): Released all slaves
[  508.772448][ T6613] bond2 (unregistering): Released all slaves
[  508.878849][ T6613] bond3 (unregistering): Released all slaves
[  508.983961][ T6613] bond4 (unregistering): Released all slaves
[  509.090885][ T6613] bond5 (unregistering): Released all slaves
[  509.199328][ T6613] bond6 (unregistering): Released all slaves
[  509.313500][ T6613] bond7 (unregistering): Released all slaves
[  509.427330][ T6613] bond8 (unregistering): Released all slaves
[  509.539636][ T6613] bond9 (unregistering): Released all slaves
[  509.649698][ T6613] bond10 (unregistering): Released all slaves
[  509.758014][ T6613] bond11 (unregistering): Released all slaves
[  509.794243][T14281] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  509.806332][T14281] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  509.817462][T14281] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  510.044856][ T6613] tipc: Left network mode
[  510.050730][T14214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.099900][T14214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.317287][T14214] team0: Port device team_slave_0 added
[  510.372406][T14320] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  510.407304][T14214] team0: Port device team_slave_1 added
[  510.563230][T14214] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.576239][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.607484][ T5838] Bluetooth: hci5: command tx timeout
[  510.642057][T14214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.737742][T14214] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.744901][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.813440][T14214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.114059][ T6613] hsr_slave_1: left promiscuous mode
[  511.121469][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.149935][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.855450][ T6613] team0 (unregistering): Port device team_slave_1 removed
[  511.902104][ T6613] team0 (unregistering): Port device team_slave_0 removed
[  512.666673][ T5838] Bluetooth: hci5: command tx timeout
[  513.968894][T14214] hsr_slave_0: entered promiscuous mode
[  514.020639][T14214] hsr_slave_1: entered promiscuous mode
[  514.057812][T14214] debugfs: 'hsr0' already exists in 'hsr'
[  514.072177][T14214] Cannot create hsr debugfs directory
[  514.587848][T14401] __nla_validate_parse: 6 callbacks suppressed
[  514.587870][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2802'.
[  517.299738][T14463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2817'.
[  517.419466][T14214] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  517.477143][T14214] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  517.512141][T14214] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  517.558946][T14214] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  517.727990][T14487] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  517.782866][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'.
[  518.168525][T14214] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.193105][T14505] syzkaller0: entered promiscuous mode
[  518.201126][T14505] syzkaller0: entered allmulticast mode
[  518.319597][T14214] 8021q: adding VLAN 0 to HW filter on device team0
[  518.381465][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.388929][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.419998][T14512] syzkaller0: entered promiscuous mode
[  518.425532][T14512] syzkaller0: entered allmulticast mode
[  518.440914][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.448216][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.027017][T14543] syzkaller0: entered promiscuous mode
[  519.032555][T14543] syzkaller0: entered allmulticast mode
[  519.177273][T14214] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.290318][T14214] veth0_vlan: entered promiscuous mode
[  519.330252][T14214] veth1_vlan: entered promiscuous mode
[  519.403444][T14214] veth0_macvtap: entered promiscuous mode
[  519.446447][T14214] veth1_macvtap: entered promiscuous mode
[  519.601436][T14214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.649612][T14561] syzkaller0: entered promiscuous mode
[  519.669288][T14561] syzkaller0: entered allmulticast mode
[  519.695391][T14214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.737105][ T6618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.753241][ T6613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.767109][ T6613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.795601][ T6613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.201756][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'.
[  520.206387][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.233706][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.329773][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.341893][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.347829][T14585] infiniband: Added to hash: ib_dev=ffff888035294000 (0)() ndev=ffff888079198000 (34)(lo)
[  520.362223][T14585] siw: device registration error -23
[  520.371805][T14585] infiniband: Removed from hash: ib_dev=ffff888035294000 (0)() ndev=ffff888079198000 (34)(lo)
[  520.742693][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'.
[  520.764265][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'.
[  520.795317][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'.
[  520.824393][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'.
