last executing test programs:

6m27.873234221s ago: executing program 2 (id=1414):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0xffffffffffffff19)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="bbb891a57b9a7bb1d8cb60b24f000000006167c04807f35551eeeb262cb0f003b4f353fcc3c08ddf2a0c3b2b1f8b9fa4ece5fe86195d5795332b65a6baeb06d8004d06b98cf649ae47f770522b75493af1dc239cede58ee580077404fffdfe47348caf86127b95510a790eab26e6f71285be39f9085ba8ea3824d2d36507524e8824bcdb6ad7aa4fd9aab379a40ccab4997569b90b3f6ed770f079728d5828eac13acad4b7ade2bbef64ab6430934206c171f6afedeac76b642b2ef1255043411b548fa7bddacafe6bd0a4ee4e45175819862ec7f8", 0x402, r4}, 0x38)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r6, 0x30d}, 0x14}}, 0x0)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r4}, 0x38)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffe0, 0xa}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0xd5}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
gettid()

6m22.173183236s ago: executing program 2 (id=1421):
unshare(0xa000200)
r0 = semget$private(0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]})
semtimedop(r0, &(0x7f0000000640), 0x0, 0x0)

6m21.998945146s ago: executing program 2 (id=1422):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)}], 0x3}, 0x0)

6m21.820116051s ago: executing program 2 (id=1425):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80600, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
io_uring_enter(0xffffffffffffffff, 0xf, 0x7929, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0x7, 0x6})
openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendfile(r2, r1, 0x0, 0x7ffffffd)

6m21.514591022s ago: executing program 2 (id=1427):
syz_emit_ethernet(0x2e, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4, 0x42}]}}, @echo}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x7, 0x40000005, 0x1, 0x4, 0x2, 0x7}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x37}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x18, 0x3, 0x3ff)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000080)=0x3)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='affs\x00', 0x1000000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff6d811ad8dc2affffff86dd60000000001406fffe8000000000000000000000000000aafe80000000000000000a0000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0)

6m16.315648172s ago: executing program 2 (id=1442):
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8)
timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
unshare(0x6a040000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r0, 0x80047455, &(0x7f0000000080)=0x1)

6m1.240604521s ago: executing program 32 (id=1442):
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8)
timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
unshare(0x6a040000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r0, 0x80047455, &(0x7f0000000080)=0x1)

3m52.508720971s ago: executing program 1 (id=1871):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

3m52.465741361s ago: executing program 3 (id=1872):
socket(0x10, 0x3, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
io_setup(0x200, &(0x7f00000010c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

3m52.254941592s ago: executing program 1 (id=1873):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="b21453f4e228f9d570445c4e8f55749fc4a80baad16797c93119a0a176d74dc1c4c59f9fb630031a62e01f03fdb1aeb0fa92577b912e8c698ff4ab6b174ed47aefe86f86c4dbea04bc19d908273584a22bc61a58cf3d7e690d669553e201da9306c680c4525218471d8938ae78f7ebe7ae2fa9e615783b96ec7fa4b50f2802deb0bf604768b98329d485262df4b3f4b06d32d047b7caed00d6d7a170acf9f953136d98a33aa604ab432c9cb92db0493953aa1874127b18bcdda420d63aa2bc915ad2a575d2bdd6ca086eabf3ab1a9a74a5511e3f671fa18b241b2a4f95c2639075fb1982d41b9800"/245, @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x40002, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000240)={0x0}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
socket$nl_xfrm(0x10, 0x3, 0x6)

3m51.975418316s ago: executing program 3 (id=1874):
syz_emit_ethernet(0x71, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3b, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, [@dstopts], "fb36ee"}}}}}}}, 0x0)

3m51.853255572s ago: executing program 3 (id=1875):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xffff, 0x7f, 0x1}]}, 0x10)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

3m49.893251327s ago: executing program 3 (id=1880):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000400"], 0x10)

3m49.680069331s ago: executing program 3 (id=1881):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

3m49.677892971s ago: executing program 1 (id=1882):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d2", 0xe}, {&(0x7f0000000040)="0f", 0x1}], 0x2}, 0x20084812)

3m49.526817549s ago: executing program 1 (id=1885):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xf)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4276}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3m49.524781658s ago: executing program 3 (id=1886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x40080)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

3m49.486481672s ago: executing program 1 (id=1887):
close(0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {}], 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180))
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="9d07070006060400200012800b0001006272696479af0003000002800c002e000004000013699385"], 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000044700, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"/2966], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f3426715eaa72f5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
listen(0xffffffffffffffff, 0x4)
fsopen(&(0x7f0000000000)='9p\x00', 0x1)

3m47.563359905s ago: executing program 1 (id=1888):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x60c5895)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x141}, {&(0x7f0000000bc0)="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", 0x171}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000230000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3m34.374000838s ago: executing program 33 (id=1886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x40080)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

3m32.355838806s ago: executing program 34 (id=1888):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x60c5895)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x141}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932", 0x171}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000230000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

12.983857613s ago: executing program 0 (id=2664):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

12.428171575s ago: executing program 0 (id=2670):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000240))
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.sockprotoname\x00', &(0x7f0000000200)='\x00', 0x1, 0x2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000040), 0x4c)
recvmmsg(r6, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001640)=""/4106, 0x100a}], 0x2}, 0x28000003}], 0x1, 0x40010020, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4000811)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9.584452801s ago: executing program 0 (id=2682):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0xffffffffffffff19)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r4}, 0x38)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffe0, 0xa}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0xd5}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
gettid()

9.245787501s ago: executing program 4 (id=2685):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"})
socket$can_raw(0x1d, 0x3, 0x1)
pipe(0x0)
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x3, 0x8000000003c)

8.327994488s ago: executing program 4 (id=2691):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fsopen(0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x2)
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x78, 0xa3, 0x6, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0x9, 0xff5, 0x3ff, 0x97, 0x7}]}, 0x78)
r2 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
fanotify_init(0x200, 0x1000)
dup(r2)
write$FUSE_DIRENTPLUS(r1, 0x0, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x407, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}})

5.31634996s ago: executing program 4 (id=2694):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c)
io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0)

5.170701376s ago: executing program 4 (id=2695):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

4.92890706s ago: executing program 4 (id=2698):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x7}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0)

4.695649014s ago: executing program 0 (id=2699):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20)
unshare(0x24060400)
ppoll(&(0x7f00000003c0)=[{r0, 0x30b3}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)

4.401851082s ago: executing program 0 (id=2700):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

3.59170942s ago: executing program 5 (id=2703):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000000480)='\x00', 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

3.434050673s ago: executing program 7 (id=2705):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
ppoll(&(0x7f00000003c0)=[{r0, 0x20}, {r0, 0x30b3}], 0x2, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)

