last executing test programs:

8.761347278s ago: executing program 2 (id=5640):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x3}]}}]}]}, 0x44}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000f000020003000000000000000000e200000000020000000000000200200002"], 0x78)
close_range(r3, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

8.426412484s ago: executing program 2 (id=5642):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003887462023010100fe4a0102031b0001000000000904000001937234007eeace5e63100027090582000004000000000000"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', <r2=>0x0})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00')
write$binfmt_misc(r3, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000500)={{0x1d, 0x7c, 0x0, 0x2}, 'syz0\x00', 0x45})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000003000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], &(0x7f0000000000)='GPL\x00'}, 0x90)
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r5, 0x80044584, &(0x7f0000000300))
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x100000000000009)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x4, 0x0)

7.540669962s ago: executing program 3 (id=5643):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000))
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

7.403160558s ago: executing program 0 (id=5644):
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000000040), 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000200), 0x3, r2})
fcntl$setflags(r0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r3], &(0x7f0000000040)})

7.211538564s ago: executing program 0 (id=5645):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fcntl$getown(0xffffffffffffffff, 0x9)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
setuid(0x0)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f0000001500)=[{{0x0, 0x117, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xfffffffe}, {0x100}, {}, {}]})

6.317505278s ago: executing program 3 (id=5649):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083745808c016df05ef0100000301090212000100000000090400000003"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x400]}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0x8}})
r1 = socket$igmp6(0xa, 0x3, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, &(0x7f0000000140), 0x4, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010000000000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0xfffffffffffffd3e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='pim6reg1\x00')
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

6.186471442s ago: executing program 0 (id=5650):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

6.077379973s ago: executing program 4 (id=5651):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r4, @ANYBLOB="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"], 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

5.353408114s ago: executing program 0 (id=5654):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async)
mkdir(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002900)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x1a, 0x0, "87dd858ca74a5ffce09be60124903a9ac701f068352d50277e0a86687944c5a2d328cc483825f489bde0a8fc2cb227bb257805a4597f3509b628bcc4d6b94511f69f0ff69b74823316cb5c0277633f84"}, 0xd8) (async)
listen(r2, 0x3) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002800000000ff069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4c02000090780000"], 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x40}}, 0x0) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r8, 0x81204101, &(0x7f0000000440))
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) (async)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) (async)
r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r10, &(0x7f0000000200)="a38d", 0x2) (async)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0) (async)
fcntl$setstatus(r3, 0x4, 0xc00)
ppoll(&(0x7f0000000400)=[{r10}, {}], 0x2, 0x0, 0x0, 0x0)

5.291551688s ago: executing program 2 (id=5655):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095994ab844d497598f3282b16f529de1809a5fe70007b4f8c0892bbd233d52"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030a0000000019030006000000000002000000ac1414bb00000000010000ea2f00030005"], 0x50}, 0x1, 0x7}, 0x0)
r1 = syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100001524"], 0x0)
syz_usb_disconnect(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095994ab844d497598f3282b16f529de1809a5fe70007b4f8c0892bbd233d52"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030a0000000019030006000000000002000000ac1414bb00000000010000ea2f00030005"], 0x50}, 0x1, 0x7}, 0x0) (async)
syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100001524"], 0x0) (async)
syz_usb_disconnect(r1) (async)

5.219312912s ago: executing program 0 (id=5656):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
syz_usb_control_io(r0, &(0x7f00000024c0)={0x2c, &(0x7f00000002c0)={0x20, 0x1, 0xb8, {0xb8, 0x22, "d006f84e7bd247ed44ac149deea434326f83874a973c59c960dfb8ea9650a6fae4c44e34376d4035d89ffe7516d7a5baadc16b5306d9b06f9e8800d1704c8705a0201197e91b25f1e2c348c1c1c0c38433384d4e2294d418c1a1a0548149505ca6f064d05e0a37cb55ae42e920d4ec2575cc6baf6799fa604360ef5cbf0c4e701744a4f4f94cd69cfcce134454408917837107dd78d781d687ea905ccced05f63b89140e5cadd32a3259c8e845fa2eaed8ce2d6a1fd2"}}, &(0x7f00000023c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000002400)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x7, 0x7ca2}]}}, &(0x7f0000002440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2b, 0x2, 0x10, 0xf2, "db261bd8", "638cbae6"}}, &(0x7f0000002480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x4, 0x34, 0x5, 0x7, 0xc9}}}, &(0x7f0000004980)={0x84, &(0x7f0000002500)={0x40, 0x15, 0x3e, "053039cbf221961ae9981c47095719970fcfed44ff5e74fb345a9ab988e7caf34c83f7cd4860d6ef9fa1aaea39fc7679c0face24ea54af74dca47d8c6be5"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002600)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002640)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000002680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000026c0)={0x40, 0x9, 0x1, 0xf0}, &(0x7f0000002700)={0x40, 0xb, 0x2, 'q?'}, &(0x7f0000002740)={0x40, 0xf, 0x2, 0xeb}, &(0x7f0000002780)={0x40, 0x13, 0x6, @remote}, &(0x7f0000004800)={0x40, 0x17, 0x6}, &(0x7f0000004840)={0x40, 0x19, 0x2, 'Ga'}, &(0x7f0000004880)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000048c0)={0x40, 0x1c, 0x1, 0xaa}, &(0x7f0000004900)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000004940)={0x40, 0x21, 0x1, 0x9}})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020)
read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020)

5.114812815s ago: executing program 4 (id=5657):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000000000001ac, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000380))
io_uring_enter(0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0})
io_uring_enter(r5, 0x92, 0x0, 0x0, 0x0, 0x0)

4.421743765s ago: executing program 3 (id=5659):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x4e, 0x0, 0x0)

4.221150269s ago: executing program 4 (id=5660):
socket$nl_generic(0x10, 0x3, 0x10)
dup(0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sigaltstack(&(0x7f0000000200)={0x0, 0x180000002, 0xfffffca4}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x3b)
syz_open_procfs(0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

3.993085589s ago: executing program 4 (id=5661):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a0c0, 0x0)
setns(r0, 0x0)

3.859115034s ago: executing program 4 (id=5662):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104355040000000000000109020600010000000009040000010300000009210000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220700000003f81d36c1acfbe04823ee89443e3bc87bef0008"], 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400)
getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x0, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c)
sendmmsg$alg(r2, &(0x7f0000001880)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0x37, 0xfffe}], 0x18}], 0x1, 0x0)
socketpair(0x2, 0xa, 0x2850, &(0x7f0000000240))
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
dup2(r1, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1105518, &(0x7f00000038c0)=""/4103)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

3.015112862s ago: executing program 3 (id=5665):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fcntl$getown(0xffffffffffffffff, 0x9)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
setuid(0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x117, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xfffffffe}, {0x100}, {}, {}]})

2.659561659s ago: executing program 2 (id=5666):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)={@cgroup=r2, 0xffffffffffffffff, 0x12, 0x2010, 0x0, @link_fd=r2}, 0x20)

2.163445826s ago: executing program 1 (id=5667):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r4, @ANYBLOB="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"], 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x7e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

2.116221433s ago: executing program 3 (id=5668):
r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x2, 0x18, 0xf, 0x2, 0x2f, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_key={0x7, 0x9, 0x170, 0x0, "37b39dc086a48797bef150546fb105c9f75a093b089ccf6e077f9c13979c2c61a1e7fca490b765fb7842a12a965b"}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010100, @in6=@private1, 0x6, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_lifetime={0x4, 0x2, 0x10, 0x0, 0xe7, 0xc}, @sadb_sa={0x2, 0x1, 0x4d2, 0xc7, 0x3, 0x60, 0x3, 0x60000001}, @sadb_key={0x6, 0x9, 0x128, 0x0, "83ed2c0d3be9618ba4ad4570e0170010d1976be8f4cf3500a1ed4b322b933e822b3ae708a7"}, @sadb_key={0xc, 0x8, 0x2c0, 0x0, "83412b81a559664740692f413a2542c5d1345971c5a68fd1ea3bada4d1636348ff3178e12fdec9d4a957688c99f683a9a85a65e7828aa17dfac6180340f55f44010d042676483d028871dd272d5e47f99f7f543affb0722c"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x6c, 0xab, 0xe, 0x0, 0x8, 0x0, @in=@broadcast, @in=@empty}}]}, 0x178}}, 0x24004001)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r2=>0x0)
ioprio_set$pid(0x1, r2, 0x2000)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)

1.410756296s ago: executing program 0 (id=5669):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x3, 0x87)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f4350e40fa9988895398010203010902120001000000000904000000fa8e8000"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x5d8, 0xffffffff, 0x0, 0x360, 0x230, 0xffffffff, 0xffffffff, 0x508, 0x508, 0x508, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@private0, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0xff, 0xff], 'veth0_macvtap\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x21, 0x9, 0x4, 0x9}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e7b9"}}, @common=@rt={{0x138}, {0x5, [0x3, 0xffffffff], 0x6a, 0x4, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @loopback, @local, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0xb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0xff], 'ipvlan1\x00', 'nr0\x00', {}, {0xff}, 0x21, 0xa1, 0x4, 0x48}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x6, 0x39}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x3788078a, 0x100}}}, {{@uncond, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x2e, 0x6, 0x5, 0x0, 0xc00, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xffffffff, 0xffff00, 0xff, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xff000000], 0x30, 0x80}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd87, 0x9, 0x6, 0x0, 0x0, "9b723024e2718eb0d2421717a595dc4a69ac3321c5978a92e34e41839492504e4a9ac725e3a37f09097d896f242359dd516f61956c57230f5c58b753a1fd0660"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)

1.401088249s ago: executing program 2 (id=5670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000000000001ac, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000380))
io_uring_enter(0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0})
io_uring_enter(r5, 0x92, 0x0, 0x0, 0x0, 0x0)

1.343007885s ago: executing program 1 (id=5671):
socket$nl_generic(0x10, 0x3, 0x10)
dup(0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sigaltstack(&(0x7f0000000200)={0x0, 0x180000002, 0xfffffca4}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x3b)
syz_open_procfs(0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000580))
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

1.340852621s ago: executing program 3 (id=5672):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x7, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a00380031006332481ac1e517d34460bcc9f2ffffffffffff6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}, {&(0x7f0000002180)="ba5f5da37c31195ca10630d54e6161de2f6d26d85b1cbb451e98790325dd9c9105441542551f955196774553566a384c732c01513ccdfa38cbfb91c69479f68a5fc5d4799bfee92be260e11f3a21436258bae53d0f2ffe2b183e5e8d039b5e347741e9ac30dfbd0fd3b61d01dff2a999c99944967aa7a838cde8b50d0b4dd494bdd9dda3df46f798374caa4e11a2539f65943037bd055913116dfa96fe2944fa218d6aadf056ab7e645f86f479ef6742274d9282df72f35817638ba86a5fb82cb267bb18417cc39032af24b2dd30e7e78cc534409038d53428285ab0bbeab49664b784d82c82e07fd436f37e8a12", 0xee}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008afb66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0d748713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d954b70000000000008d1f606b381e4903b500000000000000000000004a2357ba5f6000de1cfa88b7165dcf4f2aaee86d4802000000000000008fdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c82bb6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f50b1e9b5d841ea55fe569bb7bf1e78191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce07300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca041bac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b39669500000000000000fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c8d0486cc6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bcb2c14521b8f326138a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a1459134d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa892c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8fa945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20b11884b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc000000000044a212ca6e96e5a5bcbb6eed37760c5f351131134963bd2f90a8e6f3b859b8e37fb346b72b8d7d03ed0fae55c5b2620c1d9a211b3de0f4c4c2f7e7935784a7d01c7978e2a74c9fee6ba00d61f3af18ad2b426a5d376416f45531e94d6554a7417cb721c2bfd383e3"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096}, 0x70)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0)
r2 = io_uring_setup(0x5aa5, &(0x7f0000000000)={0x0, 0x28d75, 0x8, 0x0, 0x2df})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000100)={&(0x7f0000001000)={[{&(0x7f00000000c0)="9bc136c7fd358a3686e7981105758c99e2e2a05af5d9c52ff35954f6af429a0e9f3f0f5e6bd7a1915caf05afaedc6c00e3ded832", 0x34}]}, 0x1, 0x2}, 0x1)
syz_usb_connect(0x0, 0xe4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb31ae201d0640c11dc1000000010902d20001180000000904"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x8, {0x0, 0x1}, {0x4d, 0x2}, @cond=[{}, {0x0, 0x0, 0x0, 0x0, 0xfffe}]})
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000001200))
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
r5 = gettid()
r6 = getpid()
r7 = msgget$private(0x0, 0x0)
msgsnd(r7, &(0x7f00000020c0)=ANY=[@ANYBLOB="03000000000000007ccb9383ee43f16c345a7b85f0e62e88078133b2bd23b4b8b63050962d16c10af5c767d15be7e4054424c59c9c25b215a84f50e2959ddca38be261baf339151d0e70b30090397c558daf62e2d470c05f8086299a967b03761e154c06e1b7f8f8230af142da5a3e46dfb81fd0c6bc8755ab19372b8c0cd9a1e4d54b8b0b9f50da9b0b259df210a38f5f5e4f2b86d9b67a005afdd809a13a2532b105b33a3e6489260000"], 0xa1, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0xe87aec46e8b2ded0)
r8 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9, 0x14b900)
kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000200)={r8, r4, 0x100})

1.101440576s ago: executing program 1 (id=5673):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03000000000000000000020000000900010086"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10, 0x0}, 0x0)

969.414766ms ago: executing program 1 (id=5674):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\t'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaac4999cac968686dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e223d73e1ad0b3f70ebcef89f7f17bd893982a76673e7e76af330468b16c927c085d7d652db6c84e5c86daef1f1a8b1feaa9beb8154027f586e7b141e7f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2000090780000030300fe08f989d463e2c400"], 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e04006d0c409e644aff8d7c52ac7e183335e1f816d31ffd4de9e267cdd1e76214b04bc14820f9e1408dc596e1d844b9790906923e3d86dcb45dc302f49d4194c98e371bb669979c2f79a6680b154ec34317c4795e10bfa7e01826d5c7c8d03a49e2912738cc6377324889ff14737bd0403192572e4e1ddca4a2d8e7c83b0587e25f3067f5b20b2ed4e083"], 0x7)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48)
epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1)
socket$nl_route(0x10, 0x3, 0x0)

894.993319ms ago: executing program 1 (id=5675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)

707.902648ms ago: executing program 4 (id=5676):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000000000/0x1000)=nil, 0x2000)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="23010200002a17006000000002000020"])
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x40)
syz_emit_ethernet(0x11dc0, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5ddf72d10300b2ae"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0xfffffffe}}]}, 0x20}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x3654}, {0xd, 0x3, 0xb8, 0x5}]}, 0x10)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x3634}], 0x7}, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r9, 0xc1004110, &(0x7f0000000340)={0x0, [0x408000, 0x8, 0xff], [{0xfffffff8}], 0x1c})
preadv(r8, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f00000019c0)=""/19, 0x13}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000001740)=""/207, 0xcf}, {&(0x7f0000001840)=""/194, 0xc2}], 0x8, 0x8, 0x0)
r10 = dup(r2)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000640)={0x4, 0x1, 0x2001, 0x1000, &(0x7f0000ffe000/0x1000)=nil})

408.408119ms ago: executing program 2 (id=5677):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000800)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001300)=[{}]})