[  520.958196][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  520.972988][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  520.983693][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  521.007907][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  521.015724][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  521.143931][T14605] lo speed is unknown, defaulting to 1000
[  521.337933][T14613] infiniband: Added to hash: ib_dev=ffff88807c694000 (0)() ndev=ffff888051aaa000 (27)(lo)
[  521.368526][T14601] lo speed is unknown, defaulting to 1000
[  521.387273][T14613] siw: device registration error -23
[  521.396186][T14613] infiniband: Removed from hash: ib_dev=ffff88807c694000 (0)() ndev=ffff888051aaa000 (27)(lo)
[  521.484554][ T1151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  521.496807][ T1151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.589557][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'.
[  521.739858][ T1151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  521.763980][ T1151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.887642][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'.
[  521.908848][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'.
[  521.937793][ T1151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  521.957876][ T1151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.042665][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'.
[  522.069988][ T6613] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  522.079286][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'.
[  522.090217][ T6613] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  522.124683][ T1151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.135343][ T1151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.201897][ T6613] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  522.281145][ T6613] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  522.523783][T14650] lo speed is unknown, defaulting to 1000
[  522.844474][ T1151] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  522.852822][ T1151] bridge1 (unregistering): left promiscuous mode
[  522.904767][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.915966][ T1151] bond_slave_0: left promiscuous mode
[  522.925927][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.938361][ T1151] bond_slave_1: left promiscuous mode
[  522.947780][ T1151] bond0 (unregistering): Released all slaves
[  523.071128][ T5838] Bluetooth: hci2: command tx timeout
[  523.094749][ T1151] bond1 (unregistering): Released all slaves
[  523.267468][ T1151] bond2 (unregistering): Released all slaves
[  523.328412][T14601] chnl_net:caif_netlink_parms(): no params data found
[  523.495340][ T1151] tipc: Left network mode
[  523.985137][T14699] openvswitch: netlink: Flow key attr not present in new flow.
[  524.093350][T14601] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.103208][T14601] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.136384][T14601] bridge_slave_0: entered allmulticast mode
[  524.151094][T14601] bridge_slave_0: entered promiscuous mode
[  524.178838][T14601] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.196431][T14601] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.204123][T14601] bridge_slave_1: entered allmulticast mode
[  524.214084][T14601] bridge_slave_1: entered promiscuous mode
[  524.350226][ T1151] hsr_slave_1: left promiscuous mode
[  524.377186][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.407278][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.459412][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.476259][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.592447][ T1151] veth1_macvtap: left promiscuous mode
[  524.598470][ T1151] veth0_macvtap: left promiscuous mode
[  524.604504][ T1151] veth1_vlan: left promiscuous mode
[  524.611989][ T1151] veth0_vlan: left promiscuous mode
[  525.146992][ T5838] Bluetooth: hci2: command tx timeout
[  525.261130][T14728] __nla_validate_parse: 4 callbacks suppressed
[  525.261151][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'.
[  525.771114][ T1151] team_slave_1 (unregistering): left promiscuous mode
[  525.778911][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  525.822418][ T1151] team_slave_0 (unregistering): left promiscuous mode
[  525.832382][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  526.207448][ T6619] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888051304000 (7)(syz2) start
[  526.254330][ T6619] infiniband: Removed from hash: ib_dev=ffff888051304000 (0)(syz2) ndev=ffff888036216000 (4)(lo)
[  526.287574][ T5841] lo speed is unknown, defaulting to 1000
[  526.293557][ T5841] infiniband syz2: ib_query_port failed (-19)
[  526.324891][T14601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.350743][T14601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.356931][ T6619] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888051304000 (0)(syz2) end
[  526.541312][T14601] team0: Port device team_slave_0 added
[  526.588112][T14601] team0: Port device team_slave_1 added
[  526.839496][T14601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.857562][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.884603][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2899'.
[  526.902313][T14601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.945216][ T1151] IPVS: stop unused estimator thread 0...