2.705401399s ago: executing program 7 (id=2710):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20)
unshare(0x24060400)
ppoll(&(0x7f00000003c0)=[{r0, 0x30b3}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)

2.535796344s ago: executing program 6 (id=2711):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
pipe(0x0)
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x3, 0x8000000003c)

2.504950706s ago: executing program 7 (id=2712):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
stat(&(0x7f0000000080)='./file0\x00', 0x0)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7})
dup(0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c)
io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x6, 0xfffeffff, 0x9, 0x0, "0bfa002049cfaf8f331b4c1d334dfd5b19461b"})

2.396074947s ago: executing program 7 (id=2713):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2000, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x40000005, 0x0})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r6, r4, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4e21, @remote}}}, 0x118)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)

2.227937797s ago: executing program 6 (id=2714):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000001380), 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
write$binfmt_format(r0, 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f00000004c0)=0x79, 0x4)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r4, &(0x7f0000000000)="fa", 0xfffffdef)
unshare(0x18000800)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write(0xffffffffffffffff, &(0x7f0000000080)='$\x00\x00\x00N\x00%\x00', 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)

2.225453215s ago: executing program 5 (id=2715):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

2.132302354s ago: executing program 7 (id=2716):
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
unshare(0x64000600)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

1.959328948s ago: executing program 5 (id=2717):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
timerfd_create(0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4276}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.860331128s ago: executing program 6 (id=2718):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r0, 0x2)
r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r2 = dup(r1)
write$binfmt_elf64(r2, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x78, 0xa3, 0x6, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0x9, 0xff5, 0x3ff, 0x97, 0x7}]}, 0x78)
fanotify_init(0x200, 0x1000)
dup(0xffffffffffffffff)
write$FUSE_DIRENTPLUS(r2, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

1.771217413s ago: executing program 4 (id=2719):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100200000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94)
close(r2)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

1.720655151s ago: executing program 5 (id=2720):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400040000002800128008000100736974001c00028006000d00ff07000008000300e0000001080001002da0c66bd3"], 0x48}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040)

1.55115267s ago: executing program 5 (id=2721):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000007, 0x0, 0xffffffff, 0x18, "28f5c9ea1f01975d737f795c5a04b4bde58cd7af40fd150b70aac11c2e16bd76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59cf7ffffff00", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=@newsa={0x39c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@remote, @in=@multicast1, 0x4e20, 0x1, 0x4ea1, 0x602, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0x4d2, 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x8d5, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {0x0, 0x4}, 0x70bd28, 0x3500, 0x2, 0x1}, [@replay_esn_val={0x44, 0x17, {0xa, 0x70bd2d, 0x70bd2c, 0x70bd25, 0x70bd2b, 0x6, [0x1, 0x3, 0x8881, 0x81, 0x6, 0x1, 0x4, 0x1, 0x6, 0x6]}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@private0, @in=@local, @in=@rand_addr=0x64010101, 0x2b, 0x3, 0x0, 0x3505, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0xc4, 0x2, 0x0, 0x3502, 0xa, 0xa}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0xa6f}, @extra_flags={0x8, 0x18, 0x2e}, @proto={0x5, 0x19, 0x33}, @tfcpad={0x8, 0x16, 0xe}, @lifetime_val={0x24, 0x9, {0xb35, 0x2, 0x79e8, 0x7fffffff}}, @migrate={0x180, 0x11, [{@in=@broadcast, @in=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1, 0x3c, 0x4, 0x0, 0x3502, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in=@remote, @in6=@private1, @in=@broadcast, 0x2b, 0x2, 0x0, 0x3506, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@loopback, 0x6c, 0x4, 0x0, 0x3507, 0xa, 0xa}, {@in=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@broadcast, 0x33, 0x2, 0x0, 0x3503, 0x2, 0xa}, {@in6=@local, @in=@rand_addr=0x64010101, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x3501, 0x2, 0xa}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000401e043732400001020301090269000301053009080b00010107208c090400000001012000092401004004090007090401000001022000090401010101022000090501090002030b04082501000c400400090402000001022000090402cb6b010101022000"], 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044880}, 0x40040)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r9 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01e424bd0000001a0001010400018000000087eee2178b363c5e8501c21f3679910fb517317a415cf098d68fe34987cb4cfbf52d967fc70933019ad2fbe6771881371e730b41ec86f49f194804984a836dba0341a1a91d5a5868510fecaba562aec8ce536556f3399c383e1d2e0df27681c2d84638a6ec2b9ced58a0c0cc26041cdbedc0d4dad8664a35"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r10 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4000}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x2, 0x40001)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="99000040", @ANYRES16=r3, @ANYBLOB="0100030000000000000001000000580008805400008089fc05005a000000480009800400008040000080060001000200000008000200ac1414180500030002000000060001000a0000001400020000000000000000000000000000000000050003000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xadb, 0x8, 0x5, 0x8000080}, &(0x7f0000000400), 0x0, &(0x7f0000000040))
fanotify_init(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.340803357s ago: executing program 6 (id=2722):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r0, 0x2)
r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r2 = dup(r1)
write$binfmt_elf64(r2, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x78, 0xa3, 0x6, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0x9, 0xff5, 0x3ff, 0x97, 0x7}]}, 0x78)
r3 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
fanotify_init(0x200, 0x1000)
dup(r3)
write$FUSE_DIRENTPLUS(r2, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x407, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}})

1.100057915s ago: executing program 0 (id=2723):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r0, 0x2)
memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x78, 0xa3, 0x6, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0x9, 0xff5, 0x3ff, 0x97, 0x7}]}, 0x78)
r1 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
fanotify_init(0x200, 0x1000)
dup(r1)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

743.059856ms ago: executing program 6 (id=2724):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x10)
accept$alg(r0, 0x0, 0x0)
timerfd_create(0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

292.830043ms ago: executing program 6 (id=2725):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000480)='\x00', 0x1)

180.544419ms ago: executing program 7 (id=2726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2000, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x40000005, 0x0})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r6, r4, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4e21, @remote}}}, 0x118)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)