0s ago: executing program 1 (id=5678):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
write$smackfs_netlabel(r0, &(0x7f0000000040)=@l1={{0x4, 0x2e, 0x6, 0x2e, 0x7, 0x2e, 0x1}}, 0x56)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x5a}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c}, 0x40000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, <r3=>0x0})
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x4)
close_range(r0, r0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xb55, &(0x7f0000000300)=""/187)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x303400, 0x0)
clock_gettime(0x0, &(0x7f0000000a80)={<r4=>0x0, <r5=>0x0})
recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000400)=@l2tp6, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/168, 0xa8}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/84, 0x54}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/204, 0xcc}], 0x8, &(0x7f0000000940)=""/242, 0xf2}, 0x5}], 0x1, 0x0, &(0x7f0000000ac0)={r4, r5+10000000})
read$FUSE(r0, &(0x7f0000000b00)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_LK(r0, &(0x7f0000002b40)={0x28, 0xfffffffffffffff5, r6, {{0xfffffffffffffffb, 0xfffffffffffff4d5, 0x0, r3}}}, 0x28)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000002b80)={0x8000000000000000})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c00), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2400900}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r10, 0xc00, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x812)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(r12, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x44, r10, 0x0, 0x70bd28, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sync()
openat$ptmx(0xffffffffffffff9c, &(0x7f0000002f80), 0x200, 0x0)
lstat(&(0x7f0000005340)='./file0\x00', &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000005600)={0x0, <r14=>0x0}, &(0x7f0000005640)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005680)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000005780)=0xe8)
syz_fuse_handle_req(r0, &(0x7f0000002fc0)="58629adf64c48624d3ec3ba606cfc09f6e41107d68381f3fa747c803fa17e03e7a29467644c49319ccf1522d5d9ea29e468209e7436e6858d16a81510bb228c7d352e7c5d5381f6fe1556f2b6e1d264541bc972418bf1ceb5642d3c72a177f61dc1ad2fde44488c2ce4e081422c200b840646677638c2cba7b0a54d6dca2613f0066109affff89646bb4858c33f96cff02a5460eecdc3f8babeb6b753705f05a63ea6f4239032642d39ffb5b06ca54cc6301c021e552ed9dfa2810daf4ec7791a8db1b13033fbb207e718cddf32e92b7ce9758dbc6feff3f0c9649600e05718a8b6ddfd90d0e42ff0fb6e81ee79f62fc071d3c8f64b7205f5581306426a42fdb808f3d5f90435be7ffd4a974320a00574b5bb66f73e6312efb9a07129c26fe6b004bb948f4d489fd342596daa4b042bd465da660f9d3b3f1c5842a5b7ffa68e407191ea62804b39e2a9214d08d3317ebdef44cd9e6ef1cbde9c798481322ced7dfdf39e3dcbd9a7269bcdb96ef906f803d9c35f106068d57fe463b02a1c897536b23fe01c53b50c7e76dbc983d0c3b2ca8f87dafd57c58e43cf6cdfc96f2931d6449484766ff47d26509dd817af0b6f4f245e328947c201e04d96bc6ecc6e8690b27598a5862be389199b37304538a3b933c0c9e29258d74e4000adf1fe1c8b13067b732aaca6f400e245c59a9e386e81b9811709f1ba7667f1d19924b28dd361e637a954208f643be7537e1e4fe79b4c9ea05de55c25be004bb5551941dff4c4239d532c97478179027b1c72679514646f481a05ddd79781cc10f1cf10d2afeb0736cbb306889b9546ec0503863ad657b69b440605ca2c16fb82a1bf17f43704d78d4b09e6d14efaa256e9f17d4c23c19f05ca11bfbfc42b932c0d5adcfcfeaaa841379b69a205948507499a04367ddd6740b42702e93223269bfc74b65d30f7f8fbd53e7f4eb3939ab223b19bd37d5dafb6e600783ea9d1439d00898fa52930fc543c86c1d3fee6d0cee8d88ec7e28cd729fbc17851c3a42e570901565938ba2a4d70b9eb38af929698d3dd88be0ca577775a30ee9551a2c7a9a935f993dead28adb4b74c65e7b057b79205c9ff44038df8560e730a5f16ccf4f2bce5c90218fe4fd091d10e3da529098498027d5cee39a149b31c9b484add987bfcd9803dcb326ce8faea0dc892f04e0f7bb5409311ced03d17350c8de3b84d2e7f4673e2df5b8c94483bc44a196192c5c25f1d78fcb04e74797cf9b108ab1370ac6163fc288d2385176a5f93168500d6486ef8d154851e50d4d6a8be5dd73abf39309286ef7f41a344623ccbeb547394cfb6251b204cb69a44204b2d501d2f4365ee79517b413df4a1da2f6545aefcfbf98087a8f2f44b649cffa753d35a90f8f562040e94bcc7364f8674d03a8fe7dad9d51923b832053ac88f697c6f0f66524306ba945139fbfdca356bcbb2309fb1584158e302fb6b370c795e46255714166e6450900679169ddc2a568368b2042547e5898235e9c83272eab85c8db5d6fb72a48d906359bccbe65a009c2a9093230a254801f75c5976eab55065ba749972b1f988a2794968245d96a9486537266b7e56d1c0717fa961f07df9d495ceb6ac17a253e19c9a037b0bc10e72c373b795e84175c86b70973962eef1e15f3776cfe72b0ee3e89b40d1576d623df549ec3e456406ea3d7ab357a91e8e53b77df622acc3ed29f2ad87c081157f35cfa6f720b0a2024ae0711b5fa451ae4af861ac57d8f67f2251343be6ce4ef53be8ea942b0d3bdfd165e570ee3928c8a7f6d67c5c813716011cb41733aa17330d17213327fe26840834182ffc65f8df3d0f5f311930fd7a99ef5737e208d0683526f43feca53656dd772074e8063dee0aa1cfbb057b911e33ac736a721dbb9a5af31689a47430b13307dab3fdaa8bbbb353c449d91cae03e52aa50100c3509d00cd62069f4cb14d8c3071af76a757f5b0155a39d3413758faceb1503b430ebbaf0d9f535ebe850f321b3de3c687970959506befa46f688f30fac869921360a794d1ad36e28527be10a2b8c8680663eb55f642685b84c946d635ba1f0b937d5897b55a33c881ca3ce9ea3122014d8ad677e0e327a38224ae3ac8140622ba03f4b4c00937e4b6d1d7d3a77f9500cd76fd53131399cd5b9fb2bf40b788b54075e4a3fc6a6b4c02b652364dd35e6b63e544932a4664991677780f49720cc1c6955e24dc0c5b3aa9b8a66d8e3acbd4e1a0344b8fb7fd355ea934fb9a3e66b46e8b0e288a999a94da94c4d675a1ae33017727f96a6978dcbb3ed5026cf3c87e2306477de3f375922a759106e085dc0d7a1196c267d18864f39d415405471f8b910deb6e62198f81c8dab99ee486e3d325fb6b3954d48ad5f34c15628bc7f9da20883323e9f39ef9d9a77a768d444f545773d662096b2ff8ec0dda376a1aed25febfbc509d1cbdd6b26689c855ef1c0f799d41ee667c065b7ad5abc973fdac3dd25bfda9eba8891fe4f7ed09bb6f4d6901bbe543fc46c91f0fc5b5b06ef840ec6e3fa4f29d0f51ef315279e03a041f31c3dec9ac11f28d080fffe044e3d5a3ef80d32b143a2167154b28b2688054c1a11374d056867864242128eb07a1ca119a13e6ec1d2623d2fa612e8aaad10b2c9fed2732f4fef6f62bcbe0a5d19a9cd5584a34744f1a9d8176f33f47091a8ce03e67024356cd251cb69f950f706e1877d4ede256cdc697ce2dab5a7ab8748a3f25b98f089d2e2d1f0b12e71e56024f09018ec0565e4fee790f06b47f1d4d3fc5a455dc3b96f833ccaba7ed9ca51b8e5502a4e48493d4100a6caa399a0aa91981848de46fc1bad6ffff1e1b515889a62a6f0e253c4f8db9cab4d07a07b70767b423d4dba55e05db5cf8786428e7d2150160d9b940b6f123295e46cde66879375047505995ab35055ad6a88838bfaa490fb2af2c668f0655bb0ec23ce9ca7615e6e16a575b0c0761c4e949e9538a8c86877bb50839a05fce6d2b0608fc827736caef01013a0f20cff12e8a23eddb6259b07d15d1db2f6f5a4308d21e26e3a4e8f8493d8ec79e857f36a7ee6b3e808b175eb6c3b5272f63185fb66f36029dab29fd6985122de675b3dd2cd6d04604f6db3eada0b7a78326c8b1f99fe7bd9407b0720a78b6b9b0b7c8bb244ddbc6ec0105ade8baad5a2f8a6dc5e72138f47d3ae79bdf144ba6ec755c850e09eb8daf51c89522826942d1eb3a58c8d9c7aa45ef7d79405a695e8114088fcdf0f5dc938f0131d4bc180f9f4194d526aff2eab63c116958e4a01b5a22111c155c11055083665d4f071caa22c7f2ec1d3d22409e9ec648794ff11adcfb0ca135e46e066db82243b93d67f146b48071a9d126e31ef9d9ff89379a5c25e728ed7ce0bbc95b8ab823391ea603d70e72af2281041417df719b844bdf8dfd21ec624308c2530ac958d8792c68a301bfec9471c0a0d3bee54cc8722ba41bad97c74c80df4a3db457ccb40140712f540a48be4e4b518b1710137b2bc4e3ac968a2ce47dea35b95820ed08cc4efcf5d45e493fbe6384e4e178f14414eafe0417449724658c30a95295a2cc79b16b097d84438a20587493f22980ee4ea19af6710f0a357bafe82dbc84e87f0810a0b7ae6f9d179672700319d344a597b0f7aef7c30e407d043c97f63481140e3d6943ff6a2c8db64ef61bbe6a14eadb3366de6509b7f1fa289e8ada34b92556ae8c309886b5c181afec251dc56c562884e2b607220188fa1e0a0eb523fb3ad94278515d491077243ac7243282db0f8382b45148dc595947bac9b3be60df344aa0b26e8442ecfb348fe28cd910b03a32d07774aa7384d5de5b242b50456cc87d8a55446b7c04e24299dbdcb4fb22abb5127a705013fb773862292ced70c09080fda0030bf0cd25c69c01296e412926465b169b8b4384e11e29a2156008c7a817da022d673fa45d839b8ede448c831c518bef517f21516051009e899add682e8ef6591e2d39b0f3d5536d8c357d06f2e7beca616f672ac15562495c142f813d60350b17296598f571a608a9c2edc0503849e445b95bef2a87a1cca56d76ff477d448648b99f5280cbc1d2d46a47be097fbffd0d54a10683c2777c7fb41ef74112309471f79bf72828ed08b04ad69d441f796dc2736e6525d3353017b798e02a06903cd7193bb866867a0b584274b958743bbb8f5980f412dfa29640450b6469779ad1ce293ae53eb7054e33152a44f5f017e67b2b845971d30e5327576d1e5bca6b16517ec2b32df84c7640fc6f0c54ec607b9d34f863102e88ff1bf2c719a242aefe185b77e806b1cefd510abcd139c3cbe5bfb53e8c353cddd933360130845cc2bb435bb7df9fabb28bb599be4883f362a2ffa85a2e3eee0b1cb5ad1285c341e4b49ebfb8a6d924ea572ac5057396186e49226bc089fe81a24f5b3f75aa4a11a34351ca0cd61f730c45cecefe553de9084b0747b3d4ce20b3ff8f6942b6b61a2077ab7ce1b89d06327a965308c48ef209df8c3505dc643c5584fef4cbeaab8188bd5d3caffc2b64d950fe71cc83bb6d7d7e91d0d12db29f24f4d59d0b9a0ff6f07c44161f4275b2cbd7a405b1519cfe5a40d8e02ab3ef5cc114036710551e48786933c43c0b7dbc9a3295ba326ca1ee7ecc5f2dd82c0ad8c1f024b1db9346f5aeceffe011f3a7901115d83ca2f14c72ca13989bd04db651d5ea4da677855eb42900412bca20cecf08ba8e3e58acf5a6d7430b57472f17f1d4df79266a4ed9819375bee0658fe4caff348af6d648cc2e58703fe23499c4f2c6ffc7339cad9b602a8ba052102e1d9a108093d7b2820bd600f4c2832b6d37101195d09c371ce43432267830f8b7aa219e30250c7045ae74d481e712a7b31e0f4f9e9eb5d43624c3fd2108f1de0b4e1a350f57dcc52c22f575ce76a92bca83dd317ebe65610400fff3b638213351e97461f95f1d4b0519cff40dc0e51c9304ed3f4b8bb2fcf273cd82dc4864d752dcdc55815eda04547487a64adca23951deb2fca1ea2e9a5c73321b55d59ae64ea274d41a42996b341772b12e1880d434d34a36515ad3911c78d744883cc3710f04cba0190f77eb6d85669a943bd5753bf3dd123011fb5cb47760bd28c1de1a7527547825dbd832bf3b39fd20bab75385be7dca0b274200789b7b1c70cbb7ca3b5b83f027fa7404c6715755da40eede455afb7353b6951846eece8144407a62bb18e99bc72f8ee4cb0056d721dec25f37a5b53e43ed47823387832973419fb970d7f8567a6394297a4e830d1f9cd98bcc8cf059903edd870f3dc648d798738f3b4d8012f04dacbaaefd193afb0dfc05f182ad63f162a1d4011f3a379f7ab2adb9994767c59e94778be48dad1f114e414b8f225144761ac4bfe5fd4503777c9e54c6a803eb23b6b255b9e0b0bd36a6b898edc779a9b74e336b2b07fef53427c359e7af21da671c352e0ad3281d785787605bc5dfa3801fdd09b5fdcfde6877e0f2f89e0fa7fa4457fe92e62d1c4699fa254de9549cd7b77b89a4da08fd10dcaafb15cf839237ca434ceb558eb50c9bf5809d316e4dde61f9538a9a67a7060b0fad1463a5f1820f421dedb6119cab97a98abcfdb914fd89ddce4ca3dc8612444243f294e9c93ab3805e51e003695576397e73aef81dadf041c4ea790ebd71acf799569d80ed77f16f82d54ebb0b5ab3e0b65b6f15e39c74c99ed33f4fb32c06a3a01310ed98fdd2f77275f3cc1eb22265cbc8e8d5f67b62caac5fd1aeb610ef599f55c421a9214b46e7a55bcbcbbca3471221f826c24084cac355ada6e8de6a08a20d4fc0c8c6f2534d3b2f15bfea50cad83726eabd9d640ea8fb9daf70825faa543ca1472e8d947441916c48ac7091d9cfa5e54ff9d69490db30be4c02a73ce8ac9a1203973642eb830c6608117df5018e455c20ee75d8d6cc243fedcb888daafa4c3d4a7db5c9df8eba253ea38c8b47037a2693b7fcdec3b98eaaded37ac60cd0df252394ed204908f839d4873d75c9f0b1cca0110b4b2c2bc97e50cf112fb184f263c6e291b2c6c32c30434f9c5ff25284c9e1378290484e5166830b85cd7f099ff7364572814fd9e5aa611e758b3e49655164cae080167f05af770dbe6b934db41f63399aa4ed192f5cf14b9f9cbbd69fbf646086a84a84bdfe23644f3bee94a244f8647f0b23b7dc90a8b4d4e45b8b4f7131336a9b03728762ce9072981a641f9eec794214efe326a8bcc0bec39b39868df5bd4942445a4ed66fc0291ee69077b9c063a098ea5abbe16b72a96fc5c67403cbbae569be169afb5b4c49414ef92d672687faaaf6e19f5c4d56230fee06b01be0da9d82c3857c89f3971b6d7e3f9189de9e0c54cd56afabc7257d64eb5aca23c20b4c68a9fde2f136e553e860efb0355ed7eb5e98077148236d6b16a05eb660b1a5549b06415d83d7495aabfd06c63acb6346c4be25f462f33ea33f482bf7590c23df404f8c7dc2307352b7cf30ee4f2a9f7e60de786f0908dc83e7ea16ecbc3d0129ec79c7823e0a62e88726027410acdc61e63b2fc378f98e182ff239f3c82884e9389a06f72c43c4bb88947eac2d0a3f06520d8966438170b2d853d34ce59567ec1cb14fc4d55ecda00862f10db83717088039f9b61aa22c63702118989e7c10f86b5c400852ca49dcb201c31644dc82bd38b6e935a0ab45ad141976100814c3fbf953f28f4eccdfb5cd541aa8074a6e6f01d454e1c5366428e52d2424d173b5229d2ffe14ebae7e525611856ccdcb084e27eba653eb12a4da6566b63be113c4b0c21abc376f03abeb1600ec8bf0ee676f3419c0668c3753d491bf773d69f2b8320a8e3cd0d3366df4a00027511afdf954185947c642497de92cb880fd8e6025eaaa9c97e6bfc829fc356cdc8ab3aedec3e0af95f7d57da6b2eae9badc55482f7caa248c8656748f5b972992312a0dab1629028fb1583ab95ff9d1f9d000e7eacf2cd10328dd413fdc562617f2a02f300cc935e09cb610ee5a5beef2a06218cdcf5304f7e7d97ee1685204d35d9102eb1c2c2338d0a107af2e384d51445778471db0ab3e5c04311dddb7783914fc8166d8dbec8a9b4c0f8b935106eaa8adc483b0a36c133b51855f731f8594dde545244e1cf7dbdf705e57de182c95992888b0720c4e8691bf376be6195e842d62691e7fb7a3aa1884c526abd91cc1087cdb7bea22c9965a6a2342b142d151010bf7ff0d0f613de897f8a3d2d00aca5b13263a51fe063c48fd37ad665a0c78c65c664b8472a20dd01a2d33309c94134d3c58f369ca31fd19df2ed852bfe1bfe597c89ef42ad028ff898517be93b320fb3d5ddcfb55b58041e1cb9d712f3ab048faa0665b9d95400c31a9d517c66d02c43fb1491c7690b81ea7290975806e53135d4e8aa3fa72d860e16797115a8c089b8625ec23a6231a552475c327b2b6e97e4e868ea92b3a1171dd74e3f6319ab52eba547d739a2bb15fea09af9406421492efb4cd13fa9d222ded7df8dfa4382e235a063d8faa5cf03ea9ca3b09dfeb32da65bb35f928e574274cf4d4700f9f7e9c42265517c3aa32e8e5547af40ff3b4c842db3a8dbe87ab5b80de4c37ee76f63274b11a8c2cfd761997065b09f4556798261b64624da46a275ba20202dd103859ea11170d9f3ee97ce3b60849418910142b93c837839aa8894122f36a02371f19d8500a998257a0fc35f789c7cecb044be926a1f5449d7bc29b6fb4ba29a0284ea9208b00e8258c0fd46ba60a7492e7c6730e7539bc1c889d8c4debf46f3b3ab86b7cbb24c887092ed560b32e4afccd32a9213c153635d4629fedd5ccf9bc86fa663945ab8a3e62fec30d513a1c598d654dea6146a97ab87770d8640b82f8f286bbad741028e284fbaccee64ae48785bf26351259b2d33da14648e86347213f8a52acc8f6a4673178686ad28be848b46b1da90f31045e357ef860f7cc0aea9c628cd68bede9d1c30ce0e0516bcd7354eb7798ff278408dcf677fed4732689ee9010d69d60a0c446195ec7982b61613daac2f890ceb149477e321a61d15602819cef978deaf119e502ac93e4464b53382b01c76d0a0ab03038f4d9da69c2991627622388a00b80d678fa38d61ec6a26684a4e4a50db2f605962d179c329e97e0241f76784f6bb93667bc64a09bd61f10d270fa70e5f4e17692b3fd2f56d16bf7fa80861c91cab687c63e3d5ef4f7b9f5819adc94e330ca4aa4a8982517a72f2dbd2686f6e7d761895f908a4de469d61c4fc536516e930143666333e030d6ed231be51268c88ccd3852270960ab1a30af7e10d145e430b5d90efd4c611416ad677ecf9b2ca95cb5be1f88a8050e1e1f8d8c1749fa868b0bffa08ad9b00593eba6aee1b5289974844776b0a2f8b46e6964544b56cfb65624eb931e233797cadffd7fc128006468e4322cd2ad1e71d51adad4682a153c72ac7575d0f8cbd2bd3195bcdc2c539a0780d9d74f4fe3cebf3a214c42d695c65465b8322b0c4ba32f0efc40a5bbe2443cac62f94c2550ddcbbeac0bc7d7adfbda0442779abfcea2c2f528f9227b93f33d95edac8a3db4fe11e5a7d121328b612f46891325e2e788a52ff89eb225ed8d08bcca1f004ea2a9ba9ee590bb9bc0b2f46fff15ad7c7ebd2fa48e77cc806b29f59c2028d716522b3d942fcc3d11279efe513fc84ffcd66a57a12b15b7668cc022a3b4ac1c4e867d6da412a55930d1d614153d2ef7fca3880710a639399b6a13690007ac7f6114948d29aadce3f41edb7cb2258dcfa9164fe59de3b6f1144d641d879d43fdf0bf2fd08f4b1b28d06904b2ae632a9dda79295c617d67baf4080f1e45a9566632648946122d0d55db43d792d47741c623b31a58adca4212d037368a9a7f16f9b337ad045ca9cf49368a939d742a9513be06b6e05d5b8ba345c29f15cf16ff1b7ef61a05fb103ac09f759ea37dded28654978787380d1a04a9d286f205cf835bfbf1be3b1ba49d83572390731e42e7269c8141319ab3050723eb2c6c2ac7bb7a4e1854cc40870f624d76500b6c2ee416066d3387259ea05259a2f25586176df5aee1ce245d22c5e25c49cd9a6d486d4441662dac8b51393c5018b937ad74cdb945e11d6e13506b6f8b09fd14ac666ad05fa1fb81a0358fff4ccc9ba8a5144c9730543080951bf49847088e29f6969a905f04d5cd47fe1ab64579c5ca60cdfbc2a2d89748e9fd94b1a57a931b1de624301637f874fcb10ec27e64c86bda5b37f4ced82173bd021598e2869d6b663d9d3a315b028d01dc7ae7499af387cfa0fd42222fdbc1bb21c3a5b882453b9b44f7f7e741b34b9ba7ec5714297d1f8d451e226a2356b1b8744fe09a6026ecaa47ea9f97af20bd276c4a5975ab604ce6079f1c877a5d0fed967aeca52fc530bea2526b48f0db49e539b97af630b3f5f908b921daf48f293f06bfe2ddcad238de994d50ed3796ee1cfbd4fbcfd9427a547c48bbe6fb10bc821c1cd4fd031d1936b3124a27f300c1fc8b2cfbcaa4ff9944c54d81327adf8fa17c72a116dbcaecd86d54396d9aabd1bbaac35b15172b21eea2b2d916dc7279dfed574b881b9ddaf79fb5e8762adfa7ef1337201bc8e39322ba559554bab5222fd99502d159e17a81681ad11b1ecdbf57740329e656a42508ba3b8df9512b81d81cf54b505e5d91fafa3ec7cb5b8c4d4f22ecb7bdc7908ad4f1ab2a5c7097c578a8fdb79afbcc5196cf1b31e5747c048c0a971027d0eac16bb1319dc744a38d56f6a580e41938d4678b1b4d233e6aaa5b6939b0af34358457adcdd1615306d66a1ffa48f094e421c4cb9f1dc9528bc726490b59b554bce7f861e549529b62a292ba7f3c1f605c50cd4ba2e53d282cab7f971340b0297f47e0f23d60628cbf4148fbed6a722ab05bb838eb43fe7602051e51cedc54093141044662f32b3bbf0904719d2f94e2a1886a4be7044f4478fddb0919a76431533b5fc558fbc99398e3085a82c22a08ed80098d8ab537404c5567bfc8d1cf6d02869eddff4b254b9f52cb5c1c4a327470aabb934a8a82df2e638fe2c34ab51618ce5fe6ccd1905294664ad3d4823240d2ae710921b15254e59486876b7c2c6357a6accec3da1a06e83916a1a379a6b53c40ff08fb72e8c9c1a559d1ddff2bd7a0f88554dd4d7cff0025dc1f1ef232f47fd0d94f95a52314aea27e46771e627db46176e2edf9412014343b7629a5b9ec41572fe2f17ce873488a1eed13f4e78fad32686c583a6f8a281a41ea73c860755a3dfa335d86613dc6a48af276e3ab2610b964715ab6388d9f410bde349c9726420fda5197402ac229dbf4e96d5cf8e75d0604b2f7cdff50010b19e7ee16ba815a99fe720f80eeda55856e25564d6719922255471ecd3016dffdc1da50dfbd9a59eaf3e3176ce5d11d4b0d9eb731615d966f4d7e7c61670558fe50d72e5b6652f1006e05df330c7ffa737971f3e04b25e3f558d69e767c1777156e1b8a3cd61dede90ec7afdee8d7b64fbd19db89c05ada44fb2a86f4c4145b99c25f1d2e5d79799bf2c42c98a8f94c4f48b8d6dcb9c37f44c27479e215caea174b7c0e020a3edf5b308224d37dbd34a04ec2965186a4adbd186170c8c19bf0af70c46df80e105414cd83b97b68ca3483838bab230ca609b1dbb814ced9680420c4853b67888f57e574f39f2418b444c59a1727f9f1441e4a61cf9ae9db8d74bc8674258ccd45482a41b7a834f62c0b70923d389e3039c93b8c3bd2720dae2bae715b9fc87827655a6b308b1d33321bfe5f90b6b4e8fedb6e2156e6429894da21cc9abe5c1412e600ab2472bba5eff324077a8e929cb98e40d5c70198d6955302cdfc341df928a5ed82e38bd5c6c87ceec526fd59a9d8947cc70e02d52a783a71abd9640dfe410595d845b519c3e287db8c9599d2446647d972bfa5ccfb3d6f97131d3b191d9c71e05de435dc370b5f60aeb6f83a7561d57c2a046c3eda65f64b41e24c4d06c2f5acb603d4698283314a715ec389dfaf18e9699ad1267a68e00092928dee177c76d301615d37d3880a82773b93ade53ce0ced862fcd0443cf8803bb3bce1d632ab3e2d634c835d241783999a690d0c7a87b096a9e207cf2e365d6b15f599039a67b37ee9b233afd442a690e83f3aee98d0d9dbb5f6c39ac28317cc942d5deb3afea5bfb8a70104b260df0b39f7b7337128eab3a2f2621bb6fb1d1be5814913f7537cc2d547e0633c1ac1282449ab279b5b0b24a1a0bbeca6b64eb92606baf3f3b3985fde6ae8a637c33810530ac56b94a0430444a72c1f1ce0d8a2bae0f0254576b5ef41f2a23cf5b0d909170d863f0191cab6fc6aa1f3be10cd8c38f3ce58535ad443c9e3451680b5b3551d7c0ca7e107f0c73cf8988dee2d03999e8d1103493b1bad96337a2fb6b828c9697f47b196c139477b537302cdaf560e853daddcb4882150fd367a9d88dd3742d205438683efc39fae2c0e1f5dd39857f782772d608f553440155ad1f3a1b9d90639024f1d4c437b93a89babb3f5072bdc5fb7ba368e55dd6aea0f77df981d2ef48e1e91f97560755a92829e897ef74320b6b50c8bab6aa25bd7e88e17279d5a4473c182dd22efa", 0x2000, &(0x7f0000005cc0)={&(0x7f0000004fc0)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x28, 0x4bb3, 0x800, 0x6f5f, 0x4, 0x1, 0x6}}, &(0x7f0000005040)={0x18, 0x0, 0x3bc, {0x5}}, &(0x7f0000005080)={0x18, 0x0, 0x7, {0x9}}, &(0x7f00000050c0)={0x18, 0xfffffffffffffff5, 0x0, {0x9ffc}}, &(0x7f0000005100)={0x18, 0x0, 0x8, {0x5}}, &(0x7f0000005140)={0x28, 0x0, 0x4, {{0xfffffffffffff053, 0x7, 0x1, r9}}}, &(0x7f0000005180)={0x60, 0x0, 0xfffffffffffffff4, {{0xe5, 0x8000000000000000, 0x400, 0x4, 0x81, 0x40, 0x2, 0x1f}}}, &(0x7f0000005200)={0x18, 0x0, 0x1, {0x8}}, &(0x7f0000005240)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f0000005280)={0x20, 0x0, 0x4, {0x0, 0x11}}, &(0x7f00000052c0)={0x78, 0x0, 0x0, {0x6, 0x7f, 0x0, {0x5, 0x0, 0x6, 0x4930, 0x94d, 0x2, 0x6, 0x7fffffff, 0x8001, 0x2000, 0xd, r7, r8, 0x38, 0xfffffff7}}}, &(0x7f0000005400)={0x90, 0xffffffffffffffda, 0x0, {0x5, 0x2, 0x5, 0xfffffffffffffffb, 0x7, 0x2, {0x3, 0x7f800000000000, 0x3, 0x100000001, 0x7, 0xc, 0x10, 0x3, 0x0, 0x4000, 0x2, r7, r13, 0x80000000, 0x3}}}, &(0x7f00000054c0)={0x140, 0x0, 0xe, [{0x2, 0xffffffffffffffff, 0x2, 0x6, ':)'}, {0x0, 0x6, 0x8, 0x11, 'nl80211\x00'}, {0x6, 0xfffffffffffffffb, 0xb, 0x9, '/dev/ttyS3\x00'}, {0x6, 0x4, 0x2, 0x0, '*\''}, {0x1, 0x0, 0x8, 0xfffffff1, 'nl80211\x00'}, {0x4, 0xfffffffffffff801, 0x5, 0x1, 'none\x00'}, {0x5, 0x80000000, 0x6, 0x7, '%%}*+#'}, {0x5, 0x9, 0xa, 0x3000, '-!\'@$-[.}-'}, {0x4, 0x401, 0x5, 0x6, 'IPVS\x00'}]}, &(0x7f00000057c0)={0x3e8, 0x0, 0x10000, [{{0x2, 0x2, 0x8, 0x3, 0xbddd, 0x9, {0x0, 0x56e, 0x2, 0x7fffffffffffffff, 0x0, 0xf, 0x0, 0x4, 0x7fff, 0xa000, 0x486, r14, r8, 0x9, 0x7f66}}, {0x2, 0x589, 0x6, 0x62, '\xff\xff\xff\xff\xff\xff'}}, {{0x3, 0x3, 0x8000, 0xa, 0x2, 0x5, {0x4, 0x3, 0xf1b, 0x2, 0x5, 0x7950, 0xfffffffd, 0x7, 0x91, 0x8000, 0x7, r7, r8, 0x4, 0x9}}, {0x2, 0x3, 0x3, 0xd1f, '@]-'}}, {{0x6, 0x0, 0xfffffffffffffff9, 0x0, 0xdeb5, 0x0, {0x1, 0x2d3, 0xfffffffffffffffa, 0xc8, 0x100, 0xbf79, 0x8, 0x1, 0x7, 0xc000, 0x4e79, r7, r8, 0x10001, 0x100}}, {0x6, 0x1, 0x1f, 0x40, '/sys/kernel/debug/binder/stats\x00'}}, {{0x3, 0x3, 0xe6, 0x3, 0x4, 0x8, {0x4, 0xb8f9, 0x80000001, 0x2, 0x0, 0xffffffffffff3f89, 0x5, 0x400, 0x3ff, 0x6000, 0x8001, r7, r8, 0x59bd037, 0xe}}, {0x1, 0x3, 0x2, 0xf0, '@\xfd'}}, {{0x6, 0x0, 0xb8c, 0xfffffffffffffff7, 0x9, 0x7, {0x1, 0x5, 0x0, 0x7, 0x8, 0x5, 0x100, 0x6, 0x1f1d, 0x2000, 0x0, r15, r8, 0x1, 0x1000}}, {0x0, 0x0, 0x6, 0xaa, 'wlan1\x00'}}, {{0x4, 0x2, 0x0, 0x3bde, 0x2a, 0x6, {0x3, 0x5, 0x19, 0x4, 0xf7, 0x8, 0xd01, 0x8, 0x6, 0x8000, 0x7, r7, r8, 0x7, 0x101}}, {0x2, 0x4, 0x3, 0xffffffff, '&-{'}}]}, &(0x7f0000005bc0)={0xa0, 0x0, 0x8000, {{0x1, 0x3, 0x6, 0x5, 0x200, 0x10000, {0x0, 0x9, 0x1, 0x127, 0x1, 0xa, 0xffffffff, 0x8001, 0x6, 0x8000, 0x8, r7, 0x0, 0x8, 0x8}}, {0x0, 0x8}}}, &(0x7f0000005c80)={0x20, 0x0, 0x3, {0x80000000, 0x4, 0x0, 0x7382}}})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000005d40)={0xa8, 0x0, 0x3})
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000005e80)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xdf}]}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