[  527.003735][T14601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.014281][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.069357][T14601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.230966][ T5838] Bluetooth: hci2: command tx timeout
[  527.409329][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'.
[  527.480500][T14601] hsr_slave_0: entered promiscuous mode
[  527.503182][T14601] hsr_slave_1: entered promiscuous mode
[  527.522686][T14601] debugfs: 'hsr0' already exists in 'hsr'
[  527.538992][T14601] Cannot create hsr debugfs directory
[  527.926549][T14797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2910'.
[  528.294059][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'.
[  528.949843][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2920'.
[  529.297968][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'.
[  529.309036][ T5838] Bluetooth: hci2: command tx timeout
[  529.315574][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'.
[  529.329367][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'.
[  529.343249][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'.
[  529.475028][T14601] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  529.521425][T14601] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  529.554701][T14601] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  529.575657][T14601] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  529.740546][T14876] netlink: 'syz.1.2927': attribute type 22 has an invalid length.
[  529.935410][T14601] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.965963][T14601] 8021q: adding VLAN 0 to HW filter on device team0
[  530.019475][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.027131][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.068438][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.075976][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.230291][   T87] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  530.386248][   T87] usb 2-1: Using ep0 maxpacket: 32
[  530.400435][   T87] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.434257][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'.
[  530.476404][   T87] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.496574][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'.
[  530.512110][   T87] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  530.527288][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'.
[  530.538042][   T87] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.576822][   T87] usb 2-1: config 0 descriptor??
[  530.598530][   T87] hub 2-1:0.0: USB hub found
[  530.599292][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'.
[  530.712277][T14601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.740856][T14915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.774787][T14915] syzkaller0: entered promiscuous mode
[  530.795356][T14915] syzkaller0: entered allmulticast mode
[  530.811056][   T87] hub 2-1:0.0: 1 port detected
[  530.876855][T14915] tipc: Resetting bearer <eth:syzkaller0>
[  530.942092][T14914] tipc: Resetting bearer <eth:syzkaller0>
[  531.018854][T14914] tipc: Disabling bearer <eth:syzkaller0>
[  531.235108][T14935] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  531.418536][  T980] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  531.428118][ T5928] usb 2-1: USB disconnect, device number 40
[  531.428805][ T6619] usb 2-1: Failed to suspend device, error -19
[  531.628418][T14601] veth0_vlan: entered promiscuous mode
[  531.669271][T14601] veth1_vlan: entered promiscuous mode
[  531.680748][T14952] xt_l2tp: invalid flags combination: 0
[  531.822949][T14601] veth0_macvtap: entered promiscuous mode
[  531.850647][T14952] xt_CT: No such helper "snmp"
[  531.871957][T14601] veth1_macvtap: entered promiscuous mode
[  531.929804][T14601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.957336][T14601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.001271][ T6613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.037935][ T6613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.060763][ T1541] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  532.102570][ T6613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.116790][ T6613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.246167][ T1541] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  532.270020][ T1541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.299738][ T1541] usb 1-1: Product: syz
[  532.306759][ T1541] usb 1-1: Manufacturer: syz
[  532.321853][ T1541] usb 1-1: SerialNumber: syz
[  532.338778][ T1541] usb 1-1: config 0 descriptor??
[  532.430775][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.458115][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.578645][ T6613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.580167][ T1541] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  532.765210][ T6613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.258944][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'.
[  533.277702][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'.
[  533.344610][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'.
[  533.405622][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'.
[  533.656972][ T1541] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  533.699855][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'.
[  533.974036][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  533.984177][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  533.994671][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  534.017985][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  534.037997][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  534.314328][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'.