0s ago: executing program 5 (id=2727):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

kernel console output (not intermixed with test programs):

 hsr_slave_0: entered promiscuous mode
[  636.317392][T11636] hsr_slave_1: entered promiscuous mode
[  636.345724][T11636] debugfs: 'hsr0' already exists in 'hsr'
[  636.345751][T11636] Cannot create hsr debugfs directory
[  636.378780][ T5606] Bluetooth: hci6: command tx timeout
[  636.538878][ T5606] Bluetooth: hci7: command tx timeout
[  637.212809][ T5606] Bluetooth: hci5: command tx timeout
[  637.268760][    T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  637.445278][    T9] usb 5-1: Using ep0 maxpacket: 16
[  637.466322][    T9] usb 5-1: config index 0 descriptor too short (expected 67, got 36)
[  637.466380][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.466407][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.466444][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  637.466466][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.482930][    T9] usb 5-1: config 0 descriptor??
[  637.757000][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  637.757123][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  637.778710][    T9] usb 5-1: USB disconnect, device number 45
[  638.109745][T11840] syz_tun (unregistering): left allmulticast mode
[  638.349969][T11820] syz_tun (unregistering): left allmulticast mode
[  638.430910][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7
[  638.459305][ T5606] Bluetooth: hci6: command tx timeout
[  638.618766][ T5606] Bluetooth: hci7: command tx timeout
[  639.108859][ T3294] bridge_slave_1: left allmulticast mode
[  639.108893][ T3294] bridge_slave_1: left promiscuous mode
[  639.109142][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.210551][ T3294] bridge_slave_0: left allmulticast mode
[  639.210585][ T3294] bridge_slave_0: left promiscuous mode
[  639.210828][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.258777][ T5606] Bluetooth: hci5: command tx timeout
[  640.370968][ T3294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.449624][ T3294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  640.505549][ T3294] bond0 (unregistering): Released all slaves
[  640.538740][ T5606] Bluetooth: hci6: command tx timeout
[  640.710463][ T5606] Bluetooth: hci7: command tx timeout
[  640.900309][   T31] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  641.078889][   T31] usb 5-1: Using ep0 maxpacket: 16
[  641.084807][   T31] usb 5-1: config index 0 descriptor too short (expected 67, got 36)
[  641.084863][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.084890][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.084927][   T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  641.084949][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.159258][   T31] usb 5-1: config 0 descriptor??
[  641.485412][   T31] usbhid 5-1:0.0: can't add hid device: -71
[  641.485535][   T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  641.513670][   T31] usb 5-1: USB disconnect, device number 46
[  641.550090][ T3294] hsr_slave_0: left promiscuous mode
[  641.588793][ T3294] hsr_slave_1: left promiscuous mode
[  641.589487][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  641.629671][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  642.411066][ T3294] team0 (unregistering): Port device team_slave_1 removed
[  642.471523][ T3294] team0 (unregistering): Port device team_slave_0 removed
[  642.778882][ T5606] Bluetooth: hci7: command tx timeout
[  645.481517][T11882] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.481587][T11882] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.481752][T11882] bridge_slave_0: entered allmulticast mode
[  645.484860][T11882] bridge_slave_0: entered promiscuous mode
[  645.741655][ T3294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.819120][T11882] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.819286][T11882] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.819419][T11882] bridge_slave_1: entered allmulticast mode
[  645.820864][T11882] bridge_slave_1: entered promiscuous mode
[  646.314558][ T3294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.364679][ T5740] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  646.371838][T11882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.448002][T11882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.532181][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  646.532215][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  646.532258][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  646.532282][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.587155][T11887] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.587278][T11887] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.587489][T11887] bridge_slave_0: entered allmulticast mode
[  646.592971][T11887] bridge_slave_0: entered promiscuous mode
[  646.744175][T11887] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.744250][T11887] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.744483][T11887] bridge_slave_1: entered allmulticast mode
[  646.746392][T11887] bridge_slave_1: entered promiscuous mode
[  646.784321][ T5740] usb 5-1: usb_control_msg returned -32
[  646.784350][ T5740] usbtmc 5-1:16.0: can't read capabilities
[  646.923413][ T3294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.949361][T11875] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.949431][T11875] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.949605][T11875] bridge_slave_0: entered allmulticast mode
[  646.951953][T11875] bridge_slave_0: entered promiscuous mode
[  647.008167][T11882] team0: Port device team_slave_0 added
[  647.031248][T11875] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.031348][T11875] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.031469][T11875] bridge_slave_1: entered allmulticast mode
[  647.032979][T11875] bridge_slave_1: entered promiscuous mode
[  647.052987][T11882] team0: Port device team_slave_1 added
[  647.105208][T11636] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  647.136450][T11636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  647.144841][T11887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  647.168326][ T1579] usb 5-1: USB disconnect, device number 47
[  647.410505][ T3294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.507583][T11887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  647.507677][T11636] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  647.554737][T11636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  647.584925][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  647.589654][T11882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  647.589670][T11882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  647.589695][T11882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  647.667099][T11636] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  647.684418][T12081] binder: 12080:12081 ioctl c0306201 200000001440 returned -11
[  647.720844][T11636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  647.725538][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  647.726356][T11882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  647.726369][T11882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  647.726393][T11882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.755281][T11636] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  647.830755][T11636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  648.002211][T11887] team0: Port device team_slave_0 added
[  648.045685][T11887] team0: Port device team_slave_1 added
[  648.063414][T11875] team0: Port device team_slave_0 added
[  648.115940][T11875] team0: Port device team_slave_1 added
[  648.175205][T12093] binder: 12092:12093 ioctl c0306201 200000001440 returned -11
[  648.252979][T11887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.252991][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.253006][T11887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.277313][T11882] hsr_slave_0: entered promiscuous mode
[  648.281560][T11882] hsr_slave_1: entered promiscuous mode
[  648.294134][T11882] debugfs: 'hsr0' already exists in 'hsr'
[  648.294161][T11882] Cannot create hsr debugfs directory
[  648.322920][T11887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.322936][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.322959][T11887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.404168][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.404185][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.404210][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.483845][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.483863][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.483891][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.728216][T11887] hsr_slave_0: entered promiscuous mode
[  648.734975][T11887] hsr_slave_1: entered promiscuous mode
[  648.735542][T11887] debugfs: 'hsr0' already exists in 'hsr'
[  648.735557][T11887] Cannot create hsr debugfs directory
[  648.786725][ T5740] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  648.812264][T11875] hsr_slave_0: entered promiscuous mode
[  648.813514][T11875] hsr_slave_1: entered promiscuous mode
[  648.814257][T11875] debugfs: 'hsr0' already exists in 'hsr'
[  648.814275][T11875] Cannot create hsr debugfs directory
[  648.944783][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  648.944814][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  648.944854][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  648.944876][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.159200][ T5740] usb 5-1: usb_control_msg returned -32