SS using preconfigured BSSID 50:50:50:50:50:50
[ 1365.500215][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1365.571728][T21762] netlink: 'syz.3.5274': attribute type 11 has an invalid length.
[ 1366.473637][T21779] overlayfs: missing 'lowerdir'
[ 1366.559125][T21771] binder: BINDER_SET_CONTEXT_MGR already set
[ 1366.567765][T21771] binder: 21766:21771 ioctl 4018620d 20000100 returned -16
[ 1366.703044][    C0] eth0: bad gso: type: 1, size: 1408
[ 1367.718139][   T29] audit: type=1326 audit(2000001253.003:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1367.799095][   T29] audit: type=1326 audit(2000001253.013:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1367.920081][   T29] audit: type=1326 audit(2000001253.083:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1368.000230][   T29] audit: type=1326 audit(2000001253.083:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1368.050307][ T5263] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1368.120870][ T5313] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[ 1368.129052][   T29] audit: type=1326 audit(2000001253.083:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1368.202706][   T29] audit: type=1326 audit(2000001253.083:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ae2975d50 code=0x7ffc0000
[ 1368.270434][ T5263] usb 5-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[ 1368.282240][   T29] audit: type=1326 audit(2000001253.083:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.304254][ T5263] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[ 1368.330199][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.352147][ T5313] usb 1-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config
[ 1368.362753][   T29] audit: type=1326 audit(2000001253.083:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.363213][ T5313] usb 1-1: too many endpoints for config 0 interface 0 altsetting 230: 166, using maximum allowed: 30
[ 1368.405652][ T5263] usb 5-1: config 0 descriptor??
[ 1368.451770][ T5263] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22
[ 1368.457870][   T29] audit: type=1326 audit(2000001253.083:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.460764][ T5263] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[ 1368.511987][ T5313] usb 1-1: config 0 interface 0 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[ 1368.540132][ T5313] usb 1-1: config 0 interface 0 altsetting 230 has 1 endpoint descriptor, different from the interface descriptor's value: 166
[ 1368.559997][ T5263] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[ 1368.576723][ T5313] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1368.584656][ T5263] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[ 1368.611439][ T5313] usb 1-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93
[ 1368.621231][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.629249][ T5313] usb 1-1: Product: syz
[ 1368.649956][ T5313] usb 1-1: Manufacturer: syz
[ 1368.654699][ T5313] usb 1-1: SerialNumber: syz
[ 1368.680329][ T5313] usb 1-1: config 0 descriptor??
[ 1368.708565][   T29] kauditd_printk_skb: 21 callbacks suppressed
[ 1368.708582][   T29] audit: type=1326 audit(2000001254.003:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.778211][   T29] audit: type=1326 audit(2000001254.003:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.784078][ T5313] usb 5-1: USB disconnect, device number 88
[ 1368.815352][   T29] audit: type=1326 audit(2000001254.003:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.858929][ T5212] usb 1-1: USB disconnect, device number 81
[ 1368.879300][   T29] audit: type=1326 audit(2000001254.003:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ae2976fbb code=0x7ffc0000
[ 1368.958987][   T29] audit: type=1326 audit(2000001254.003:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21766 comm="syz.0.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae29a93a5 code=0x7ffc0000
[ 1369.249416][T21810] tipc: Started in network mode
[ 1369.268272][T21810] tipc: Node identity ac1414aa, cluster identity 4711
[ 1369.288672][T21810] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1369.297310][ T1169] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1369.533730][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1369.589601][ T5212] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1369.642307][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1369.881169][ T1169] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1369.986961][ T5212] usb 1-1: Using ep0 maxpacket: 16
[ 1370.002838][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.012730][ T5212] usb 1-1: config 6 has an invalid interface number: 119 but max is 0
[ 1370.041195][ T1169] usb 2-1: config 0 descriptor??
[ 1370.046444][ T5212] usb 1-1: config 6 has no interface number 0
[ 1370.077665][ T5212] usb 1-1: config 6 interface 119 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64
[ 1370.129978][ T5212] usb 1-1: config 6 interface 119 has no altsetting 0
[ 1370.151738][ T5212] usb 1-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= b.48
[ 1370.164947][ T5212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.180003][ T5212] usb 1-1: Manufacturer: 탻짹჎슦弮䃮⽡쳤嫮㉦ꭴ湏扏퍐鷸㉾