[  534.416517][T15031] Cannot find set identified by id 0 to match
[  534.417272][T15027] vlan2: entered promiscuous mode
[  534.430658][T15027] team0: entered promiscuous mode
[  534.440767][T15027] team_slave_0: entered promiscuous mode
[  534.447278][T15027] team_slave_1: entered promiscuous mode
[  534.531438][   T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  534.582492][   T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  534.626962][   T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.733169][ T6608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.763109][ T6608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.842610][ T1541] usb 1-1: USB disconnect, device number 30
[  534.869203][   T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  535.077483][ T6608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.104511][ T6608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.261668][ T6608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.299132][ T6608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.482455][ T6608] bond0: (slave netdevsim0): Releasing backup interface
[  535.524733][ T6608] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  535.551976][ T6608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.590486][ T6608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.612647][T15081] __nla_validate_parse: 6 callbacks suppressed
[  535.612670][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'.
[  535.640051][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'.
[  535.661705][T15075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2975'.
[  535.692263][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'.
[  535.712919][T15013] chnl_net:caif_netlink_parms(): no params data found
[  535.746336][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'.
[  535.934663][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'.
[  535.968678][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'.
[  536.005688][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'.
[  536.016015][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'.
[  536.046157][   T87] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  536.107646][ T5838] Bluetooth: hci3: command tx timeout
[  536.227797][   T87] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  536.237468][   T87] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.251726][   T87] usb 5-1: Product: syz
[  536.257927][   T87] usb 5-1: Manufacturer: syz
[  536.272660][   T87] usb 5-1: SerialNumber: syz
[  536.295010][   T87] usb 5-1: config 0 descriptor??
[  536.322919][ T6608] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  536.331561][ T6608] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 16:9b:3b:b5:93:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  536.525348][   T87] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  536.691934][ T6608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.702459][ T6608] bond_slave_0: left promiscuous mode
[  536.711264][ T6608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.721471][ T6608] bond_slave_1: left promiscuous mode
[  536.729949][ T6608] bond0 (unregistering): Released all slaves
[  536.864795][ T6608] bond1 (unregistering): (slave veth5): Releasing active interface
[  536.876329][ T6608] bond1 (unregistering): Released all slaves
[  536.904028][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'.
[  537.024570][ T6608] bond2 (unregistering): Released all slaves
[  537.166675][ T6608] bond3 (unregistering): Released all slaves
[  537.283795][ T6608] bond4 (unregistering): Released all slaves
[  537.405557][ T6608] bond5 (unregistering): Released all slaves
[  537.468560][T15013] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.482084][T15013] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.496375][T15013] bridge_slave_0: entered allmulticast mode
[  537.504300][T15013] bridge_slave_0: entered promiscuous mode
[  537.535544][   T87] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  537.550634][T15105] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  537.583407][ T6608] IPVS: stopping master sync thread 11672 ...
[  537.691130][T15107] veth3: entered promiscuous mode
[  537.734179][T15108] erspan0: entered allmulticast mode
[  537.840187][T15013] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.851664][T15013] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.860780][T15013] bridge_slave_1: entered allmulticast mode
[  537.883520][T15013] bridge_slave_1: entered promiscuous mode
[  538.022924][T15013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.058495][T15013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.186188][ T5838] Bluetooth: hci3: command tx timeout
[  538.364189][ T6608] hsr_slave_1: left promiscuous mode
[  538.374203][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.397627][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.439699][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.457841][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.520846][ T6608] veth1_macvtap: left promiscuous mode
[  538.534511][ T6608] veth0_macvtap: left promiscuous mode
[  538.541743][ T6608] veth1_vlan: left promiscuous mode
[  538.550437][ T6608] veth0_vlan: left promiscuous mode
[  538.886189][   T87] usb 5-1: USB disconnect, device number 55
[  539.693261][ T6608] team0 (unregistering): Port device team_slave_1 removed
[  539.741375][ T6608] team0 (unregistering): Port device team_slave_0 removed
[  540.158663][T15013] team0: Port device team_slave_0 added
[  540.276460][ T5838] Bluetooth: hci3: command tx timeout
[  540.302783][T15013] team0: Port device team_slave_1 added
[  540.358245][T15013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  540.365385][T15013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.392038][T15013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  540.433504][T15013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  540.464484][T15013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.540701][T15013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.654215][T15193] __nla_validate_parse: 9 callbacks suppressed
[  540.654236][T15193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3009'.