[  649.159245][ T5740] usbtmc 5-1:16.0: can't read capabilities
[  649.176301][ T5740] usb 5-1: USB disconnect, device number 48
[  650.680793][T12117] io-wq is not configured for unbound workers
[  650.844004][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1941'.
[  651.636476][T11636] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.692863][T11882] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  651.743443][T11882] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  652.045396][T11882] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  652.154518][T11882] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  652.164653][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8
[  652.168565][T11882] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  652.232926][T11882] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  652.250477][T11882] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  652.272977][T11882] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  652.333034][T12149] netlink: 'syz.4.1946': attribute type 1 has an invalid length.
[  652.765728][T11636] 8021q: adding VLAN 0 to HW filter on device team0
[  652.922909][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.923085][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.011831][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.011962][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.319477][ T3294] bridge_slave_1: left allmulticast mode
[  653.319509][ T3294] bridge_slave_1: left promiscuous mode
[  653.319701][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.413401][ T3294] bridge_slave_0: left allmulticast mode
[  653.413435][ T3294] bridge_slave_0: left promiscuous mode
[  653.413743][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.558946][ T3294] bridge_slave_1: left allmulticast mode
[  653.558987][ T3294] bridge_slave_1: left promiscuous mode
[  653.559253][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.629915][ T3294] bridge_slave_0: left allmulticast mode
[  653.629942][ T3294] bridge_slave_0: left promiscuous mode
[  653.652355][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.149303][   T31] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  654.298909][   T31] usb 5-1: Using ep0 maxpacket: 16
[  654.303463][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.303496][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  654.303538][   T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  654.303561][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.316399][   T31] usb 5-1: config 0 descriptor??
[  655.034960][   T31] usbhid 5-1:0.0: can't add hid device: -71
[  655.035063][   T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  655.040402][   T31] usb 5-1: USB disconnect, device number 49
[  655.159944][ T3294] bond1 (unregistering): (slave bridge3): Releasing active interface
[  655.279272][ T3294] bond2 (unregistering): (slave bridge4): Releasing active interface
[  655.409315][ T3294] bond3 (unregistering): (slave bridge5): Releasing active interface
[  655.529247][ T3294] bond4 (unregistering): (slave bridge6): Releasing active interface
[  655.669289][ T3294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.749552][ T3294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.810678][ T3294] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  655.851022][ T3294] bond0 (unregistering): Released all slaves
[  655.857406][ T3294] bond1 (unregistering): Released all slaves
[  655.885224][ T3294] bond2 (unregistering): Released all slaves
[  655.905095][ T3294] bond3 (unregistering): Released all slaves
[  655.924686][ T3294] bond4 (unregistering): Released all slaves
[  655.944810][ T3294] bond5 (unregistering): Released all slaves
[  656.419558][ T3294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  656.500030][ T3294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.521438][ T3294] bond0 (unregistering): Released all slaves
[  658.401206][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[  658.560450][T11882] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.115674][T11882] 8021q: adding VLAN 0 to HW filter on device team0
[  659.268883][ T3294] hsr_slave_0: left promiscuous mode
[  659.308807][ T3294] hsr_slave_1: left promiscuous mode
[  659.310496][ T3294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  659.310513][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.359425][ T3294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  659.359451][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.538836][ T3294] hsr_slave_0: left promiscuous mode
[  659.580062][ T3294] hsr_slave_1: left promiscuous mode
[  659.581141][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.629429][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.695548][ T3294] veth1_macvtap: left promiscuous mode
[  659.695683][ T3294] veth0_macvtap: left promiscuous mode
[  659.695841][ T3294] veth1_vlan: left promiscuous mode
[  659.695962][ T3294] veth0_vlan: left promiscuous mode
[  660.599232][ T3294] team0 (unregistering): Port device team_slave_1 removed
[  660.639774][ T3294] team0 (unregistering): Port device team_slave_0 removed
[  661.063391][ T3294] team0 (unregistering): Port device team_slave_1 removed
[  661.099564][ T3294] team0 (unregistering): Port device team_slave_0 removed
[  661.289436][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.289672][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.402245][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.404801][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.178789][ T6853] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  662.340576][ T6853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  662.341308][ T6853] usb 5-1: not running at top speed; connect to a high speed hub
[  662.342782][ T6853] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  662.359767][ T6853] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40
[  662.359796][ T6853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.359816][ T6853] usb 5-1: Manufacturer: 䖩瓾챏偿쑝뵝䀀얆嘈㢾숥텂黉⇲Ლ괰뚄쳳ꖟꅆᄈё拮씕놸傇幑엹⛃㋝ꗲ련獉䖒꣮䆃ɫஓǏ꽳怐䃨뤉窷摎ʧἂ͘䬊
[  662.359839][ T6853] usb 5-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ
[  662.658029][ T6853] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  662.673918][ T6853] usb 5-1: USB disconnect, device number 50
[  662.865550][T11636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  663.176975][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[  663.184469][T11887] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  663.322262][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  663.362004][T11887] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  663.495676][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  663.525533][T11887] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  663.638074][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  663.832809][T11887] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  663.909009][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  664.347324][T11882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.504831][T11875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  664.618127][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  664.683265][T11875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  664.733021][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  664.852167][T11875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  664.976264][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  664.998041][T11636] veth0_vlan: entered promiscuous mode
[  665.000673][T11875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  665.066928][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  665.326680][T11636] veth1_vlan: entered promiscuous mode
[  665.440167][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[  665.521824][T11887] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.589440][T11636] veth0_macvtap: entered promiscuous mode
[  665.613734][T11636] veth1_macvtap: entered promiscuous mode
[  665.693040][T11887] 8021q: adding VLAN 0 to HW filter on device team0
[  665.726003][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.726133][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.752812][T11882] veth0_vlan: entered promiscuous mode
[  665.758313][T11636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.774013][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.774105][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  665.794228][T11636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.897618][ T7288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.906604][ T7288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.914719][ T7288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.915349][T11882] veth1_vlan: entered promiscuous mode
[  665.930689][ T7288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.043099][T12311] netlink: 'syz.4.1969': attribute type 1 has an invalid length.
[  666.060233][T11875] 8021q: adding VLAN 0 to HW filter on device bond0
[  666.356256][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  666.400381][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  666.408280][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  666.416049][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  666.417228][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  666.734256][T11875] 8021q: adding VLAN 0 to HW filter on device team0
[  666.864544][T11882] veth0_macvtap: entered promiscuous mode
[  666.943876][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.944047][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.958745][   T31] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  666.985521][T11882] veth1_macvtap: entered promiscuous mode