[ 1370.193651][ T5212] usb 1-1: SerialNumber: syz
[ 1370.243263][T21824] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1370.383696][ T1169] ath6kl: Failed to submit usb control message: -71
[ 1370.394525][ T5313] tipc: Node number set to 2886997162
[ 1370.400160][ T1169] ath6kl: unable to send the bmi data to the device: -71
[ 1370.407617][ T1169] ath6kl: Unable to send get target info: -71
[ 1370.421232][ T1169] ath6kl: Failed to init ath6kl core: -71
[ 1370.434420][ T1169] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1370.441521][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'.
[ 1370.468014][ T1169] usb 2-1: USB disconnect, device number 79
[ 1370.659991][ T5344] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1370.730651][ T5212] digi_acceleport 1-1:6.119: required endpoints missing
[ 1370.758438][ T5212] usb 1-1: USB disconnect, device number 82
[ 1371.529920][ T5344] usb 5-1: Using ep0 maxpacket: 8
[ 1371.537027][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1371.548080][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1371.561557][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1371.575767][ T5344] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82
[ 1371.589663][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.602660][ T5344] usb 5-1: Product: syz
[ 1371.612082][ T5344] usb 5-1: Manufacturer: syz
[ 1371.622402][ T5344] usb 5-1: SerialNumber: syz
[ 1371.638718][ T5344] usb 5-1: config 0 descriptor??
[ 1371.718069][   T29] audit: type=1326 audit(2000001257.013:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21846 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1371.775876][   T29] audit: type=1326 audit(2000001257.013:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21846 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1371.819430][   T29] audit: type=1326 audit(2000001257.013:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21846 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1371.858654][ T5264] usb 5-1: USB disconnect, device number 89
[ 1371.869908][   T29] audit: type=1326 audit(2000001257.023:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21846 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1371.940800][   T29] audit: type=1326 audit(2000001257.023:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21846 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1373.029869][ T5313] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1373.199867][ T5313] usb 2-1: device descriptor read/64, error -71
[ 1373.329847][ T5264] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1373.480059][ T5313] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1373.520016][ T5264] usb 5-1: Using ep0 maxpacket: 8
[ 1373.528617][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1373.547675][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1373.559352][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1373.580573][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1373.606591][ T5264] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[ 1373.616196][ T5264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.624431][ T5264] usb 5-1: Product: syz
[ 1373.628613][ T5264] usb 5-1: Manufacturer: syz
[ 1373.636929][ T5264] usb 5-1: SerialNumber: syz
[ 1373.644117][ T5264] usb 5-1: config 0 descriptor??
[ 1373.650182][ T5313] usb 2-1: device descriptor read/64, error -71
[ 1373.671856][ T5264] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85
[ 1373.773125][ T5313] usb usb2-port1: attempt power cycle
[ 1373.989947][ T5264] rc_core: IR keymap rc-imon-pad not found
[ 1374.006335][ T5264] Registered IR keymap rc-empty
[ 1374.020998][ T5264] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1374.050870][ T5264] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1374.119235][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.136269][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.157722][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.174942][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.192051][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.199929][ T5313] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1374.208693][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.232018][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.247265][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.250853][ T5313] usb 2-1: device descriptor read/8, error -71
[ 1374.261522][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.279946][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.294953][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.312022][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.328103][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.335130][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.342403][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.349569][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.356452][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.367511][   T29] kauditd_printk_skb: 8 callbacks suppressed
[ 1374.367527][   T29] audit: type=1326 audit(2000001259.663:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21885 comm="syz.0.5308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x0
[ 1374.395229][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.402056][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.409890][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.417519][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.427462][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.434260][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.441236][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.447944][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.454913][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.467721][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.483492][T21872] bridge: RTM_NEWNEIGH with invalid ether address
[ 1374.540066][ T5313] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1374.553343][T21889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'.
[ 1374.562569][ T5264] imon:send_packet: packet tx failed (-71)
[ 1374.562733][T21889] netlink: 'syz.0.5308': attribute type 15 has an invalid length.
[ 1374.590092][ T5264] imon 5-1:0.0: remote input dev register failed
[ 1374.596811][ T5264] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[ 1374.598926][T21889] netlink: 'syz.0.5308': attribute type 18 has an invalid length.
[ 1374.620589][ T5313] usb 2-1: device descriptor read/8, error -71
[ 1374.656614][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5309'.
[ 1374.672092][ T5264] imon 5-1:0.0: unable to initialize intf0, err 0
[ 1374.687301][ T5264] imon:imon_probe: failed to initialize context!
[ 1374.694393][ T5264] imon 5-1:0.0: unable to register, err -19
[ 1374.711386][ T5264] usb 5-1: USB disconnect, device number 90
[ 1374.760934][ T5313] usb usb2-port1: unable to enumerate USB device
[ 1375.203065][T10024] libceph: connect (1)[c::]:6789 error -101
[ 1375.220510][T10024] libceph: mon0 (1)[c::]:6789 connect error
[ 1375.268777][T21896] ceph: No mds server is up or the cluster is laggy
[ 1375.279766][ T5264] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1375.472946][ T5264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1375.492980][ T5264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1375.537170][T21915] 9pnet_fd: Insufficient options for proto=fd
[ 1375.538498][ T5264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1375.554226][T21916] 9pnet_fd: Insufficient options for proto=fd
[ 1375.591249][ T5264] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1375.609834][ T5264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.617894][ T5264] usb 5-1: Product: syz
[ 1375.735329][T21915] usb usb7: check_ctrlrecip: process 21915 (syz.1.5315) requesting ep 01 but needs 81
[ 1375.745011][T21915] usb usb7: usbfs: process 21915 (syz.1.5315) did not claim interface 0 before use
[ 1375.789875][ T5264] usb 5-1: Manufacturer: syz
[ 1375.794524][ T5264] usb 5-1: SerialNumber: syz
[ 1375.815482][ T5264] usb 5-1: selecting invalid altsetting 1
[ 1375.940537][T21926] binder: BINDER_SET_CONTEXT_MGR already set
[ 1375.946731][T21926] binder: 21924:21926 ioctl 4018620d 20000100 returned -16
[ 1376.009975][   T29] audit: type=1326 audit(2000001261.293:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1376.021200][ T5264] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[ 1376.052338][ T5264] cdc_ncm 5-1:1.0: bind() failure
[ 1376.080868][   T29] audit: type=1326 audit(2000001261.293:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1376.117325][ T5264] usb 5-1: USB disconnect, device number 91
[ 1376.151037][   T29] audit: type=1326 audit(2000001261.313:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1376.246044][   T29] audit: type=1326 audit(2000001261.313:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1376.311860][   T29] audit: type=1326 audit(2000001261.313:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1376.339725][ T5313] usb 3-1: new full-speed USB device number 92 using dummy_hcd
[ 1376.372096][   T29] audit: type=1326 audit(2000001261.343:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4137f75d50 code=0x7ffc0000
[ 1376.434662][   T29] audit: type=1326 audit(2000001261.343:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1376.495874][   T29] audit: type=1326 audit(2000001261.343:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1376.534588][   T29] audit: type=1326 audit(2000001261.343:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1376.558706][ T5313] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config
[ 1376.595357][ T5313] usb 3-1: too many endpoints for config 0 interface 0 altsetting 230: 166, using maximum allowed: 30
[ 1376.635276][ T5313] usb 3-1: config 0 interface 0 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[ 1376.681420][ T5313] usb 3-1: config 0 interface 0 altsetting 230 has 1 endpoint descriptor, different from the interface descriptor's value: 166
[ 1376.715959][ T5313] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1376.744200][ T5313] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93
[ 1376.764884][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1376.789506][ T5313] usb 3-1: Product: syz
[ 1376.798328][ T5313] usb 3-1: Manufacturer: syz
[ 1376.816846][ T5313] usb 3-1: SerialNumber: syz
[ 1376.837646][ T5313] usb 3-1: config 0 descriptor??
[ 1377.252130][T21950] netlink: 'syz.1.5324': attribute type 11 has an invalid length.
[ 1377.413467][T21953] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5325'.
[ 1378.861031][ T5263] usb 3-1: USB disconnect, device number 92
[ 1378.875103][    C0] eth0: bad gso: type: 1, size: 1408
[ 1378.962683][T21979] netlink: 'syz.0.5333': attribute type 1 has an invalid length.
[ 1378.970790][ T5313] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1378.979096][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5332'.
[ 1378.988444][T21979] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5333'.
[ 1379.068445][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5334'.
[ 1379.079092][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5334'.
[ 1379.159612][ T5313] usb 2-1: Using ep0 maxpacket: 16
[ 1379.166466][ T5313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1379.177600][ T5313] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[ 1379.187809][ T5313] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 1379.202175][ T5313] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1379.212597][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1379.223778][ T5313] usb 2-1: SerialNumber: syz
[ 1379.243406][T21970] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1379.252290][ T5313] cdc_acm 2-1:1.0: skipping garbage
[ 1379.410099][ T5264] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1379.480087][ T5313] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[ 1379.506869][ T5313] usb 2-1: USB disconnect, device number 84
[ 1379.509604][T10024] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1379.599669][ T5264] usb 1-1: Using ep0 maxpacket: 16
[ 1379.611272][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1379.636695][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1379.649905][ T5264] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[ 1379.658981][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.688602][ T5264] usb 1-1: config 0 descriptor??
[ 1379.721772][T10024] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1379.742852][T10024] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1379.759359][T10024] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1379.780387][T10024] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1379.790126][T10024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.792545][T17178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1379.799990][T10024] usb 3-1: Product: syz
[ 1379.811357][ T5219] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1379.820196][T10024] usb 3-1: Manufacturer: syz
[ 1379.825062][T10024] usb 3-1: SerialNumber: syz
[ 1379.825108][T17178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1379.839749][T17178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1379.853213][T17178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1379.861318][T17178] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1379.870669][T17178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1379.871131][T10024] usb 3-1: selecting invalid altsetting 1
[ 1380.019945][ T5219] usb 5-1: Using ep0 maxpacket: 32
[ 1380.031497][ T5219] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1380.086352][ T5219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1380.108159][ T5219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1380.120832][T10024] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[ 1380.126920][T10024] cdc_ncm 3-1:1.0: bind() failure
[ 1380.134204][ T5264] gt683r_led 0003:1770:FF00.004E: collection stack underflow
[ 1380.137730][ T5219] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1380.160742][ T5264] gt683r_led 0003:1770:FF00.004E: item 0 4 0 12 parsing failed
[ 1380.169934][T10024] usb 3-1: USB disconnect, device number 93
[ 1380.176018][ T5219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.190042][ T5264] gt683r_led 0003:1770:FF00.004E: hid parsing failed
[ 1380.196899][ T5264] gt683r_led 0003:1770:FF00.004E: probe with driver gt683r_led failed with error -22
[ 1380.211614][ T5219] usb 5-1: config 0 descriptor??
[ 1380.217511][T21988] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1380.239821][ T5219] hub 5-1:0.0: USB hub found
[ 1380.294266][T21989] chnl_net:caif_netlink_parms(): no params data found
[ 1380.390052][ T5264] usb 1-1: USB disconnect, device number 83
[ 1380.424752][T21989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.432554][T21989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.444005][T21989] bridge_slave_0: entered allmulticast mode
[ 1380.454069][T21989] bridge_slave_0: entered promiscuous mode
[ 1380.464702][T21989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1380.472386][T21989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.479810][ T5212] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1380.481410][T21989] bridge_slave_1: entered allmulticast mode
[ 1380.495230][T21989] bridge_slave_1: entered promiscuous mode
[ 1380.497074][ T5219] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1380.543815][T21989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1380.560366][T21989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1380.619137][T21989] team0: Port device team_slave_0 added
[ 1380.629899][T21989] team0: Port device team_slave_1 added
[ 1380.668094][T21989] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1380.671852][ T5212] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53
[ 1380.675158][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1380.709007][ T5212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.729403][ T5212] usb 2-1: Product: syz
[ 1380.734399][ T5212] usb 2-1: Manufacturer: syz
[ 1380.738838][T21989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1380.749709][ T5212] usb 2-1: SerialNumber: syz
[ 1380.755817][ T5212] usb 2-1: config 0 descriptor??
[ 1380.776109][T21989] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1380.779388][ T5212] gspca_main: spca506-2.14.0 probing 99fa:8988
[ 1380.793419][T21989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1380.822551][T21989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1380.893216][ T5219] usbhid 5-1:0.0: can't add hid device: -71
[ 1380.903635][ T5219] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1381.002727][ T5219] usb 5-1: USB disconnect, device number 92
[ 1381.777852][T21989] hsr_slave_0: entered promiscuous mode
[ 1381.981447][T17178] Bluetooth: hci2: command tx timeout
[ 1382.084179][T21989] hsr_slave_1: entered promiscuous mode
[ 1382.487195][   T29] kauditd_printk_skb: 73 callbacks suppressed
[ 1382.487214][   T29] audit: type=1400 audit(2000001267.783:766): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=21993 comm="syz.1.5339" daddr=::ffff:172.20.20.0
[ 1382.531252][T21989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1383.216114][T21989] Cannot create hsr debugfs directory
[ 1383.341432][T22022] cannot load conntrack support for proto=3
[ 1383.357813][T22015] binder: BINDER_SET_CONTEXT_MGR already set
[ 1383.363973][T22026] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 1383.379696][T22015] binder: 22013:22015 ioctl 4018620d 20000100 returned -16
[ 1383.412119][   T29] audit: type=1326 audit(2000001268.703:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1383.470828][   T29] audit: type=1326 audit(2000001268.713:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1383.562659][   T51] usb 2-1: USB disconnect, device number 85
[ 1383.582419][   T29] audit: type=1326 audit(2000001268.713:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1383.689606][   T29] audit: type=1326 audit(2000001268.713:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x7ffc0000
[ 1383.712546][ T5313] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[ 1383.724444][   T29] audit: type=1326 audit(2000001268.713:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4137f75d50 code=0x7ffc0000
[ 1383.753001][   T29] audit: type=1326 audit(2000001268.713:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1383.776056][   T29] audit: type=1326 audit(2000001268.713:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1383.797903][ T5264] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1383.827289][   T29] audit: type=1326 audit(2000001268.733:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1383.853912][   T29] audit: type=1326 audit(2000001268.733:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22013 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4137f76fbb code=0x7ffc0000
[ 1383.906306][ T5313] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config
[ 1383.918868][ T5313] usb 3-1: too many endpoints for config 0 interface 0 altsetting 230: 166, using maximum allowed: 30
[ 1383.944492][ T5313] usb 3-1: config 0 interface 0 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[ 1383.955861][ T5313] usb 3-1: config 0 interface 0 altsetting 230 has 1 endpoint descriptor, different from the interface descriptor's value: 166
[ 1383.969641][ T5264] usb 1-1: device descriptor read/64, error -71
[ 1383.976352][ T5313] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1383.992790][ T5313] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93
[ 1384.002518][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.010912][ T5313] usb 3-1: Product: syz
[ 1384.015408][ T5313] usb 3-1: Manufacturer: syz
[ 1384.020333][ T5313] usb 3-1: SerialNumber: syz
[ 1384.029741][ T5313] usb 3-1: config 0 descriptor??
[ 1384.052344][T17178] Bluetooth: hci2: command tx timeout
[ 1384.075858][T21989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.193624][    C0] eth0: bad gso: type: 1, size: 1408
[ 1384.239649][ T5264] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1384.355078][T21989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.399549][ T5264] usb 1-1: device descriptor read/64, error -71
[ 1384.493945][T21989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.519969][ T5264] usb usb1-port1: attempt power cycle
[ 1384.643409][T21989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.931584][T21989] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1384.949530][ T5264] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1384.960938][T21989] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1384.983797][ T5264] usb 1-1: device descriptor read/8, error -71
[ 1385.000606][T21989] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1385.013570][T21989] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1385.204698][T21989] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1385.236548][T21989] 8021q: adding VLAN 0 to HW filter on device team0
[ 1385.269537][ T5264] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1385.289196][ T5313] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1385.296329][ T5313] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1385.334359][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1385.341610][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1385.350382][ T5264] usb 1-1: device descriptor read/8, error -71
[ 1385.410281][T17178] Bluetooth: hci0: command tx timeout
[ 1385.470308][ T5264] usb usb1-port1: unable to enumerate USB device
[ 1385.577808][T10024] usb 3-1: USB disconnect, device number 94
[ 1385.648351][T21989] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1385.815162][T21989] veth0_vlan: entered promiscuous mode
[ 1385.888123][T21989] veth1_vlan: entered promiscuous mode
[ 1385.967992][T21989] veth0_macvtap: entered promiscuous mode
[ 1386.015189][T21989] veth1_macvtap: entered promiscuous mode
[ 1386.070818][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.115814][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.130179][T17178] Bluetooth: hci2: command tx timeout