[  540.882192][T15013] hsr_slave_0: entered promiscuous mode
[  540.908613][T15013] hsr_slave_1: entered promiscuous mode
[  540.919507][   T87] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  541.124307][   T87] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  541.149466][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.167654][   T87] usb 4-1: Product: syz
[  541.172048][   T87] usb 4-1: Manufacturer: syz
[  541.198833][   T87] usb 4-1: SerialNumber: syz
[  541.217254][   T87] usb 4-1: config 0 descriptor??
[  541.417776][T15216] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  541.436914][   T87] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  542.346609][ T5838] Bluetooth: hci3: command tx timeout
[  542.443767][   T87] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  542.518349][T15013] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  542.542629][T15013] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  542.547200][T15252] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3025'.
[  542.606692][T15013] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  542.642689][T15013] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  542.647203][T15255] netlink: 'syz.0.3026': attribute type 1 has an invalid length.
[  542.779767][T15255] 8021q: adding VLAN 0 to HW filter on device bond10
[  542.887143][T15266] veth5: entered promiscuous mode
[  542.901545][T15266] bond10: (slave veth5): Enslaving as an active interface with an up link
[  542.943068][T15255] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  542.995197][T15276] tipc: Started in network mode
[  543.008258][T15276] tipc: Node identity 3e10a598eb9, cluster identity 4711
[  543.019793][T15276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.052143][T15278] syzkaller0: entered promiscuous mode
[  543.064826][T15278] syzkaller0: entered allmulticast mode
[  543.160700][T15276] tipc: Resetting bearer <eth:syzkaller0>
[  543.191972][T15275] tipc: Resetting bearer <eth:syzkaller0>
[  543.248339][T15275] tipc: Disabling bearer <eth:syzkaller0>
[  543.481076][T15013] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.614878][T15013] 8021q: adding VLAN 0 to HW filter on device team0
[  543.700550][  T980] usb 4-1: USB disconnect, device number 42
[  543.723100][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.730505][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.781159][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.788505][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.794201][T15312] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3038'.
[  543.920208][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'.
[  543.929263][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'.
[  543.945415][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'.
[  543.980534][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'.
[  544.668216][T15013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.858958][T15013] veth0_vlan: entered promiscuous mode
[  544.923121][T15013] veth1_vlan: entered promiscuous mode
[  545.020402][T15013] veth0_macvtap: entered promiscuous mode
[  545.048046][T15013] veth1_macvtap: entered promiscuous mode
[  545.151606][T15013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.213651][T15013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.296037][T15358] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3049'.
[  545.305889][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.336978][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.429070][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.450849][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.753689][ T6618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.765443][ T6618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.095611][T15388] No control pipe specified
[  546.191187][T15389] No control pipe specified
[  546.286279][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.303196][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.261428][T15419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3064'.
[  547.365461][T15419] vlan2: entered promiscuous mode
[  547.431378][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  547.442410][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  547.452806][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  547.462481][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  547.472699][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  547.548587][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3066'.
[  547.796747][T15409] lec:lec_atm_close: lec0: Shut down!