[  667.028955][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.029143][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.107281][T11882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.128750][   T31] usb 5-1: Using ep0 maxpacket: 16
[  667.132984][   T31] usb 5-1: config 0 has no interfaces?
[  667.160808][   T31] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  667.160839][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.160859][   T31] usb 5-1: Product: syz
[  667.160873][   T31] usb 5-1: Manufacturer: syz
[  667.160888][   T31] usb 5-1: SerialNumber: syz
[  667.207661][   T31] usb 5-1: config 0 descriptor??
[  667.220221][T11882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.315771][ T5822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.342960][ T5822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.390044][ T5822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.416932][   T31] usb 5-1: USB disconnect, device number 51
[  667.703025][ T5822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  668.477562][ T5822] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.619164][ T4913] Bluetooth: hci0: command tx timeout
[  669.683889][ T5822] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.762781][  T820] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  669.763326][ T3294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.763343][ T3294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.802411][T11887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.911563][  T820] usb 5-1: Using ep0 maxpacket: 16
[  669.919270][  T820] usb 5-1: config 0 has no interfaces?
[  669.926359][  T820] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  669.926386][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.926406][  T820] usb 5-1: Product: syz
[  669.926419][  T820] usb 5-1: Manufacturer: syz
[  669.926432][  T820] usb 5-1: SerialNumber: syz
[  669.982003][  T820] usb 5-1: config 0 descriptor??
[  670.208196][  T820] usb 5-1: USB disconnect, device number 52
[  670.252817][ T5822] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.586763][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.586782][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.698797][ T4913] Bluetooth: hci0: command tx timeout
[  671.167475][ T5822] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.410448][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.788821][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  671.800860][T11887] veth0_vlan: entered promiscuous mode
[  671.939195][    T9] usb 7-1: Using ep0 maxpacket: 32
[  671.945292][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.945325][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  671.945347][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  672.000786][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  672.000819][    T9] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  672.000847][    T9] usb 7-1: Product: syz
[  672.000866][    T9] usb 7-1: Manufacturer: syz
[  672.000880][    T9] usb 7-1: SerialNumber: syz
[  672.093898][    T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input36
[  672.248079][T11887] veth1_vlan: entered promiscuous mode
[  672.258941][T11875] veth0_vlan: entered promiscuous mode
[  672.429698][  T820] usb 7-1: USB disconnect, device number 2
[  672.597416][  T820] appletouch 7-1:1.0: input: appletouch disconnected
[  672.778786][ T4913] Bluetooth: hci0: command tx timeout
[  672.836268][T12314] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.836640][T12314] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.836880][T12314] bridge_slave_0: entered allmulticast mode
[  672.838833][ T5740] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  672.867944][T12314] bridge_slave_0: entered promiscuous mode
[  672.876693][T11875] veth1_vlan: entered promiscuous mode
[  672.893669][T12314] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.893811][T12314] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.894059][T12314] bridge_slave_1: entered allmulticast mode
[  672.897554][T12314] bridge_slave_1: entered promiscuous mode
[  672.995498][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  672.995520][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  672.995545][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  672.995557][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.192686][ T5822] bridge_slave_1: left allmulticast mode
[  673.192720][ T5822] bridge_slave_1: left promiscuous mode
[  673.193015][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.223960][ T5740] usb 5-1: usb_control_msg returned -32
[  673.223989][ T5740] usbtmc 5-1:16.0: can't read capabilities
[  673.313527][ T5822] bridge_slave_0: left allmulticast mode
[  673.313564][ T5822] bridge_slave_0: left promiscuous mode
[  673.313805][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.316394][ T5740] usb 5-1: USB disconnect, device number 53
[  674.579331][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  674.588862][   T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  674.649532][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  674.670768][ T5822] bond0 (unregistering): Released all slaves
[  674.717223][T12314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  674.738743][   T10] usb 5-1: Using ep0 maxpacket: 32
[  674.740796][   T10] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[  674.740823][   T10] usb 5-1: config 0 has no interface number 0
[  674.740867][   T10] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  674.740888][   T10] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  674.740914][   T10] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  674.740936][   T10] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  674.743444][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  674.743472][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.743492][   T10] usb 5-1: Product: syz
[  674.743506][   T10] usb 5-1: Manufacturer: syz
[  674.743520][   T10] usb 5-1: SerialNumber: syz
[  674.845871][   T10] usb 5-1: config 0 descriptor??
[  674.862409][ T4913] Bluetooth: hci0: command tx timeout
[  674.877603][   T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input37
[  674.979454][T12314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.202773][    T9] usb 5-1: USB disconnect, device number 54
[  675.458865][ T5822] hsr_slave_0: left promiscuous mode
[  675.505450][ T5822] hsr_slave_1: left promiscuous mode
[  675.537018][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.537038][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.559799][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.559818][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.620822][ T5822] veth1_macvtap: left promiscuous mode
[  675.620885][ T5822] veth0_macvtap: left promiscuous mode
[  675.621023][ T5822] veth1_vlan: left promiscuous mode
[  675.621118][ T5822] veth0_vlan: left promiscuous mode
[  675.708906][ T5620] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  675.860541][ T5620] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  675.860561][ T5620] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  675.860584][ T5620] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  675.860597][ T5620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.121954][ T5620] usb 7-1: usb_control_msg returned -71
[  676.122004][ T5620] usbtmc 7-1:16.0: can't read capabilities
[  676.153313][ T5620] usb 7-1: USB disconnect, device number 3
[  676.550016][ T5822] team0 (unregistering): Port device team_slave_1 removed
[  676.609458][ T5822] team0 (unregistering): Port device team_slave_0 removed
[  676.934712][T12314] team0: Port device team_slave_0 added
[  676.948803][  T820] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  676.978021][T12314] team0: Port device team_slave_1 added
[  677.051574][T12314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.051586][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.051600][T12314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.052433][T11887] veth0_macvtap: entered promiscuous mode
[  677.057617][T12314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.057628][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.057655][T12314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.164676][  T820] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  677.164724][  T820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.164749][  T820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.164770][  T820] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  677.167590][  T820] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  677.167618][  T820] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  677.167638][  T820] usb 7-1: Manufacturer: syz
[  677.249429][  T820] usb 7-1: config 0 descriptor??
[  677.280561][T11875] veth0_macvtap: entered promiscuous mode
[  677.598828][T12314] hsr_slave_0: entered promiscuous mode
[  677.600047][T12314] hsr_slave_1: entered promiscuous mode
[  677.600873][T12314] debugfs: 'hsr0' already exists in 'hsr'
[  677.600894][T12314] Cannot create hsr debugfs directory
[  677.603743][T11887] veth1_macvtap: entered promiscuous mode
[  677.613311][T11875] veth1_macvtap: entered promiscuous mode
[  677.798143][T11887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.969366][  T820] usbhid 7-1:0.0: can't add hid device: -71
[  677.969484][  T820] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  677.972652][   T36] audit: type=1326 audit(1778957651.847:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12496 comm="syz.4.2010" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30c5fdce59 code=0x0
[  678.049572][  T820] usb 7-1: USB disconnect, device number 4
[  678.058044][T12502] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2011'.