[ 1386.159893][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.193980][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.237241][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.259695][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.274260][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.288453][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.302851][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.317320][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.332584][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.351045][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.382585][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.419438][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.442990][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.464184][T22049] dccp_v6_rcv: dropped packet with invalid checksum
[ 1386.471087][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.495770][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.529440][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.555666][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.582913][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.612921][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1386.635900][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.648713][T21989] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1386.701980][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1386.730733][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.763492][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1386.805634][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.871813][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1386.887581][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.899339][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1386.911222][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1386.925137][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.029703][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.069502][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.097519][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.152260][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.170866][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.190799][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.216965][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.231283][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.251717][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.263685][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.277528][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.288077][T21989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1387.299865][T21989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1387.348796][T21989] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1387.530543][T21989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1387.566101][T21989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1387.609391][T21989] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1387.632237][T21989] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1388.247246][T10046] Bluetooth: hci2: command tx timeout
[ 1388.935435][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1388.967399][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1388.975756][T22072] binder: 22071:22072 ioctl c00c620f 0 returned -14
[ 1389.016091][   T29] kauditd_printk_skb: 72 callbacks suppressed
[ 1389.016110][   T29] audit: type=1400 audit(2000001274.313:848): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22071 comm="syz.1.5355"
[ 1389.019567][T10046] Bluetooth: hci6: command 0x0406 tx timeout
[ 1389.086897][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1389.087155][   T29] audit: type=1400 audit(2000001274.343:849): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22071 comm="syz.1.5355"
[ 1389.096603][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1389.378915][T22085] netlink: 'syz.3.5337': attribute type 11 has an invalid length.
[ 1389.631976][   T29] audit: type=1326 audit(2000001274.933:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22075 comm="syz.2.5356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4137f773b9 code=0x0
[ 1389.774132][T22091] netlink: zone id is out of range
[ 1389.790511][T22091] netlink: zone id is out of range
[ 1389.796832][T22091] netlink: zone id is out of range
[ 1389.802342][T22091] netlink: zone id is out of range
[ 1389.808455][T22091] netlink: zone id is out of range
[ 1389.814259][T22091] netlink: zone id is out of range
[ 1389.834605][T22091] netlink: zone id is out of range
[ 1389.844830][T22091] netlink: zone id is out of range
[ 1389.909212][T22092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1389.923418][T22091] netlink: zone id is out of range
[ 1389.981521][T22091] netlink: zone id is out of range
[ 1391.049801][   T29] audit: type=1400 audit(2000001276.354:851): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22116 comm="syz.0.5364"
[ 1391.329859][ T5219] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1391.446574][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5366'.
[ 1391.573873][ T5219] usb 3-1: Using ep0 maxpacket: 8
[ 1391.603301][ T5219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1391.638749][ T5219] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1391.665065][ T5219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1391.681916][ T5219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1391.694541][ T5219] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1391.707248][ T5219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.722818][ T5219] hub 3-1:1.0: bad descriptor, ignoring hub
[ 1391.733537][ T5219] hub 3-1:1.0: probe with driver hub failed with error -5
[ 1391.744424][ T5219] cdc_wdm 3-1:1.0: skipping garbage
[ 1391.795339][ T5219] cdc_wdm 3-1:1.0: skipping garbage
[ 1391.836071][ T5219] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1391.864826][ T5219] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1392.734556][T22145] overlay: Unknown parameter 'dont_appraise'
[ 1392.742898][T22146] overlay: Unknown parameter 'dont_appraise'
[ 1393.030885][T12120] usb 3-1: USB disconnect, device number 95
[ 1393.359199][ T5344] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1393.585091][ T5344] usb 1-1: config 0 has an invalid interface number: 107 but max is 0
[ 1393.628080][ T5344] usb 1-1: config 0 has no interface number 0
[ 1393.641659][ T5344] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[ 1393.665923][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.697164][ T5344] usb 1-1: Product: syz
[ 1393.708353][ T5344] usb 1-1: Manufacturer: syz
[ 1393.714700][ T5344] usb 1-1: SerialNumber: syz
[ 1393.732550][ T5344] usb 1-1: config 0 descriptor??
[ 1394.038743][T22151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5372'.
[ 1394.131032][T10046] Bluetooth: hci9: command 0x0406 tx timeout
[ 1394.353494][T22170] snd_dummy snd_dummy.0: control 0:0:0:syz0:8 is already present
[ 1394.383378][T12120] usb 1-1: USB disconnect, device number 88
[ 1394.507873][   T29] audit: type=1326 audit(2000001279.804:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22171 comm="syz.1.5379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x0
[ 1394.630225][   T29] audit: type=1400 audit(2000001279.884:853): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22171 comm="syz.1.5379" daddr=::ffff:100.1.1.1 dest=52768
[ 1394.869476][T10046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1394.898043][T10046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1394.925200][T10046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1395.006074][T10046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1395.027880][T10046] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1395.039594][T10046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1395.564486][T22191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5382'.
[ 1395.685701][T22197] binder: BINDER_SET_CONTEXT_MGR already set
[ 1395.693617][T22197] binder: 22193:22197 ioctl 4018620d 20000100 returned -16
[ 1395.798518][   T29] audit: type=1326 audit(2000001281.094:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1395.846702][   T29] audit: type=1326 audit(2000001281.114:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1395.870492][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1395.961722][   T29] audit: type=1326 audit(2000001281.114:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1395.965007][T22178] chnl_net:caif_netlink_parms(): no params data found
[ 1395.986806][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1396.089752][ T5264] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[ 1396.098942][   T29] audit: type=1326 audit(2000001281.114:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1396.109323][T10024] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1396.121135][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1396.193620][   T29] audit: type=1326 audit(2000001281.114:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9116b75d50 code=0x7ffc0000
[ 1396.223493][   T29] audit: type=1326 audit(2000001281.114:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9116b76fbb code=0x7ffc0000
[ 1396.353326][ T5264] usb 2-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config
[ 1396.359134][   T29] audit: type=1326 audit(2000001281.114:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9116b76fbb code=0x7ffc0000
[ 1396.391025][ T5264] usb 2-1: too many endpoints for config 0 interface 0 altsetting 230: 166, using maximum allowed: 30
[ 1396.406455][ T5264] usb 2-1: config 0 interface 0 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[ 1396.438340][ T5264] usb 2-1: config 0 interface 0 altsetting 230 has 1 endpoint descriptor, different from the interface descriptor's value: 166
[ 1396.462155][ T5263] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1396.496373][   T29] audit: type=1326 audit(2000001281.114:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22193 comm="syz.1.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9116b76fbb code=0x7ffc0000
[ 1396.579803][T10024] usb 4-1: Using ep0 maxpacket: 8
[ 1396.587748][ T5264] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1396.601640][ T5264] usb 2-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93
[ 1396.612393][T10024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1396.612772][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.641946][ T5264] usb 2-1: Product: syz
[ 1396.646272][ T5264] usb 2-1: Manufacturer: syz
[ 1396.651167][ T5264] usb 2-1: SerialNumber: syz
[ 1396.661965][ T5263] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1396.690708][ T5263] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1396.731576][T10024] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1396.733693][ T5264] usb 2-1: config 0 descriptor??
[ 1396.740789][T10024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1396.760503][T10024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1396.773318][T10024] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1396.785963][T10024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.824117][T22178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1396.835396][ T5263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.838613][T10024] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1396.872149][T22178] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1396.889147][T10024] hub 4-1:1.0: probe with driver hub failed with error -5
[ 1396.906823][T22178] bridge_slave_0: entered allmulticast mode
[ 1396.907671][ T5263] usb 1-1: config 0 descriptor??
[ 1396.936008][T10024] cdc_wdm 4-1:1.0: skipping garbage
[ 1396.943253][ T5263] pwc: Askey VC010 type 2 USB webcam detected.
[ 1396.970562][T22178] bridge_slave_0: entered promiscuous mode
[ 1396.976608][T10024] cdc_wdm 4-1:1.0: skipping garbage
[ 1397.003105][T10024] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1397.022648][T10024] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1397.038539][T22178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1397.094381][T22178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1397.105441][T22178] bridge_slave_1: entered allmulticast mode
[ 1397.124790][T22178] bridge_slave_1: entered promiscuous mode
[ 1397.159523][ T5263] pwc: send_video_command error -71
[ 1397.164811][ T5263] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1397.179131][T10046] Bluetooth: hci7: command tx timeout
[ 1397.198807][ T5263] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 1397.230242][ T5263] usb 1-1: USB disconnect, device number 89
[ 1397.390832][T22178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1397.477071][T22178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1397.514047][T12120] usb 2-1: USB disconnect, device number 86
[ 1397.635856][T22178] team0: Port device team_slave_0 added
[ 1397.657819][T22178] team0: Port device team_slave_1 added
[ 1397.731798][T22178] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1397.749362][T22178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1397.790706][T10024] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1397.817857][T22178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1397.866665][T22178] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1397.888244][T22178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1397.915949][T22178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1397.995807][T22178] hsr_slave_0: entered promiscuous mode
[ 1398.003672][T22178] hsr_slave_1: entered promiscuous mode
[ 1398.012290][T22178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1398.020991][T22178] Cannot create hsr debugfs directory
[ 1398.031172][T10024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1398.062525][T10024] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1398.090476][T10024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.104746][T10024] usb 1-1: config 0 descriptor??
[ 1398.113436][T10024] pwc: Askey VC010 type 2 USB webcam detected.
[ 1398.229497][T22210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5387'.
[ 1398.249754][ T5344] usb 4-1: USB disconnect, device number 107
[ 1398.393683][T22210] xt_time: unknown flags 0xc
[ 1398.517285][T22216] 9pnet_fd: Insufficient options for proto=fd
[ 1398.554745][T10024] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1398.574055][T10024] pwc: recv_control_msg error -32 req 02 val 2700
[ 1398.616761][T10024] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1398.637483][T10024] pwc: recv_control_msg error -32 req 04 val 1000
[ 1398.696394][T22178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1398.710649][    C1] net_ratelimit: 3 callbacks suppressed
[ 1398.710676][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1398.866062][T10024] pwc: recv_control_msg error -32 req 04 val 1400
[ 1398.904156][T10024] pwc: recv_control_msg error -32 req 02 val 2000
[ 1398.912858][T10024] pwc: recv_control_msg error -32 req 02 val 2100
[ 1398.925602][T22178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1398.939453][T10024] pwc: recv_control_msg error -32 req 04 val 1500
[ 1398.950047][T10024] pwc: recv_control_msg error -32 req 02 val 2500
[ 1399.173191][T10024] pwc: recv_control_msg error -32 req 02 val 2600
[ 1399.252924][T10046] Bluetooth: hci7: command tx timeout
[ 1399.268925][T10024] pwc: recv_control_msg error -32 req 02 val 2900
[ 1399.306652][T10024] pwc: recv_control_msg error -32 req 02 val 2800
[ 1399.582709][T10024] pwc: recv_control_msg error -32 req 04 val 1100
[ 1400.349131][T10024] pwc: recv_control_msg error -32 req 04 val 1200
[ 1400.358651][T22178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1400.381099][T10024] pwc: Registered as video71.
[ 1400.397207][T10024] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input87
[ 1400.621459][T22244] kAFS: No cell specified
[ 1401.176055][T22178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.232383][T22247] netlink: 'syz.1.5395': attribute type 3 has an invalid length.
[ 1401.233241][ T5313] usb 1-1: USB disconnect, device number 90
[ 1401.329206][T10046] Bluetooth: hci7: command tx timeout
[ 1401.490389][T22253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5397'.
[ 1401.667421][T22263] Process accounting resumed
[ 1401.671609][T22178] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1401.700784][T22178] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1401.720549][ T5212] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1401.746320][T22178] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1401.787451][T22178] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1401.973150][ T5212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1401.999631][ T5212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[ 1402.071215][ T5212] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1402.122538][ T5212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.156634][T22178] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1402.179965][ T5212] usb 4-1: config 0 descriptor??
[ 1402.210417][T22255] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1402.264920][T22178] 8021q: adding VLAN 0 to HW filter on device team0
[ 1402.435774][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1402.443246][ T5344] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1402.482619][T22255] tc_dump_action: action bad kind
[ 1402.527917][T10024] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1402.535394][T10024] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1402.570483][T22255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1402.611372][T22255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1402.644715][T22255] netlink: 'syz.3.5399': attribute type 12 has an invalid length.
[ 1402.653555][T22255] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5399'.
[ 1402.959163][ T5212] ath6kl: Failed to submit usb control message: -71
[ 1402.992557][ T5212] ath6kl: unable to send the bmi data to the device: -71
[ 1403.006400][ T5212] ath6kl: Unable to send get target info: -71
[ 1403.024373][ T5212] ath6kl: Failed to init ath6kl core: -71
[ 1403.040039][ T5212] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1403.116824][ T5212] usb 4-1: USB disconnect, device number 108
[ 1403.238745][T22279] syz.1.5404: attempt to access beyond end of device
[ 1403.238745][T22279] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0
[ 1403.257811][T22279] EXT4-fs (nbd1): unable to read superblock
[ 1403.419017][T17178] Bluetooth: hci7: command tx timeout
[ 1403.459187][ T1169] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1403.526780][T22178] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1403.679328][ T1169] usb 1-1: Using ep0 maxpacket: 16
[ 1403.710139][ T1169] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1403.721546][ T5212] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1403.754460][ T1169] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1403.786383][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1403.809222][T17178] Bluetooth: hci10: command 0x0405 tx timeout
[ 1403.823931][ T1169] usb 1-1: config 0 descriptor??
[ 1403.960373][ T5212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1403.990196][ T5212] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1404.019285][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1404.050571][ T5212] usb 2-1: config 0 descriptor??
[ 1404.076309][ T5212] pwc: Askey VC010 type 2 USB webcam detected.
[ 1404.171857][T22310] syz.2.5409 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1404.278624][ T5212] pwc: send_video_command error -71
[ 1404.289446][ T5212] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1404.297683][ T5212] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 1404.310579][T22178] veth0_vlan: entered promiscuous mode
[ 1404.343519][T22178] veth1_vlan: entered promiscuous mode
[ 1404.358885][ T5212] usb 2-1: USB disconnect, device number 87
[ 1404.439918][T22178] veth0_macvtap: entered promiscuous mode
[ 1404.479687][T22178] veth1_macvtap: entered promiscuous mode
[ 1404.571695][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.588854][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.599149][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.610497][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.622783][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.643748][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.655954][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.668364][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.741748][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.780545][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.913452][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.019858][ T1169] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1405.058901][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.140421][   T29] kauditd_printk_skb: 29 callbacks suppressed
[ 1405.140464][   T29] audit: type=1400 audit(2000001290.394:891): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22281 comm="syz.0.5405"
[ 1405.168970][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.198818][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.218784][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.229933][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.240536][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.254422][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.264891][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.275881][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.286101][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.299238][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.309996][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.324512][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.342171][ T1169] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1405.356809][T22178] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1405.364998][ T1169] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1405.400481][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.530968][ T1169] usb 2-1: config 0 descriptor??