[  548.084105][T15436] syzkaller0: entered promiscuous mode
[  548.089867][T15436] syzkaller0: entered allmulticast mode
[  548.347676][T11837] ==================================================================
[  548.355890][T11837] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300
[  548.363129][T11837] Read of size 8 at addr ffff888032f280a8 by task khidpd_15c25886/11837
[  548.371573][T11837] 
[  548.373927][T11837] CPU: 0 UID: 0 PID: 11837 Comm: khidpd_15c25886 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  548.373951][T11837] Tainted: [L]=SOFTLOCKUP
[  548.373957][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  548.373966][T11837] Call Trace:
[  548.373972][T11837]  <TASK>
[  548.373978][T11837]  dump_stack_lvl+0xe8/0x150
[  548.374002][T11837]  print_report+0xba/0x230
[  548.374019][T11837]  ? __mutex_lock+0x812/0x1300
[  548.374034][T11837]  kasan_report+0x117/0x150
[  548.374050][T11837]  ? __mutex_lock+0x812/0x1300
[  548.374067][T11837]  __mutex_lock+0x812/0x1300
[  548.374084][T11837]  ? __mutex_lock+0x5ac/0x1300
[  548.374100][T11837]  ? l2cap_unregister_user+0x6a/0x1b0
[  548.374119][T11837]  ? __pfx___mutex_lock+0x10/0x10
[  548.374138][T11837]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  548.374159][T11837]  ? lockdep_hardirqs_on+0x7a/0x110
[  548.374174][T11837]  l2cap_unregister_user+0x6a/0x1b0
[  548.374193][T11837]  hidp_session_thread+0x3cb/0x440
[  548.374212][T11837]  ? lock_acquire+0x106/0x330
[  548.374228][T11837]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.374247][T11837]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.374268][T11837]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.374287][T11837]  ? __kthread_parkme+0x7a/0x1f0
[  548.374306][T11837]  ? __kthread_parkme+0x19c/0x1f0
[  548.374325][T11837]  kthread+0x388/0x470
[  548.374338][T11837]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.374355][T11837]  ? __pfx_kthread+0x10/0x10
[  548.374375][T11837]  ret_from_fork+0x51b/0xa40
[  548.374395][T11837]  ? __pfx_ret_from_fork+0x10/0x10
[  548.374410][T11837]  ? __switch_to+0xc7d/0x1400
[  548.374426][T11837]  ? __pfx_kthread+0x10/0x10
[  548.374446][T11837]  ret_from_fork_asm+0x1a/0x30
[  548.374471][T11837]  </TASK>
[  548.374477][T11837] 
[  548.547868][T11837] The buggy address belongs to the physical page:
[  548.554280][T11837] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032f2ba80 pfn:0x32f28
[  548.564348][T11837] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  548.571596][T11837] raw: 00fff00000000000 ffffea0001a75608 ffff8880b8440a40 0000000000000000
[  548.580177][T11837] raw: ffff888032f2ba80 0000000000000000 00000000ffffffff 0000000000000000
[  548.588848][T11837] page dumped because: kasan: bad access detected
[  548.595341][T11837] page_owner tracks the page as freed
[  548.600795][T11837] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5837, tgid 5837 (syz-executor), ts 85308188042, free_ts 548347321706
[  548.618941][T11837]  post_alloc_hook+0x231/0x280
[  548.623724][T11837]  get_page_from_freelist+0x24dc/0x2580
[  548.629269][T11837]  __alloc_frozen_pages_noprof+0x18d/0x380
[  548.635083][T11837]  alloc_pages_mpol+0x232/0x4a0
[  548.640022][T11837]  ___kmalloc_large_node+0x4e/0x150
[  548.645248][T11837]  __kmalloc_large_node_noprof+0x18/0x90
[  548.650979][T11837]  __kmalloc_noprof+0x3e8/0x760
[  548.655928][T11837]  hci_alloc_dev_priv+0x28/0x2060
[  548.660957][T11837]  vhci_create_device+0x120/0x650
[  548.665985][T11837]  vhci_write+0x3ce/0x4a0
[  548.670323][T11837]  vfs_write+0x61d/0xb90
[  548.674572][T11837]  ksys_write+0x150/0x270
[  548.678894][T11837]  do_syscall_64+0xe2/0xf80
[  548.683492][T11837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.689385][T11837] page last free pid 5837 tgid 5837 stack trace:
[  548.695821][T11837]  __free_frozen_pages+0xc01/0xd80
[  548.700937][T11837]  bt_host_release+0x82/0x90
[  548.705689][T11837]  device_release+0x9e/0x1d0
[  548.710278][T11837]  kobject_put+0x228/0x560
[  548.714832][T11837]  vhci_release+0x15a/0x1a0
[  548.719340][T11837]  __fput+0x44f/0xa70
[  548.723408][T11837]  task_work_run+0x1d9/0x270
[  548.728012][T11837]  do_exit+0x69b/0x2310
[  548.732167][T11837]  do_group_exit+0x21b/0x2d0
[  548.736838][T11837]  get_signal+0x1284/0x1330
[  548.741354][T11837]  arch_do_signal_or_restart+0xbc/0x830
[  548.746985][T11837]  exit_to_user_mode_loop+0x86/0x480
[  548.752277][T11837]  do_syscall_64+0x2b7/0xf80
[  548.756867][T11837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.762843][T11837] 
[  548.765160][T11837] Memory state around the buggy address:
[  548.770785][T11837]  ffff888032f27f80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  548.778855][T11837]  ffff888032f28000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.787171][T11837] >ffff888032f28080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.795311][T11837]                                   ^
[  548.800673][T11837]  ffff888032f28100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.808736][T11837]  ffff888032f28180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.816964][T11837] ==================================================================
[  548.826433][T11837] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  548.833664][T11837] CPU: 0 UID: 0 PID: 11837 Comm: khidpd_15c25886 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  548.845078][T11837] Tainted: [L]=SOFTLOCKUP
[  548.849509][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  548.859601][T11837] Call Trace:
[  548.862912][T11837]  <TASK>
[  548.865864][T11837]  vpanic+0x56c/0xa60
[  548.869885][T11837]  ? __pfx_vpanic+0x10/0x10
[  548.874570][T11837]  ? irqentry_exit+0x59e/0x620
[  548.879784][T11837]  panic+0xc5/0xd0
[  548.883520][T11837]  ? __pfx_panic+0x10/0x10
[  548.887939][T11837]  ? __mutex_lock+0x812/0x1300
[  548.892705][T11837]  ? __mutex_lock+0x812/0x1300
[  548.897471][T11837]  check_panic_on_warn+0x89/0xb0
[  548.902425][T11837]  ? __mutex_lock+0x812/0x1300
[  548.907186][T11837]  end_report+0x6f/0x140
[  548.911434][T11837]  kasan_report+0x128/0x150
[  548.915936][T11837]  ? __mutex_lock+0x812/0x1300
[  548.920706][T11837]  __mutex_lock+0x812/0x1300
[  548.925297][T11837]  ? __mutex_lock+0x5ac/0x1300
[  548.930151][T11837]  ? l2cap_unregister_user+0x6a/0x1b0
[  548.935532][T11837]  ? __pfx___mutex_lock+0x10/0x10
[  548.940564][T11837]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  548.946380][T11837]  ? lockdep_hardirqs_on+0x7a/0x110
[  548.951578][T11837]  l2cap_unregister_user+0x6a/0x1b0
[  548.956956][T11837]  hidp_session_thread+0x3cb/0x440
[  548.962444][T11837]  ? lock_acquire+0x106/0x330
[  548.967163][T11837]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.972797][T11837]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.979139][T11837]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.985379][T11837]  ? __kthread_parkme+0x7a/0x1f0
[  548.990409][T11837]  ? __kthread_parkme+0x19c/0x1f0
[  548.995443][T11837]  kthread+0x388/0x470
[  548.999525][T11837]  ? __pfx_hidp_session_thread+0x10/0x10
[  549.005164][T11837]  ? __pfx_kthread+0x10/0x10
[  549.009758][T11837]  ret_from_fork+0x51b/0xa40
[  549.014351][T11837]  ? __pfx_ret_from_fork+0x10/0x10
[  549.019462][T11837]  ? __switch_to+0xc7d/0x1400
[  549.024239][T11837]  ? __pfx_kthread+0x10/0x10
[  549.028832][T11837]  ret_from_fork_asm+0x1a/0x30
[  549.033608][T11837]  </TASK>
[  549.036788][T11837] Kernel Offset: disabled
[  549.041106][T11837] Rebooting in 86400 seconds..