[  678.137135][T11875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.224337][T11887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.226852][T11875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.458234][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.476162][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.486133][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.498606][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.555184][ T7288] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.646029][ T7288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.673810][ T7288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.751328][ T7288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.196024][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2017'.
[  679.360054][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  679.593593][T12532] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2019'.
[  680.905069][ T5805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.905088][ T5805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.229496][T12552] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2027'.
[  681.532724][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.532743][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.686990][T12559] vcan1: entered promiscuous mode
[  681.687014][T12559] vcan1: entered allmulticast mode
[  681.881232][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.881252][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.194904][ T5805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.194926][ T5805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  683.077672][T12591] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2035'.
[  683.590643][ T1579] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  683.832662][ T1579] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  685.599981][T12612] fido_id[12612]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  685.943689][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[  685.943757][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[  686.299308][ T1579] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  686.468716][ T1579] usb 5-1: Using ep0 maxpacket: 32
[  686.504760][ T1579] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[  686.504789][ T1579] usb 5-1: config 0 has no interface number 0
[  686.504831][ T1579] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  686.504852][ T1579] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  686.504873][ T1579] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  686.504885][ T1579] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  686.550554][ T1579] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  686.550584][ T1579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.550604][ T1579] usb 5-1: Product: syz
[  686.550617][ T1579] usb 5-1: Manufacturer: syz
[  686.550630][ T1579] usb 5-1: SerialNumber: syz
[  686.623750][ T1579] usb 5-1: config 0 descriptor??
[  686.643287][ T1579] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input38
[  687.067166][ T5735] usb 5-1: USB disconnect, device number 55
[  687.569710][T12646] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2048'.
[  688.120955][T12653] syzkaller0: tun_chr_ioctl cmd 1074025681
[  688.208728][ T5735] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  688.345041][T12314] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  688.361918][ T5735] usb 7-1: descriptor type invalid, skip
[  688.361938][ T5735] usb 7-1: descriptor type invalid, skip
[  688.363324][ T5735] usb 7-1: not running at top speed; connect to a high speed hub
[  688.365881][ T5735] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  688.410966][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  688.412587][T12314] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  688.414517][ T5735] usb 7-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40
[  688.414544][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.414563][ T5735] usb 7-1: Manufacturer: 䖩瓾챏偿쑝뵝䀀얆嘈㢾숥텂黉⇲Ლ괰뚄쳳ꖟꅆᄈё拮씕놸傇幑엹⛃㋝ꗲ련獉䖒꣮䆃ɫஓǏ꽳怐䃨뤉窷摎ʧἂ͘䬊
[  688.414602][ T5735] usb 7-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ
[  688.643824][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  688.683307][T12314] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  688.794613][ T5735] usbhid 7-1:1.0: couldn't find an input interrupt endpoint
[  688.811360][ T5735] usb 7-1: USB disconnect, device number 5
[  688.919716][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.936386][T12314] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  689.098230][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  689.358985][ T5735] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  689.560587][ T5735] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.560614][ T5735] usb 8-1: config 0 has no interfaces?
[  689.560643][ T5735] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  689.560666][ T5735] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.651543][ T5735] usb 8-1: config 0 descriptor??
[  689.728531][T12703] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2060'.
[  690.189056][T12314] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.233579][T12314] 8021q: adding VLAN 0 to HW filter on device team0
[  690.282006][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.282082][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.354308][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.354452][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.510525][ T6853] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  690.670373][ T6853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  690.670396][ T6853] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.670420][ T6853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  690.670432][ T6853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.916672][ T6853] usb 5-1: usb_control_msg returned -32
[  690.916723][ T6853] usbtmc 5-1:16.0: can't read capabilities
[  691.389285][ T5734] usb 5-1: USB disconnect, device number 56
[  692.100199][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2067'.
[  692.158114][   T31] usb 8-1: USB disconnect, device number 2
[  693.482825][T12314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.670211][ T5740] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  694.735993][T12314] veth0_vlan: entered promiscuous mode
[  694.785292][T12314] veth1_vlan: entered promiscuous mode
[  694.831266][ T5740] usb 1-1: descriptor type invalid, skip
[  694.831287][ T5740] usb 1-1: descriptor type invalid, skip
[  694.832879][ T5740] usb 1-1: not running at top speed; connect to a high speed hub
[  694.843193][ T5740] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  694.894820][ T5740] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40
[  694.894851][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.894870][ T5740] usb 1-1: Manufacturer: 䖩瓾챏偿쑝뵝䀀얆嘈㢾숥텂黉⇲Ლ괰뚄쳳ꖟꅆᄈё拮씕놸傇幑엹⛃㋝ꗲ련獉䖒꣮䆃ɫஓǏ꽳怐䃨뤉窷摎ʧἂ͘䬊
[  694.894904][ T5740] usb 1-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ
[  695.151406][T12314] veth0_macvtap: entered promiscuous mode
[  695.208212][ T5740] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  695.242755][ T5740] usb 1-1: USB disconnect, device number 3
[  695.263518][T12314] veth1_macvtap: entered promiscuous mode
[  695.373366][T12314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.574490][T12314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.658418][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.664454][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.673043][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.709478][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.833954][T12796] syz.6.2079 (12796): drop_caches: 2
[  696.489466][ T5740] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  696.658715][ T5740] usb 7-1: Using ep0 maxpacket: 16
[  696.682407][ T5740] usb 7-1: config 0 has no interfaces?
[  696.696220][ T5740] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  696.696251][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.696270][ T5740] usb 7-1: Product: syz
[  696.696289][ T5740] usb 7-1: Manufacturer: syz
[  696.696317][ T5740] usb 7-1: SerialNumber: syz
[  696.738145][ T5740] usb 7-1: config 0 descriptor??
[  697.006945][  T820] usb 7-1: USB disconnect, device number 6
[  697.054971][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.054993][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.399707][ T5734] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  697.488724][ T1579] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  697.548671][ T5734] usb 8-1: Using ep0 maxpacket: 16
[  697.551146][ T5734] usb 8-1: config 0 has no interfaces?
[  697.581074][ T5734] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  697.581103][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.581122][ T5734] usb 8-1: Product: syz
[  697.581136][ T5734] usb 8-1: Manufacturer: syz
[  697.581150][ T5734] usb 8-1: SerialNumber: syz
[  697.625044][ T5734] usb 8-1: config 0 descriptor??
[  697.660827][ T1579] usb 1-1: Using ep0 maxpacket: 32
[  697.665158][ T1579] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  697.665186][ T1579] usb 1-1: config 0 has no interface number 0
[  697.665229][ T1579] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  697.665251][ T1579] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  697.665277][ T1579] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  697.665300][ T1579] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  697.736081][ T1579] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  697.736114][ T1579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.736133][ T1579] usb 1-1: Product: syz
[  697.736147][ T1579] usb 1-1: Manufacturer: syz