[ 1405.540300][ T1169] pwc: Askey VC010 type 2 USB webcam detected.
[ 1405.613266][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.626485][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.640325][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.657454][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.669951][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.682359][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.693355][T22322] 9pnet_fd: Insufficient options for proto=fd
[ 1405.700807][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.712055][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.723958][T22321] delete_channel: no stack
[ 1405.741564][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.769992][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.780614][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.791576][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.802891][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.814769][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.827202][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.847774][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.865485][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.880500][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.891816][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.903315][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.914134][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.925541][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.945279][T22178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.959274][T22178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.973527][T22178] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1405.979230][ T1169] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1405.985353][T22178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.997294][ T1169] pwc: recv_control_msg error -32 req 02 val 2700
[ 1406.006687][ T1169] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1406.014425][ T1169] pwc: recv_control_msg error -32 req 04 val 1000
[ 1406.024739][ T5313] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1406.048862][T22178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1406.074617][T22178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1406.089683][T22178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1406.236932][ T1169] pwc: recv_control_msg error -32 req 04 val 1400
[ 1406.255830][ T1169] pwc: recv_control_msg error -32 req 02 val 2000
[ 1406.273943][ T5313] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1406.287189][ T1169] pwc: recv_control_msg error -32 req 02 val 2100
[ 1406.301288][ T5313] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[ 1406.309585][ T1169] pwc: recv_control_msg error -32 req 04 val 1500
[ 1406.330864][ T5313] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1406.333047][ T1169] pwc: recv_control_msg error -32 req 02 val 2500
[ 1406.359539][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1406.382125][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.394997][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.475536][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1406.502113][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.590511][ T1169] pwc: recv_control_msg error -32 req 02 val 2600
[ 1406.605889][ T1169] pwc: recv_control_msg error -32 req 02 val 2900
[ 1406.621419][ T5313] usb 3-1: string descriptor 0 read error: -22
[ 1406.639359][ T1169] pwc: recv_control_msg error -32 req 02 val 2800
[ 1406.662782][ T1169] pwc: recv_control_msg error -32 req 04 val 1100
[ 1406.683658][ T1169] pwc: recv_control_msg error -32 req 04 val 1200
[ 1406.707240][ T1169] pwc: Registered as video71.
[ 1406.708181][ T5263] usb 1-1: USB disconnect, device number 91
[ 1406.740004][ T1169] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input89
[ 1406.837295][T22324] input: syz1 as /devices/virtual/input/input90
[ 1406.866030][T22324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.985799][T22324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1407.094895][ T5263] usb 3-1: USB disconnect, device number 96
[ 1407.279240][ T5344] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1408.377474][   T29] audit: type=1400 audit(2000001293.664:892): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22359 comm="syz.0.5423" daddr=::ffff:172.20.20.0
[ 1408.395810][ T1169] usb 2-1: USB disconnect, device number 88
[ 1408.698965][ T5313] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1408.929161][ T5313] usb 3-1: Using ep0 maxpacket: 16
[ 1408.941710][ T5313] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1408.961574][ T5313] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1408.999665][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.037637][ T5313] usb 3-1: config 0 descriptor??
[ 1409.685717][T22402] netlink: 'syz.4.5435': attribute type 5 has an invalid length.
[ 1410.080041][   T29] audit: type=1400 audit(2000001295.374:893): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22362 comm="syz.2.5425"
[ 1410.099815][ T5219] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1411.005148][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'.
[ 1411.085472][ T5219] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1411.143335][ T5219] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1411.171536][ T5219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.201539][ T5219] usb 2-1: config 0 descriptor??
[ 1411.221301][ T5219] pwc: Askey VC010 type 2 USB webcam detected.
[ 1411.244511][T22433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5442'.
[ 1411.356520][T22436] ebt_among: dst integrity fail: 101
[ 1411.423845][ T5219] pwc: send_video_command error -71
[ 1411.431823][ T5219] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1411.441266][ T5219] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 1411.452826][ T5219] usb 2-1: USB disconnect, device number 89
[ 1411.689161][T10024] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1411.782450][T10046] Bluetooth: hci6: unexpected event for opcode 0x6e0d
[ 1411.923899][   T29] audit: type=1400 audit(2000001297.214:894): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22444 comm="syz.0.5447"
[ 1411.953548][T10024] usb 4-1: Using ep0 maxpacket: 32
[ 1412.218899][ T5219] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1412.273172][T10024] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe
[ 1412.460082][ T5313] usb 3-1: USB disconnect, device number 97
[ 1412.469312][T10024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.477985][T10024] usb 4-1: Product: syz
[ 1412.483210][T10024] usb 4-1: Manufacturer: syz
[ 1412.488304][T10024] usb 4-1: SerialNumber: syz
[ 1412.495716][T10024] usb 4-1: config 0 descriptor??
[ 1412.506401][T10024] ati_remote2 4-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint
[ 1412.630069][ T5219] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1412.648788][ T5219] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1412.663234][ T5219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.665617][ T5219] usb 2-1: config 0 descriptor??
[ 1412.670898][ T5219] pwc: Askey VC010 type 2 USB webcam detected.
[ 1412.724796][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'.
[ 1412.739556][T22450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5449'.
[ 1412.762429][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5449'.
[ 1412.779424][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'.
[ 1412.792819][T22453] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5450'.
[ 1412.807561][ T5212] usb 4-1: USB disconnect, device number 109
[ 1412.814314][ T5219] pwc: send_video_command error -71
[ 1412.835185][ T5219] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1412.846690][T22454] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[ 1412.864506][ T5219] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 1412.877553][ T5219] usb 2-1: USB disconnect, device number 90
[ 1413.099413][T10024] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1413.201153][    C0] eth0: bad gso: type: 1, size: 1408
[ 1413.209098][    C0] eth0: bad gso: type: 1, size: 1408
[ 1413.321255][T10024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1413.374333][T10024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1413.391503][T10024] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1413.414943][T10024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.456520][T10024] usb 1-1: config 0 descriptor??
[ 1413.814173][ T5264] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1413.892164][T10024] cm6533_jd 0003:0D8C:0022.004F: unknown main item tag 0x0
[ 1414.039264][T10024] cm6533_jd 0003:0D8C:0022.004F: unknown main item tag 0x0
[ 1414.062434][T10024] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.004F/input/input91
[ 1414.080858][T10024] cm6533_jd 0003:0D8C:0022.004F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[ 1414.439771][ T5264] usb 2-1: Using ep0 maxpacket: 8
[ 1414.463114][ T5264] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1414.464554][T10024] usb 1-1: USB disconnect, device number 92
[ 1414.486471][ T5264] usb 2-1: config 0 has no interface number 0
[ 1414.521921][ T5264] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1414.544621][T22487] bridge0: port 3(syz_tun) entered blocking state
[ 1414.570760][T22487] bridge0: port 3(syz_tun) entered disabled state
[ 1414.577770][ T5264] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1414.591216][T22487] syz_tun: entered allmulticast mode
[ 1414.626559][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1414.637502][T10046] Bluetooth: hci10: unexpected event for opcode 0x6e0d
[ 1414.639823][T22487] syz_tun: entered promiscuous mode
[ 1414.668117][ T5264] usb 2-1: config 0 descriptor??
[ 1414.697894][ T5264] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1414.710442][T22487] bridge0: port 3(syz_tun) entered blocking state
[ 1414.717977][T22487] bridge0: port 3(syz_tun) entered forwarding state
[ 1415.211495][   T29] audit: type=1400 audit(2000001300.134:895): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22494 comm="syz.2.5460"
[ 1415.374215][T22498] bond0: entered promiscuous mode
[ 1415.390543][T22498] bond_slave_0: entered promiscuous mode
[ 1415.445726][T22498] bond_slave_1: entered promiscuous mode
[ 1416.585514][T10024] usb 2-1: USB disconnect, device number 91
[ 1416.600835][T10024] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected
[ 1417.310274][   T29] audit: type=1400 audit(2000001302.604:896): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22544 comm="syz.3.5472"
[ 1417.481151][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5475'.
[ 1417.768589][T12120] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1418.008664][T12120] usb 2-1: Using ep0 maxpacket: 16
[ 1418.028198][T12120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1418.056401][T12120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1418.086302][T12120] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1418.118615][T12120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.141106][T12120] usb 2-1: config 0 descriptor??
[ 1418.902289][T22572] input: syz0 as /devices/virtual/input/input92
[ 1419.300371][T12120] savu 0003:1E7D:2D5A.0050: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[ 1419.319115][ T5219] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1419.498869][ T5219] usb 4-1: device descriptor read/64, error -71
[ 1419.589086][T22597] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 1419.636369][T22590] bridge0: port 3(syz_tun) entered blocking state
[ 1419.643658][T22590] bridge0: port 3(syz_tun) entered disabled state
[ 1419.655173][T22590] syz_tun: entered allmulticast mode
[ 1419.757715][T22590] syz_tun: entered promiscuous mode
[ 1419.770441][T22590] bridge0: port 3(syz_tun) entered blocking state
[ 1419.781288][T22590] bridge0: port 3(syz_tun) entered forwarding state
[ 1419.789172][ T5219] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1419.958927][ T5219] usb 4-1: device descriptor read/64, error -71
[ 1419.990684][   T29] audit: type=1326 audit(2000001305.284:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22604 comm="syz.4.5489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x0
[ 1420.079145][ T5219] usb usb4-port1: attempt power cycle
[ 1420.508577][ T5219] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1420.560194][ T5219] usb 4-1: device descriptor read/8, error -71
[ 1420.748626][ T1169] usb 2-1: USB disconnect, device number 92
[ 1420.861388][ T5219] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1420.914652][ T5219] usb 4-1: device descriptor read/8, error -71
[ 1421.039158][ T5219] usb usb4-port1: unable to enumerate USB device
[ 1421.218484][ T5263] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1421.288771][ T1169] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1421.403578][    C0] eth0: bad gso: type: 1, size: 1408
[ 1421.409023][ T5263] usb 5-1: Using ep0 maxpacket: 16
[ 1421.410698][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.447347][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1421.584472][ T5263] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[ 1421.594601][ T1169] usb 2-1: Using ep0 maxpacket: 8
[ 1421.611828][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.622376][ T1169] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1421.642086][ T5263] usb 5-1: config 0 descriptor??
[ 1421.643685][ T1169] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1421.668472][ T1169] usb 2-1: Product: syz
[ 1421.672730][ T1169] usb 2-1: Manufacturer: syz
[ 1421.687940][ T1169] usb 2-1: SerialNumber: syz
[ 1421.709203][ T1169] usb 2-1: config 0 descriptor??
[ 1421.726862][ T1169] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1422.070219][ T5263] playstation 0003:054C:05C4.0051: unbalanced delimiter at end of report description
[ 1422.099104][ T5263] playstation 0003:054C:05C4.0051: Parse failed
[ 1422.105494][ T5263] playstation 0003:054C:05C4.0051: probe with driver playstation failed with error -22
[ 1422.278599][   T29] audit: type=1326 audit(2000001307.554:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22650 comm="syz.3.5503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1537b773b9 code=0x0
[ 1422.328680][ T5263] usb 5-1: USB disconnect, device number 94
[ 1422.430295][ T1169] gspca_zc3xx: reg_r err -110
[ 1422.436309][ T1169] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 1422.477327][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5504'.
[ 1422.553892][T22622] Bluetooth: hci11: Frame reassembly failed (-84)
[ 1422.608797][   T29] audit: type=1400 audit(2000001307.864:899): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22620 comm="syz.1.5494" dest=7
[ 1422.652814][ T1072] Bluetooth: hci11: Frame reassembly failed (-84)
[ 1422.862408][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.868930][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.219119][T22659] 9pnet_fd: Insufficient options for proto=fd
[ 1423.532577][T22667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5508'.
[ 1423.552397][T22667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5508'.
[ 1423.658940][T22667] netlink: 'syz.4.5508': attribute type 6 has an invalid length.
[ 1423.695466][T22675] misc userio: Can't change port type on an already running userio instance
[ 1424.147268][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5512'.
[ 1424.156960][T22687] netlink: 'syz.3.5512': attribute type 14 has an invalid length.
[ 1424.166475][T22687] netlink: 'syz.3.5512': attribute type 11 has an invalid length.
[ 1424.181036][T22687] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.191123][T22687] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.199984][T22687] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.208934][T22687] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1424.218933][T22687] vxlan0: entered promiscuous mode
[ 1424.608665][T17178] Bluetooth: hci11: command 0x1003 tx timeout
[ 1424.619066][T10046] Bluetooth: hci11: Opcode 0x1003 failed: -110
[ 1424.859211][T12120] usb 2-1: USB disconnect, device number 93
[ 1425.818633][ T5313] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1426.009565][T10046] Bluetooth: hci10: unexpected event for opcode 0x6e0d
[ 1426.031511][ T5313] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1426.056467][ T5313] usb 5-1: config 0 has no interface number 0
[ 1426.063223][ T5313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1426.077165][ T5313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1426.087121][ T5313] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1426.096945][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.157286][ T5313] usb 5-1: config 0 descriptor??
[ 1426.212751][   T29] audit: type=1400 audit(2000001311.504:900): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22734 comm="syz.2.5522"
[ 1426.819731][T22728] input: syz0 as /devices/virtual/input/input94
[ 1426.872774][T22723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1426.885939][T22723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1426.910154][T22741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1426.928810][T22741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1426.959301][ T5313] hid (null): global environment stack underflow
[ 1426.979552][ T5313] uclogic 0003:5543:0522.0052: global environment stack underflow
[ 1426.997631][ T5313] uclogic 0003:5543:0522.0052: item 0 1 1 11 parsing failed
[ 1427.016481][ T5313] uclogic 0003:5543:0522.0052: parse failed
[ 1427.025638][ T5313] uclogic 0003:5543:0522.0052: probe with driver uclogic failed with error -22
[ 1427.149467][ T5219] usb 5-1: USB disconnect, device number 95
[ 1427.248376][ T5212] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1427.300481][   T25] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1427.348465][ T5313] usb 4-1: new low-speed USB device number 114 using dummy_hcd
[ 1427.488545][   T25] usb 1-1: Using ep0 maxpacket: 8
[ 1427.536958][   T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1427.546292][   T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1427.548352][ T5212] usb 3-1: Using ep0 maxpacket: 8
[ 1427.556425][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1427.572848][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1427.577101][ T5212] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1427.583751][   T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1427.583809][   T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1427.583834][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.620232][ T5313] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1427.942588][ T5212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1427.959902][ T5212] usb 3-1: Product: syz
[ 1428.000544][ T5313] usb 4-1: config 0 has no interface number 0
[ 1428.019881][ T5212] usb 3-1: Manufacturer: syz
[ 1428.027800][ T5313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1428.035244][ T5212] usb 3-1: SerialNumber: syz
[ 1428.068101][ T5212] usb 3-1: config 0 descriptor??
[ 1428.221247][ T5313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 168, setting to 8
[ 1428.232231][   T25] usb 1-1: GET_CAPABILITIES returned 0
[ 1428.237753][   T25] usbtmc 1-1:16.0: can't read capabilities
[ 1428.248295][ T5313] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1428.257517][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.292709][ T5313] usb 4-1: config 0 descriptor??
[ 1428.304474][T22753] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[ 1428.323032][ T5313] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[ 1428.333913][ T5212] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1428.421353][ T5219] usb 1-1: USB disconnect, device number 93
[ 1428.545677][T12120] usb 4-1: USB disconnect, device number 114
[ 1428.559273][T22745] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5524'.
[ 1428.598140][T22745] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5524'.
[ 1428.625622][T12120] iowarrior 4-1:0.1: I/O-Warror #1 now disconnected
[ 1429.059342][T10046] Bluetooth: hci9: unexpected event for opcode 0x6e0d
[ 1429.297968][ T5212] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1429.568522][   T29] audit: type=1400 audit(2000001314.854:901): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=22792 comm="syz.1.5536"
[ 1430.284451][T22799] input: syz0 as /devices/virtual/input/input95
[ 1431.142036][T12120] usb 3-1: USB disconnect, device number 98
[ 1431.422794][T22822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'.
[ 1431.848231][T12120] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1432.061194][T12120] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1432.073119][T12120] usb 4-1: config 1 has no interface number 0
[ 1432.099947][T12120] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1432.114171][T12120] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1432.123679][T12120] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1432.154202][T12120] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1432.181606][T12120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1432.219686][T12120] usb 4-1: Product: syz
[ 1432.288432][T12120] usb 4-1: Manufacturer: syz
[ 1432.293124][T12120] usb 4-1: SerialNumber: syz
[ 1433.058437][T22824] ALSA: seq fatal error: cannot create timer (-19)
[ 1433.249466][T12120] cdc_ncm 4-1:1.1: bind() failure
[ 1433.497253][T22824] netlink: 'syz.3.5543': attribute type 8 has an invalid length.
[ 1433.532083][T22824] netlink: 'syz.3.5543': attribute type 7 has an invalid length.
[ 1433.540579][T22824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5543'.
[ 1433.584638][ T5212] usb 4-1: USB disconnect, device number 115