[  697.736162][ T1579] usb 1-1: SerialNumber: syz
[  697.789462][ T1579] usb 1-1: config 0 descriptor??
[  697.856120][ T1579] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input39
[  697.987164][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.987184][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.178751][ T5740] usb 8-1: USB disconnect, device number 3
[  698.478874][ T5740] usb 1-1: USB disconnect, device number 4
[  699.258464][T12872] syz_tun: entered allmulticast mode
[  700.249756][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  700.307278][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  700.335722][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  700.378017][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  700.427600][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  700.723149][T12893] binder_alloc: 12891: binder_alloc_buf, no vma
[  700.737014][T12893] binder: 12891:12893 ioctl c0306201 200000001440 returned -11
[  701.209119][T12584] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  701.368805][T12584] usb 7-1: Using ep0 maxpacket: 16
[  701.371167][T12584] usb 7-1: config 0 has no interfaces?
[  701.373136][T12584] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  701.373155][T12584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.373166][T12584] usb 7-1: Product: syz
[  701.373174][T12584] usb 7-1: Manufacturer: syz
[  701.373181][T12584] usb 7-1: SerialNumber: syz
[  701.376292][T12584] usb 7-1: config 0 descriptor??
[  701.538848][ T5734] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  701.700105][ T5734] usb 1-1: Using ep0 maxpacket: 32
[  701.720904][ T5734] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  701.720924][ T5734] usb 1-1: config 0 has no interface number 0
[  701.720950][ T5734] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  701.720962][ T5734] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  701.720976][ T5734] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  701.720988][ T5734] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  701.726692][ T5734] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  701.726710][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.726721][ T5734] usb 1-1: Product: syz
[  701.726729][ T5734] usb 1-1: Manufacturer: syz
[  701.726737][ T5734] usb 1-1: SerialNumber: syz
[  701.760475][ T5734] usb 1-1: config 0 descriptor??
[  701.929913][ T5734] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input40
[  702.293746][ T5734] usb 1-1: USB disconnect, device number 5
[  702.543399][ T5606] Bluetooth: hci2: command tx timeout
[  703.371640][   T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.764309][ T5740] usb 7-1: USB disconnect, device number 7
[  704.345779][T12944] syz_tun: entered allmulticast mode
[  704.618722][ T5606] Bluetooth: hci2: command tx timeout
[  704.836751][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2118'.
[  705.108233][   T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.110446][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  705.153136][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  705.489131][T12972] vcan1: entered promiscuous mode
[  705.489154][T12972] vcan1: entered allmulticast mode
[  706.333051][   T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.698727][ T5606] Bluetooth: hci2: command tx timeout
[  706.966035][   T36] audit: type=1326 audit(1778957680.837:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.966108][   T36] audit: type=1326 audit(1778957680.837:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.970546][   T36] audit: type=1326 audit(1778957680.837:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.970594][   T36] audit: type=1326 audit(1778957680.847:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.970848][   T36] audit: type=1326 audit(1778957680.847:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.971234][   T36] audit: type=1326 audit(1778957680.847:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.971757][   T36] audit: type=1326 audit(1778957680.847:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.985920][   T36] audit: type=1326 audit(1778957680.847:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.985982][   T36] audit: type=1326 audit(1778957680.857:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.986023][   T36] audit: type=1326 audit(1778957680.857:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13004 comm="syz.6.2131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31940ace59 code=0x7ffc0000
[  706.993425][T13005] usb usb7: usbfs: process 13005 (syz.6.2131) did not claim interface 0 before use
[  707.346973][   T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.618842][ T5740] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  707.685278][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2134'.
[  707.768706][ T5740] usb 7-1: Using ep0 maxpacket: 32
[  707.770254][ T5740] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  707.770269][ T5740] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  707.785723][ T5740] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  707.785761][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  707.785781][ T5740] usb 7-1: Product: syz
[  707.785794][ T5740] usb 7-1: Manufacturer: syz
[  707.785808][ T5740] usb 7-1: SerialNumber: syz
[  708.084328][ T5734] usb 7-1: USB disconnect, device number 8
[  708.778711][ T5606] Bluetooth: hci2: command tx timeout
[  709.437840][T12884] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.438169][T12884] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.438421][T12884] bridge_slave_0: entered allmulticast mode
[  709.455479][T12884] bridge_slave_0: entered promiscuous mode
[  710.033177][T12884] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.033308][T12884] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.033550][T12884] bridge_slave_1: entered allmulticast mode
[  710.056005][T12884] bridge_slave_1: entered promiscuous mode
[  711.145957][T12884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.218193][T12884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.562693][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2153'.
[  712.415903][T13107] netlink: 179640 bytes leftover after parsing attributes in process `syz.0.2149'.
[  714.046451][T13129] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  714.165109][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2158'.
[  714.262593][   T67] bridge_slave_1: left allmulticast mode
[  714.262628][   T67] bridge_slave_1: left promiscuous mode
[  714.262924][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.390721][   T67] bridge_slave_0: left allmulticast mode
[  714.390756][   T67] bridge_slave_0: left promiscuous mode
[  714.391010][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.109358][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.190420][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.210766][   T67] bond0 (unregistering): Released all slaves
[  716.217084][   T67] bond1 (unregistering): Released all slaves
[  716.468761][T13125] syzkaller0: tun_chr_ioctl cmd 1074025681
[  717.390392][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  717.393477][T12884] team0: Port device team_slave_0 added
[  717.488880][T12584] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  717.641383][T12584] usb 7-1: Using ep0 maxpacket: 32
[  717.643687][T12584] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  717.643721][T12584] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  717.659523][T12584] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  717.659553][T12584] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  717.659573][T12584] usb 7-1: Product: syz
[  717.659587][T12584] usb 7-1: Manufacturer: syz
[  717.659601][T12584] usb 7-1: SerialNumber: syz
[  717.710819][T12584] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input41
[  717.757652][T12884] team0: Port device team_slave_1 added
[  718.001556][T12584] usb 7-1: USB disconnect, device number 9
[  718.075287][T12884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  718.075305][T12884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  718.075341][T12884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.140211][T13182] sctp: [Deprecated]: syz.0.2165 (pid 13182) Use of int in max_burst socket option deprecated.
[  718.140211][T13182] Use struct sctp_assoc_value instead
[  718.277644][T12884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.277660][T12884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  718.277686][T12884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  718.474260][T12584] appletouch 7-1:1.0: input: appletouch disconnected
[  718.986040][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'.
[  719.338814][T12585] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  719.488795][T12585] usb 8-1: Using ep0 maxpacket: 16
[  719.491318][T12585] usb 8-1: config 0 has no interfaces?
[  719.495296][T12585] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  719.495326][T12585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.495345][T12585] usb 8-1: Product: syz
[  719.495359][T12585] usb 8-1: Manufacturer: syz
[  719.495375][T12585] usb 8-1: SerialNumber: syz
[  719.523791][T12585] usb 8-1: config 0 descriptor??
[  719.556199][T12884] hsr_slave_0: entered promiscuous mode
[  719.596759][T12884] hsr_slave_1: entered promiscuous mode
[  719.615551][T12884] debugfs: 'hsr0' already exists in 'hsr'
[  719.615569][T12884] Cannot create hsr debugfs directory
[  719.826931][T12585] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  720.286572][T12585] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  720.398624][   T31] usb 8-1: USB disconnect, device number 4