[ 1435.902649][T12120] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1436.127667][T12120] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1436.135312][T12120] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1436.163099][T12120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1436.175358][T12120] usb 4-1: config 0 descriptor??
[ 1436.624504][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1436.707697][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1436.813115][T22835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1437.108511][T12120] video4linux radio32: keene_cmd_set failed (-110)
[ 1437.122500][T12120] radio-keene 4-1:0.0: V4L2 device registered as radio32
[ 1437.290878][T22847] netlink: 'syz.1.5550': attribute type 1 has an invalid length.
[ 1437.341697][T22847] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1437.784904][T22841] input: syz0 as /devices/virtual/input/input96
[ 1438.258906][T22872] program syz.4.5555 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1438.381944][ T5344] usb 4-1: USB disconnect, device number 116
[ 1438.491598][    C0] eth0: bad gso: type: 1, size: 1408
[ 1438.787495][T22884] netlink: 'syz.3.5558': attribute type 28 has an invalid length.
[ 1439.050322][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5560'.
[ 1439.128316][T12120] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1439.257738][T22892] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1439.319560][T22892] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1439.338336][T12120] usb 5-1: Using ep0 maxpacket: 16
[ 1439.366843][T12120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1439.409856][T12120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1439.438341][T12120] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1439.492835][T12120] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1439.528232][T12120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1439.572940][T12120] usb 5-1: config 0 descriptor??
[ 1440.009795][T22887] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5559'.
[ 1440.119252][ T5344] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[ 1440.129540][   T29] audit: type=1326 audit(2000001325.425:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.231978][   T29] audit: type=1326 audit(2000001325.425:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.275113][   T29] audit: type=1326 audit(2000001325.455:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.300106][   T29] audit: type=1326 audit(2000001325.455:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.323331][   T29] audit: type=1326 audit(2000001325.455:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.375451][T12120] microsoft 0003:045E:07DA.0053: invalid report_size 771751948
[ 1440.375702][ T5344] usb 2-1: not running at top speed; connect to a high speed hub
[ 1440.398138][T12120] microsoft 0003:045E:07DA.0053: item 0 4 1 7 parsing failed
[ 1440.410978][T12120] microsoft 0003:045E:07DA.0053: parse failed
[ 1440.421091][T12120] microsoft 0003:045E:07DA.0053: probe with driver microsoft failed with error -22
[ 1440.421196][   T29] audit: type=1326 audit(2000001325.645:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.481842][ T5344] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1440.512745][ T5344] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1440.534451][T22899] input: syz0 as /devices/virtual/input/input97
[ 1440.538056][ T5344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1440.560176][   T29] audit: type=1326 audit(2000001325.645:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.600682][ T5344] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1440.614766][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.636483][   T29] audit: type=1326 audit(2000001325.645:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.658309][ T5344] usb 2-1: Product: Т
[ 1440.658333][ T5344] usb 2-1: Manufacturer: 䲱ᘑ⠶㔞濹铘춚짡嗫潴៟ꘅ툹⳧鮟ﴙ뽷ꦗ逸岤薎・숪⸱⍾脙濂됸
[ 1440.658355][ T5344] usb 2-1: SerialNumber: 蘺ᓊᏗꊣᄥ셌꫆뎨윯无ᾩ윫턉傖䖹皀汕ꊔㅗ宏ꢩ᝴ᙚ幋畞馢髀Ⰲ頯刀ྥ㳂쐷等䥂놟퓶笤ﻟ짴
[ 1440.717635][ T5263] usb 5-1: USB disconnect, device number 96
[ 1440.776475][   T29] audit: type=1326 audit(2000001325.645:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.799065][   T29] audit: type=1326 audit(2000001325.645:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22886 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d3773b9 code=0x7ffc0000
[ 1440.873234][ T5344] usb 2-1: 0:2 : does not exist
[ 1440.922698][ T5344] usb 2-1: USB disconnect, device number 94
[ 1441.073441][T22915] wireguard0: entered promiscuous mode
[ 1441.088245][T22915] wireguard0: entered allmulticast mode
[ 1441.350665][T22917] netlink: 'syz.0.5567': attribute type 29 has an invalid length.
[ 1441.359258][T22921] netlink: 'syz.0.5567': attribute type 29 has an invalid length.
[ 1441.367591][T22920] netlink: 'syz.0.5567': attribute type 29 has an invalid length.
[ 1441.419198][T22930] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 2, id = 0
[ 1441.429886][T22928] IPVS: stopping backup sync thread 22930 ...
[ 1441.942055][T22948] syz.0.5574: attempt to access beyond end of device
[ 1441.942055][T22948] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1442.005416][T22948] MINIX-fs: unable to read superblock
[ 1442.133174][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1442.858246][ T5219] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1443.068321][ T5219] usb 2-1: Using ep0 maxpacket: 16
[ 1443.110824][ T5219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1443.162472][ T5219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1443.213665][ T5219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1443.288490][ T5219] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1443.314097][ T5219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1443.340420][ T5219] usb 2-1: config 0 descriptor??
[ 1443.382596][T22964] input: syz0 as /devices/virtual/input/input98
[ 1444.043492][T22961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5580'.
[ 1444.063464][T22961] debugfs: Directory '�!' with parent 'ieee80211' already present!
[ 1445.391370][   T29] kauditd_printk_skb: 38 callbacks suppressed
[ 1445.391387][   T29] audit: type=1326 audit(2000001330.685:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1445.510765][ T5219] microsoft 0003:045E:07DA.0054: invalid report_size 771751948
[ 1445.568073][ T5219] microsoft 0003:045E:07DA.0054: item 0 4 1 7 parsing failed
[ 1445.568575][   T29] audit: type=1326 audit(2000001330.685:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1445.597078][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1445.597661][ T5219] microsoft 0003:045E:07DA.0054: parse failed
[ 1445.597760][ T5219] microsoft 0003:045E:07DA.0054: probe with driver microsoft failed with error -22
[ 1445.622149][   T29] audit: type=1326 audit(2000001330.685:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1445.643708][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1445.653423][   T29] audit: type=1326 audit(2000001330.715:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1445.697762][   T29] audit: type=1326 audit(2000001330.715:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1445.770741][   T29] audit: type=1326 audit(2000001330.725:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9116b75e9f code=0x7ffc0000
[ 1445.826456][   T29] audit: type=1326 audit(2000001330.725:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1445.899679][   T29] audit: type=1326 audit(2000001330.725:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22960 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9116b773b9 code=0x7ffc0000
[ 1446.085951][ T5263] usb 2-1: USB disconnect, device number 95
[ 1446.254924][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1446.564234][   T29] audit: type=1326 audit(2000001331.845:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23013 comm="syz.3.5592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1537b773b9 code=0x7ffc0000
[ 1446.706686][   T29] audit: type=1326 audit(2000001331.845:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23013 comm="syz.3.5592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1537b773b9 code=0x7ffc0000
[ 1447.306899][T23030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.341344][T23029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.362175][T23030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.380983][T23029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.715929][T23041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5599'.
[ 1447.891298][T23020] input: syz0 as /devices/virtual/input/input99
[ 1448.075974][ T5219] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1448.318411][ T5313] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1448.335009][ T5219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1448.378494][ T5219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1448.410297][ T5219] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1448.439727][ T5219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.468514][ T1169] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1448.518763][ T5219] usb 4-1: config 0 descriptor??
[ 1448.679732][ T5313] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1448.690741][ T5313] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1448.705924][ T5313] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1448.708178][ T1169] usb 2-1: Using ep0 maxpacket: 32
[ 1448.716180][ T5313] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6
[ 1448.732769][ T5313] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1448.747367][ T5313] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[ 1448.747527][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1448.756892][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.756929][ T5313] usb 1-1: Product: syz
[ 1448.756945][ T5313] usb 1-1: Manufacturer: syz
[ 1448.776119][ T1169] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1448.776169][ T1169] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1448.840803][ T1169] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1448.847497][ T5313] usb 1-1: SerialNumber: syz
[ 1448.850825][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.872892][ T5313] usb 1-1: ucan: probing device on interface #0
[ 1448.880068][ T1169] usb 2-1: Product: syz
[ 1448.887524][ T5313] usb 1-1: ucan: invalid endpoint configuration
[ 1448.893034][ T1169] usb 2-1: Manufacturer: syz
[ 1448.894069][ T5313] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1448.908592][ T1169] usb 2-1: SerialNumber: syz
[ 1448.935392][ T1169] cdc_ncm 2-1:1.0: skipping garbage
[ 1448.941262][ T1169] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[ 1448.948961][ T1169] cdc_ncm 2-1:1.0: bind() failure
[ 1449.110426][T23041] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1449.139776][T23041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.152067][T23041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.162694][T23041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.188317][T23041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.268698][ T1169] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1449.329324][ T5212] usb 1-1: USB disconnect, device number 94
[ 1449.581410][T23049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.590364][T23049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.610539][ T1169] usb 3-1: config index 0 descriptor too short (expected 1025, got 36)
[ 1449.621741][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1449.633181][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1449.643430][ T1169] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 1449.657869][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1449.697659][ T1169] usb 3-1: config 0 descriptor??
[ 1450.231470][ T5219] uclogic 0003:256C:006D.0055: failed retrieving string descriptor #100: -71
[ 1450.253187][ T5219] uclogic 0003:256C:006D.0055: failed retrieving pen parameters: -71
[ 1450.278933][ T5219] uclogic 0003:256C:006D.0055: failed probing pen v1 parameters: -71
[ 1450.306275][ T5219] uclogic 0003:256C:006D.0055: failed probing parameters: -71
[ 1450.328748][ T5219] uclogic 0003:256C:006D.0055: probe with driver uclogic failed with error -71
[ 1450.358791][ T5219] usb 4-1: USB disconnect, device number 117
[ 1450.521619][   T25] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1450.727941][   T25] usb 5-1: Using ep0 maxpacket: 16
[ 1450.735155][   T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1450.747875][   T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1450.767939][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1450.787606][   T25] usb 5-1: config 0 descriptor??
[ 1450.909754][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1450.938151][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1450.980759][T23076] VFS: could not find a valid V7 on nullb0.
[ 1452.057296][T23083] input: syz0 as /devices/virtual/input/input100
[ 1452.069791][   T29] kauditd_printk_skb: 32 callbacks suppressed
[ 1452.069810][   T29] audit: type=1400 audit(2000001337.365:992): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=23065 comm="syz.4.5606"
[ 1452.235489][ T1169] usbhid 3-1:0.0: can't add hid device: -71
[ 1452.249176][ T1169] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1452.261600][ T1169] usb 3-1: USB disconnect, device number 99
[ 1453.371487][   T25] usb 5-1: USB disconnect, device number 97
[ 1453.929328][   T29] audit: type=1326 audit(2000001339.065:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1453.965749][T23113] usb usb8: usbfs: process 23113 (syz.4.5618) did not claim interface 0 before use
[ 1454.026653][   T29] audit: type=1326 audit(2000001339.065:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.041912][T23117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1454.068328][T23117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1454.104876][   T29] audit: type=1326 audit(2000001339.065:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.196045][   T29] audit: type=1326 audit(2000001339.065:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.297968][   T25] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[ 1454.399079][   T29] audit: type=1326 audit(2000001339.065:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.426364][   T29] audit: type=1326 audit(2000001339.065:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.450521][   T29] audit: type=1326 audit(2000001339.065:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.475606][   T29] audit: type=1326 audit(2000001339.065:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.549773][   T29] audit: type=1326 audit(2000001339.075:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23108 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1454.550329][   T25] usb 5-1: not running at top speed; connect to a high speed hub
[ 1454.586938][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64
[ 1454.622008][   T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1454.631441][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.639737][   T25] usb 5-1: Product: и
[ 1454.653536][T23113] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1455.071035][   T25] cdc_ncm 5-1:1.0: bind() failure
[ 1455.103559][   T25] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1455.126049][   T25] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1455.148395][   T25] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[ 1455.186478][   T25] usb 5-1: USB disconnect, device number 98
[ 1455.233057][T23127] Bluetooth: MGMT ver 1.23
[ 1455.881105][T23129] input: syz0 as /devices/virtual/input/input101
[ 1456.234345][T23150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1456.348315][T23150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.142463][T23166] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5630'.
[ 1457.198979][T23137] input: syz0 as /devices/virtual/input/input102
[ 1457.918013][   T25] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1458.018083][ T5344] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1458.127877][   T25] usb 4-1: Using ep0 maxpacket: 32
[ 1458.142941][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1458.163379][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1458.177538][   T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1458.211356][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1458.230365][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1458.243158][   T25] usb 4-1: config 0 descriptor??
[ 1458.258331][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1458.264594][T23180] input: syz0 as /devices/virtual/input/input103
[ 1458.291892][ T5344] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1458.335300][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1458.376218][ T5344] usb 5-1: config 0 descriptor??
[ 1458.463124][T23169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1458.523700][T23169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1458.782798][   T25] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0
[ 1458.814367][   T25] kovaplus 0003:1E7D:2D50.0056: item fetching failed at offset 2/5
[ 1458.854912][   T25] kovaplus 0003:1E7D:2D50.0056: parse failed
[ 1458.880078][   T25] kovaplus 0003:1E7D:2D50.0056: probe with driver kovaplus failed with error -22
[ 1458.987212][   T25] usb 4-1: USB disconnect, device number 118
[ 1459.248162][ T1169] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1459.459693][ T1169] usb 3-1: Using ep0 maxpacket: 32
[ 1459.539383][ T1169] usb 3-1: too many configurations: 27, using maximum allowed: 8
[ 1459.609793][ T1169] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1459.626531][ T1169] usb 3-1: can't read configurations, error -61
[ 1459.780579][ T5344] uclogic 0003:256C:006D.0057: failed retrieving string descriptor #100: -71
[ 1459.791965][ T1169] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1459.810122][ T5344] uclogic 0003:256C:006D.0057: failed retrieving pen parameters: -71
[ 1459.848954][ T5344] uclogic 0003:256C:006D.0057: failed probing pen v1 parameters: -71
[ 1459.876767][ T5344] uclogic 0003:256C:006D.0057: failed probing parameters: -71
[ 1459.898648][ T5344] uclogic 0003:256C:006D.0057: probe with driver uclogic failed with error -71
[ 1459.927352][ T5344] usb 5-1: USB disconnect, device number 99
[ 1460.002915][ T1169] usb 3-1: Using ep0 maxpacket: 32
[ 1460.010698][ T1169] usb 3-1: too many configurations: 27, using maximum allowed: 8
[ 1460.032085][ T1169] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1460.058875][ T1169] usb 3-1: can't read configurations, error -61
[ 1460.088330][ T1169] usb usb3-port1: attempt power cycle
[ 1460.516815][   T29] kauditd_printk_skb: 23 callbacks suppressed
[ 1460.516837][   T29] audit: type=1326 audit(2000001345.745:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1460.637893][ T1169] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1460.674510][T23199] input: syz0 as /devices/virtual/input/input104
[ 1460.701140][ T1169] usb 3-1: Using ep0 maxpacket: 32
[ 1460.728263][ T1169] usb 3-1: too many configurations: 27, using maximum allowed: 8
[ 1460.800945][   T29] audit: type=1326 audit(2000001345.745:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1460.828847][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1460.836374][ T1169] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1460.857918][ T1169] usb 3-1: can't read configurations, error -61
[ 1460.907777][   T29] audit: type=1326 audit(2000001345.745:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1460.988066][   T29] audit: type=1326 audit(2000001345.745:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.016403][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1461.059875][ T1169] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1461.128391][ T1169] usb 3-1: Using ep0 maxpacket: 32
[ 1461.136142][ T1169] usb 3-1: too many configurations: 27, using maximum allowed: 8
[ 1461.158674][   T29] audit: type=1326 audit(2000001345.745:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.189973][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1461.222931][ T1169] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1461.260008][ T1169] usb 3-1: can't read configurations, error -61
[ 1461.277351][ T1169] usb usb3-port1: unable to enumerate USB device
[ 1461.287936][   T29] audit: type=1326 audit(2000001345.745:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.317170][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1461.345232][   T29] audit: type=1326 audit(2000001345.745:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.367938][   T25] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1461.383788][   T29] audit: type=1326 audit(2000001345.745:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.411470][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1461.443684][   T29] audit: type=1326 audit(2000001345.745:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.489467][   T29] audit: type=1326 audit(2000001345.745:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23203 comm="syz.0.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae29773b9 code=0x7ffc0000
[ 1461.518842][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1461.598146][   T25] usb 4-1: Using ep0 maxpacket: 8
[ 1461.623105][   T25] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef
[ 1461.651942][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1461.674253][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1461.695843][   T25] usb 4-1: SerialNumber: syz
[ 1461.727073][   T25] usb 4-1: config 0 descriptor??
[ 1461.812334][T23222] input: syz0 as /devices/virtual/input/input106
[ 1461.928671][T23240] QAT: Device 0 not found
[ 1462.047392][   T25] usb 4-1: USB disconnect, device number 119
[ 1462.401963][T23255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1462.413926][T23255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1462.423185][ T1169] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1462.441448][T23255] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5658'.
[ 1462.454441][T23255] sysfs: cannot create duplicate filename '/class/ieee80211/�!'
[ 1462.464108][T23255] CPU: 0 UID: 0 PID: 23255 Comm: syz.1.5658 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0
[ 1462.476695][T23255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1462.489240][T23255] Call Trace:
[ 1462.492870][T23255]  <TASK>
[ 1462.495953][T23255]  dump_stack_lvl+0x241/0x360
[ 1462.500966][T23255]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1462.506664][T23255]  ? __pfx__printk+0x10/0x10
[ 1462.512310][T23255]  ? sysfs_warn_dup+0x51/0xa0
[ 1462.517831][T23255]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[ 1462.524572][T23255]  sysfs_warn_dup+0x8e/0xa0
[ 1462.529130][T23255]  sysfs_do_create_link_sd+0xbe/0x110
[ 1462.535180][T23255]  device_add_class_symlinks+0x1c5/0x250
[ 1462.542005][T23255]  device_add+0x553/0xbf0
[ 1462.546390][T23255]  wiphy_register+0x1d3f/0x2b30
[ 1462.551661][T23255]  ? __pfx_wiphy_register+0x10/0x10
[ 1462.557381][T23255]  ? minstrel_ht_alloc+0x72b/0x860
[ 1462.562675][T23255]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[ 1462.568891][T23255]  ieee80211_register_hw+0x30fb/0x3e10
[ 1462.574571][T23255]  ? ieee80211_register_hw+0x14b1/0x3e10
[ 1462.581431][T23255]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1462.588611][T23255]  ? __asan_memset+0x23/0x50
[ 1462.593539][T23255]  ? __hrtimer_init+0x170/0x250
[ 1462.598882][T23255]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[ 1462.605820][T23255]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1462.612025][T23255]  ? __kmalloc_node_track_caller_noprof+0x242/0x440
[ 1462.618834][T23255]  ? kstrndup+0x5c/0xb0
[ 1462.623032][T23255]  ? __asan_memcpy+0x40/0x70
[ 1462.627713][T23255]  hwsim_new_radio_nl+0xece/0x2290
[ 1462.633065][T23255]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1462.638913][T23255]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1462.644671][T23255]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[ 1462.651319][T23255]  genl_rcv_msg+0xb14/0xec0
[ 1462.655969][T23255]  ? mark_lock+0x9a/0x350
[ 1462.661107][T23255]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1462.668729][T23255]  ? __pfx_lock_acquire+0x10/0x10
[ 1462.676667][T23255]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1462.684622][T23255]  ? __pfx___might_resched+0x10/0x10
[ 1462.690178][T23255]  netlink_rcv_skb+0x1e3/0x430
[ 1462.696577][T23255]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1462.702658][T23255]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1462.710618][T23255]  ? __netlink_deliver_tap+0x77e/0x7c0
[ 1462.717568][T23255]  genl_rcv+0x28/0x40
[ 1462.722822][T23255]  netlink_unicast+0x7f0/0x990
[ 1462.728024][T23255]  ? __pfx_netlink_unicast+0x10/0x10
[ 1462.734044][T23255]  ? __virt_addr_valid+0x183/0x530
[ 1462.740962][T23255]  ? __check_object_size+0x49c/0x900
[ 1462.748554][T23255]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1462.754675][T23255]  netlink_sendmsg+0x8e4/0xcb0
[ 1462.760102][T23255]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1462.766639][T23255]  ? __import_iovec+0x536/0x820
[ 1462.772410][T23255]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1462.779155][T23255]  ? security_socket_sendmsg+0x87/0xb0
[ 1462.785039][T23255]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1462.791330][T23255]  __sock_sendmsg+0x221/0x270
[ 1462.797977][T23255]  ____sys_sendmsg+0x525/0x7d0
[ 1462.804774][T23255]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1462.812514][T23255]  __sys_sendmsg+0x2b0/0x3a0
[ 1462.817443][T23255]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1462.826804][T23255]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1462.835156][T23255]  ? rcu_is_watching+0x15/0xb0
[ 1462.840330][T23255]  ? trace_sys_enter+0x1f/0xd0
[ 1462.845322][T23255]  do_syscall_64+0xf3/0x230
[ 1462.851492][T23255]  ? clear_bhb_loop+0x35/0x90
[ 1462.858256][T23255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.867182][T23255] RIP: 0033:0x7f9116b773b9
[ 1462.873299][T23255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1462.894587][T23255] RSP: 002b:00007f91179c2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1462.903885][T23255] RAX: ffffffffffffffda RBX: 00007f9116d05f80 RCX: 00007f9116b773b9
[ 1462.916462][T23255] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006
[ 1462.925500][T23255] RBP: 00007f9116be48e6 R08: 0000000000000000 R09: 0000000000000000
[ 1462.935879][T23255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1462.944238][T23255] R13: 000000000000000b R14: 00007f9116d05f80 R15: 00007fff17990fd8
[ 1462.952461][T23255]  </TASK>
[ 1462.956031][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1462.985665][ T5219] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1463.128165][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1463.140142][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1463.170166][ T1169] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1463.204921][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1463.213610][ T5219] usb 3-1: Using ep0 maxpacket: 8
[ 1463.222010][ T5219] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1463.240525][ T5219] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[ 1463.259926][ T1169] usb 1-1: config 0 descriptor??
[ 1463.265323][ T5219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[ 1463.293448][ T5219] usb 3-1: SerialNumber: syz
[ 1463.311886][ T5219] usb 3-1: config 0 descriptor??
[ 1463.324190][ T5219] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[ 1463.337662][ T5219] usb 3-1: No valid video chain found.
[ 1463.534150][ T5219] usb 3-1: USB disconnect, device number 104
[ 1463.727732][T12120] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1463.931577][T12120] usb 5-1: Using ep0 maxpacket: 16
[ 1463.938768][T12120] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1463.957751][T12120] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1463.967542][T12120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1464.000028][T12120] usb 5-1: config 0 descriptor??
[ 1464.870666][ T1169] uclogic 0003:256C:006D.0058: failed retrieving string descriptor #100: -71
[ 1464.899320][ T1169] uclogic 0003:256C:006D.0058: failed retrieving pen parameters: -71
[ 1464.945248][ T1169] uclogic 0003:256C:006D.0058: failed probing pen v1 parameters: -71
[ 1464.978426][ T1169] uclogic 0003:256C:006D.0058: failed probing parameters: -71
[ 1465.005331][ T1169] uclogic 0003:256C:006D.0058: probe with driver uclogic failed with error -71
[ 1465.067263][ T1169] usb 1-1: USB disconnect, device number 95
[ 1465.791471][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1466.156858][T23305] netlink: 'syz.3.5672': attribute type 49 has an invalid length.
[ 1466.228382][T23313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5673'.
[ 1466.447927][T12120] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1466.561275][ T5263] usb 5-1: USB disconnect, device number 100
[ 1466.637738][T12120] usb 4-1: Using ep0 maxpacket: 32
[ 1466.650300][ T5344] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1466.661648][T12120] usb 4-1: config 24 has an invalid interface number: 66 but max is 0
[ 1466.676066][T12120] usb 4-1: config 24 has an invalid descriptor of length 215, skipping remainder of the config
[ 1466.690449][T12120] usb 4-1: config 24 has no interface number 0
[ 1466.700766][T12120] usb 4-1: config 24 interface 66 altsetting 154 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[ 1466.714718][T12120] usb 4-1: config 24 interface 66 has no altsetting 0
[ 1466.721837][T12120] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[ 1466.732325][T12120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1467.268679][ T5344] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53
[ 1467.328608][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1467.340874][ T5344] usb 1-1: Product: syz
[ 1467.345101][ T5344] usb 1-1: Manufacturer: syz
[ 1467.367074][    C1] ==================================================================
[ 1467.375173][    C1] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x231/0x240
[ 1467.377669][ T5344] usb 1-1: SerialNumber: syz
[ 1467.383432][    C1] Read of size 4 at addr ffffc9000416f7f8 by task syz.4.5676/23322
[ 1467.383455][    C1] 
[ 1467.383462][    C1] CPU: 1 UID: 0 PID: 23322 Comm: syz.4.5676 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0
[ 1467.383482][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1467.383495][    C1] Call Trace:
[ 1467.422357][    C1]  <IRQ>
[ 1467.425197][    C1]  dump_stack_lvl+0x241/0x360
[ 1467.429877][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1467.435949][    C1]  ? __pfx__printk+0x10/0x10
[ 1467.440644][    C1]  ? _printk+0xd5/0x120
[ 1467.444812][    C1]  print_report+0x169/0x550
[ 1467.449415][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1467.454633][    C1]  ? __virt_addr_valid+0xbd/0x530
[ 1467.459673][    C1]  ? xdp_do_check_flushed+0x231/0x240
[ 1467.465048][    C1]  kasan_report+0x143/0x180
[ 1467.469548][    C1]  ? xdp_do_check_flushed+0x231/0x240
[ 1467.475216][    C1]  xdp_do_check_flushed+0x231/0x240
[ 1467.480518][    C1]  __napi_poll+0xe4/0x490
[ 1467.484881][    C1]  net_rx_action+0x89b/0x1240
[ 1467.489581][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 1467.494721][    C1]  ? sched_clock+0x4a/0x70
[ 1467.499949][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1467.506457][    C1]  handle_softirqs+0x2c4/0x970
[ 1467.511855][    C1]  ? do_softirq+0x11b/0x1e0
[ 1467.516575][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1467.522165][    C1]  do_softirq+0x11b/0x1e0
[ 1467.526789][    C1]  </IRQ>
[ 1467.529812][    C1]  <TASK>
[ 1467.533431][    C1]  ? __pfx_do_softirq+0x10/0x10
[ 1467.538398][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[ 1467.544167][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1467.549029][    C1]  __local_bh_enable_ip+0x1bb/0x200
[ 1467.554421][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[ 1467.560349][    C1]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1467.566317][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1467.572746][    C1]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1467.578050][    C1]  __dev_queue_xmit+0x1763/0x3e90
[ 1467.583288][    C1]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1467.589853][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1467.595447][    C1]  ? mark_lock+0x9a/0x350
[ 1467.599798][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1467.606073][    C1]  ? ip_finish_output2+0xa14/0x1390
[ 1467.611593][    C1]  ? ip_finish_output2+0x45f/0x1390
[ 1467.617176][    C1]  ip_finish_output2+0xd41/0x1390
[ 1467.623551][    C1]  ? ip_finish_output2+0x45f/0x1390
[ 1467.628933][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[ 1467.634500][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[ 1467.639551][    C1]  ? __ip_finish_output+0x349/0x400
[ 1467.645280][    C1]  __ip_queue_xmit+0x118c/0x1b80
[ 1467.650239][    C1]  ? __ip_queue_xmit+0x5f/0x1b80
[ 1467.655179][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[ 1467.660290][    C1]  __tcp_transmit_skb+0x2544/0x3b30
[ 1467.665514][    C1]  ? __pfx___tcp_transmit_skb+0x10/0x10
[ 1467.671151][    C1]  ? __asan_memset+0x23/0x50
[ 1467.675841][    C1]  ? tcp_rbtree_insert+0x12e/0x180
[ 1467.680947][    C1]  tcp_connect+0x1b89/0x4840
[ 1467.685633][    C1]  ? __pfx_tcp_connect+0x10/0x10
[ 1467.690568][    C1]  ? sk_setup_caps+0x816/0xa50
[ 1467.695553][    C1]  tcp_v4_connect+0x1127/0x1ba0
[ 1467.700436][    C1]  ? __pfx_tcp_v4_connect+0x10/0x10
[ 1467.705648][    C1]  ? mark_lock+0x9a/0x350
[ 1467.710455][    C1]  __inet_stream_connect+0x262/0xf30
[ 1467.715774][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1467.722120][    C1]  ? __local_bh_enable_ip+0x168/0x200
[ 1467.727504][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1467.732715][    C1]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1467.738516][    C1]  ? __local_bh_enable_ip+0x168/0x200
[ 1467.743911][    C1]  ? inet_stream_connect+0x50/0xa0
[ 1467.749011][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1467.754724][    C1]  inet_stream_connect+0x65/0xa0
[ 1467.759662][    C1]  __sys_connect+0x2df/0x310
[ 1467.764249][    C1]  ? __pfx___sys_connect+0x10/0x10
[ 1467.769367][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1467.775781][    C1]  __x64_sys_connect+0x7a/0x90
[ 1467.780543][    C1]  do_syscall_64+0xf3/0x230
[ 1467.785042][    C1]  ? clear_bhb_loop+0x35/0x90
[ 1467.789715][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1467.795601][    C1] RIP: 0033:0x7f7e6d3773b9
[ 1467.800022][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1467.819833][    C1] RSP: 002b:00007f7e6e14b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1467.828244][    C1] RAX: ffffffffffffffda RBX: 00007f7e6d506058 RCX: 00007f7e6d3773b9
[ 1467.836324][    C1] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000009
[ 1467.844373][    C1] RBP: 00007f7e6d3e48e6 R08: 0000000000000000 R09: 0000000000000000
[ 1467.852331][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1467.860461][    C1] R13: 000000000000006e R14: 00007f7e6d506058 R15: 00007ffde0003858
[ 1467.869057][    C1]  </TASK>
[ 1467.872075][    C1] 
[ 1467.875705][    C1] The buggy address belongs to stack of task syz.4.5676/23322
[ 1467.883180][    C1]  and is located at offset 248 in frame:
[ 1467.888908][    C1]  __tcp_transmit_skb+0x0/0x3b30
[ 1467.893855][    C1] 
[ 1467.896171][    C1] This frame has 3 objects:
[ 1467.900748][    C1]  [32, 96) 'sock_ops.i'
[ 1467.900761][    C1]  [128, 216) 'opts'
[ 1467.905244][    C1]  [256, 288) 'key'
[ 1467.909221][    C1] 
[ 1467.915349][    C1] The buggy address belongs to the virtual mapping at
[ 1467.915349][    C1]  [ffffc90004168000, ffffc90004171000) created by:
[ 1467.915349][    C1]  copy_process+0x5d1/0x3dc0
[ 1467.932971][    C1] 
[ 1467.935367][    C1] The buggy address belongs to the physical page:
[ 1467.941795][    C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805b8d5800 pfn:0x5b8d4
[ 1467.951847][    C1] memcg:ffff88802daead82
[ 1467.956080][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1467.963282][    C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 1467.972025][    C1] raw: ffff88805b8d5800 0000000000000000 00000001ffffffff ffff88802daead82
[ 1467.980587][    C1] page dumped because: kasan: bad access detected
[ 1467.987004][    C1] page_owner tracks the page as allocated
[ 1467.992785][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 23320, tgid 23320 (syz.4.5676), ts 1466763914361, free_ts 1466556802809
[ 1468.011450][    C1]  post_alloc_hook+0x1f3/0x230
[ 1468.016219][    C1]  get_page_from_freelist+0x2e4c/0x2f10
[ 1468.021756][    C1]  __alloc_pages_noprof+0x256/0x6c0
[ 1468.026943][    C1]  alloc_pages_mpol_noprof+0x3e8/0x680
[ 1468.032394][    C1]  __vmalloc_node_range_noprof+0x971/0x1460
[ 1468.038274][    C1]  dup_task_struct+0x444/0x8c0
[ 1468.043207][    C1]  copy_process+0x5d1/0x3dc0
[ 1468.047782][    C1]  kernel_clone+0x223/0x870
[ 1468.052364][    C1]  __se_sys_clone3+0x2cb/0x350
[ 1468.057119][    C1]  do_syscall_64+0xf3/0x230
[ 1468.061612][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.067535][    C1] page last free pid 23275 tgid 23274 stack trace:
[ 1468.074018][    C1]  free_unref_folios+0x100f/0x1ac0
[ 1468.079200][    C1]  folios_put_refs+0x76e/0x860
[ 1468.083952][    C1]  free_pages_and_swap_cache+0x2ea/0x690
[ 1468.089594][    C1]  tlb_flush_mmu+0x3a3/0x680
[ 1468.094195][    C1]  tlb_finish_mmu+0xd4/0x200
[ 1468.098785][    C1]  exit_mmap+0x44f/0xc80
[ 1468.103030][    C1]  __mmput+0x115/0x380
[ 1468.107177][    C1]  exit_mm+0x220/0x310
[ 1468.111242][    C1]  do_exit+0x9b2/0x27f0
[ 1468.115386][    C1]  do_group_exit+0x207/0x2c0
[ 1468.119977][    C1]  get_signal+0x1695/0x1730
[ 1468.124470][    C1]  arch_do_signal_or_restart+0x96/0x860
[ 1468.130032][    C1]  syscall_exit_to_user_mode+0xc9/0x370
[ 1468.135594][    C1]  do_syscall_64+0x100/0x230
[ 1468.140277][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.146256][    C1] 
[ 1468.148566][    C1] Memory state around the buggy address:
[ 1468.154447][    C1]  ffffc9000416f680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1468.162697][    C1]  ffffc9000416f700: f1 f1 f1 f1 00 00 00 00 00 00 00 00 f2 f2 f2 f2
[ 1468.170939][    C1] >ffffc9000416f780: 00 00 00 00 00 00 00 00 00 00 00 f2 f2 f2 f2 f2
[ 1468.179166][    C1]                                                                 ^
[ 1468.187644][    C1]  ffffc9000416f800: 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00
[ 1468.195696][    C1]  ffffc9000416f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1468.203744][    C1] ==================================================================
[ 1468.212033][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1468.220451][    C1] CPU: 1 UID: 0 PID: 23322 Comm: syz.4.5676 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0
[ 1468.231242][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1468.241408][    C1] Call Trace:
[ 1468.244802][    C1]  <IRQ>
[ 1468.247654][    C1]  dump_stack_lvl+0x241/0x360
[ 1468.252366][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1468.257587][    C1]  ? __pfx__printk+0x10/0x10
[ 1468.262284][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1468.268304][    C1]  ? vscnprintf+0x5d/0x90
[ 1468.272691][    C1]  panic+0x349/0x860
[ 1468.276614][    C1]  ? check_panic_on_warn+0x21/0xb0
[ 1468.281759][    C1]  ? __pfx_panic+0x10/0x10
[ 1468.286299][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 1468.292230][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1468.298142][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1468.304511][    C1]  check_panic_on_warn+0x86/0xb0
[ 1468.309492][    C1]  ? xdp_do_check_flushed+0x231/0x240
[ 1468.315719][    C1]  end_report+0x77/0x160
[ 1468.320079][    C1]  kasan_report+0x154/0x180
[ 1468.324709][    C1]  ? xdp_do_check_flushed+0x231/0x240
[ 1468.330116][    C1]  xdp_do_check_flushed+0x231/0x240
[ 1468.335514][    C1]  __napi_poll+0xe4/0x490
[ 1468.339874][    C1]  net_rx_action+0x89b/0x1240
[ 1468.344690][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 1468.349881][    C1]  ? sched_clock+0x4a/0x70
[ 1468.354380][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1468.360753][    C1]  handle_softirqs+0x2c4/0x970
[ 1468.365545][    C1]  ? do_softirq+0x11b/0x1e0
[ 1468.370116][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1468.375511][    C1]  do_softirq+0x11b/0x1e0
[ 1468.380121][    C1]  </IRQ>
[ 1468.383150][    C1]  <TASK>
[ 1468.386075][    C1]  ? __pfx_do_softirq+0x10/0x10
[ 1468.391096][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[ 1468.396721][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1468.401478][    C1]  __local_bh_enable_ip+0x1bb/0x200
[ 1468.406692][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[ 1468.411992][    C1]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1468.417196][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1468.422930][    C1]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1468.428044][    C1]  __dev_queue_xmit+0x1763/0x3e90
[ 1468.433185][    C1]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1468.438498][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1468.443981][    C1]  ? mark_lock+0x9a/0x350
[ 1468.448329][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1468.454305][    C1]  ? ip_finish_output2+0xa14/0x1390
[ 1468.459763][    C1]  ? ip_finish_output2+0x45f/0x1390
[ 1468.464960][    C1]  ip_finish_output2+0xd41/0x1390
[ 1468.469990][    C1]  ? ip_finish_output2+0x45f/0x1390
[ 1468.475274][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[ 1468.480719][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[ 1468.485566][    C1]  ? __ip_finish_output+0x349/0x400
[ 1468.490758][    C1]  __ip_queue_xmit+0x118c/0x1b80
[ 1468.495692][    C1]  ? __ip_queue_xmit+0x5f/0x1b80
[ 1468.500620][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[ 1468.505719][    C1]  __tcp_transmit_skb+0x2544/0x3b30
[ 1468.510923][    C1]  ? __pfx___tcp_transmit_skb+0x10/0x10
[ 1468.516468][    C1]  ? __asan_memset+0x23/0x50
[ 1468.521046][    C1]  ? tcp_rbtree_insert+0x12e/0x180
[ 1468.526157][    C1]  tcp_connect+0x1b89/0x4840
[ 1468.530795][    C1]  ? __pfx_tcp_connect+0x10/0x10
[ 1468.535957][    C1]  ? sk_setup_caps+0x816/0xa50
[ 1468.540727][    C1]  tcp_v4_connect+0x1127/0x1ba0
[ 1468.545677][    C1]  ? __pfx_tcp_v4_connect+0x10/0x10
[ 1468.550877][    C1]  ? mark_lock+0x9a/0x350
[ 1468.555212][    C1]  __inet_stream_connect+0x262/0xf30
[ 1468.560575][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1468.567068][    C1]  ? __local_bh_enable_ip+0x168/0x200
[ 1468.572432][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1468.577880][    C1]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1468.583761][    C1]  ? __local_bh_enable_ip+0x168/0x200
[ 1468.589214][    C1]  ? inet_stream_connect+0x50/0xa0
[ 1468.595278][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1468.600992][    C1]  inet_stream_connect+0x65/0xa0
[ 1468.605929][    C1]  __sys_connect+0x2df/0x310
[ 1468.610515][    C1]  ? __pfx___sys_connect+0x10/0x10
[ 1468.615709][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1468.622032][    C1]  __x64_sys_connect+0x7a/0x90
[ 1468.626812][    C1]  do_syscall_64+0xf3/0x230
[ 1468.631329][    C1]  ? clear_bhb_loop+0x35/0x90
[ 1468.636005][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.642072][    C1] RIP: 0033:0x7f7e6d3773b9
[ 1468.646473][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1468.666156][    C1] RSP: 002b:00007f7e6e14b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1468.674825][    C1] RAX: ffffffffffffffda RBX: 00007f7e6d506058 RCX: 00007f7e6d3773b9
[ 1468.682787][    C1] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000009
[ 1468.690754][    C1] RBP: 00007f7e6d3e48e6 R08: 0000000000000000 R09: 0000000000000000
[ 1468.698734][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1468.706701][    C1] R13: 000000000000006e R14: 00007f7e6d506058 R15: 00007ffde0003858
[ 1468.714671][    C1]  </TASK>
[ 1468.717986][    C1] Kernel Offset: disabled
[ 1468.722294][    C1] Rebooting in 86400 seconds..