[  720.653191][T13222] fido_id[13222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  721.643865][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2178'.
[  721.785588][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2178'.
[  722.922259][   T67] hsr_slave_0: left promiscuous mode
[  722.968830][   T67] hsr_slave_1: left promiscuous mode
[  722.969460][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.969476][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  723.031911][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  723.031931][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.174299][   T67] veth1_macvtap: left promiscuous mode
[  723.174361][   T67] veth0_macvtap: left promiscuous mode
[  723.174496][   T67] veth1_vlan: left promiscuous mode
[  723.183659][   T67] veth0_vlan: left promiscuous mode
[  725.187576][T13270] input: syz0 as /devices/virtual/input/input42
[  725.661291][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2196'.
[  726.526922][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  726.526968][   T36] audit: type=1326 audit(1778957700.337:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  726.527259][   T36] audit: type=1326 audit(1778957700.347:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  726.527506][   T36] audit: type=1326 audit(1778957700.347:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  726.527735][   T36] audit: type=1326 audit(1778957700.347:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  726.527971][   T36] audit: type=1326 audit(1778957700.347:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  726.528206][   T36] audit: type=1326 audit(1778957700.357:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa83dc2d68e code=0x7ffc0000
[  726.528481][   T36] audit: type=1326 audit(1778957700.357:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  727.264194][   T36] audit: type=1326 audit(1778957700.357:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  727.264247][   T36] audit: type=1326 audit(1778957700.357:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13284 comm="syz.7.2198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa83dc6ce59 code=0x7ffc0000
[  727.389496][  T820] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  727.423976][  T820] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  727.741120][   T67] team0 (unregistering): Port device team_slave_1 removed
[  727.898290][T13294] fido_id[13294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  727.921368][   T67] team0 (unregistering): Port device team_slave_0 removed
[  729.140687][T13250] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  731.699897][T13349] pim6reg: entered allmulticast mode
[  731.711894][T13349] team0: entered allmulticast mode
[  731.711909][T13349] team_slave_0: entered allmulticast mode
[  731.711925][T13349] team_slave_1: entered allmulticast mode
[  731.712372][T13349] team0: left allmulticast mode
[  731.712383][T13349] team_slave_0: left allmulticast mode
[  731.712397][T13349] team_slave_1: left allmulticast mode
[  731.712520][T13349] pim6reg: left allmulticast mode
[  731.941044][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[  732.151484][T13361] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  732.730930][  T820] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  732.962516][  T820] usb 7-1: Using ep0 maxpacket: 32
[  732.967785][  T820] usb 7-1: config 0 has an invalid interface number: 119 but max is 0
[  732.967804][  T820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  732.967814][  T820] usb 7-1: config 0 has no interface number 0
[  732.967837][  T820] usb 7-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  732.980648][  T820] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  732.980666][  T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.980677][  T820] usb 7-1: Product: syz
[  732.980685][  T820] usb 7-1: Manufacturer: syz
[  732.980692][  T820] usb 7-1: SerialNumber: syz
[  733.208974][  T820] usb 7-1: config 0 descriptor??
[  733.563165][  T820] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input43
[  734.488105][  T820] input: failed to attach handler mousedev to device input43, error: -2
[  734.526639][  T820] usb 7-1: USB disconnect, device number 10
[  735.436598][T12585] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  735.591323][T12585] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  735.591355][T12585] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  735.591376][T12585] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  735.591417][T12585] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  735.591439][T12585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.601699][T12585] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[  736.288331][T12584] usb 7-1: USB disconnect, device number 11
[  736.509672][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.509707][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.509791][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.609742][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.609771][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.609841][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.985897][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.985925][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  736.986012][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2229'.
[  737.348078][T13437] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  737.848847][T12584] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  737.895990][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2237'.
[  738.021106][T12584] usb 8-1: Using ep0 maxpacket: 8
[  738.022789][T12584] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  738.022809][T12584] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  738.022823][T12584] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  738.022836][T12584] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  738.022858][T12584] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  738.022870][T12584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.275646][T12584] usb 8-1: GET_CAPABILITIES returned 0
[  738.275694][T12584] usbtmc 8-1:16.0: can't read capabilities
[  738.519519][ T6853] usb 8-1: USB disconnect, device number 5
[  738.838787][T12584] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  739.005390][T12584] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  739.005420][T12584] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  739.005442][T12584] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  739.005481][T12584] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  739.005501][T12584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.091839][T12584] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[  739.621592][ T6853] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  739.707224][T12584] usb 7-1: USB disconnect, device number 12
[  739.779788][ T6853] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  739.779837][ T6853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  739.779870][ T6853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  739.779893][ T6853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  739.782518][ T6853] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  739.782549][ T6853] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  739.782570][ T6853] usb 8-1: Manufacturer: syz
[  739.818696][   T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  739.904571][ T6853] usb 8-1: config 0 descriptor??
[  740.002055][   T31] usb 6-1: Using ep0 maxpacket: 8
[  740.017409][   T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  740.017439][   T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  740.017540][   T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  740.017554][   T31] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  740.017579][   T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  740.017594][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.326484][   T31] usb 6-1: GET_CAPABILITIES returned 0
[  740.326598][   T31] usbtmc 6-1:16.0: can't read capabilities
[  740.948311][   T31] usb 6-1: USB disconnect, device number 2
[  741.118229][T13496] input: syz0 as /devices/virtual/input/input44
[  741.400491][T12884] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  741.572212][T12884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  741.633986][T12884] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  741.655189][ T1579] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  741.739550][T13488] netlink: 'syz.7.2243': attribute type 33 has an invalid length.
[  741.739574][T13488] __nla_validate_parse: 2 callbacks suppressed
[  741.739583][T13488] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2243'.
[  741.916473][ T1579] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  741.916504][ T1579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.916524][ T1579] usb 1-1: Product: syz
[  741.916538][ T1579] usb 1-1: Manufacturer: syz
[  741.916551][ T1579] usb 1-1: SerialNumber: syz
[  741.986252][ T1579] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  742.139537][T12884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  742.158925][T13488] `: renamed from team0 (while UP)
[  742.510805][T12884] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  742.685032][T12884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  742.697928][T12884] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  742.933525][T12884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  743.150124][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2254'.
[  743.262176][T12584] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  743.273514][ T6853] usbhid 8-1:0.0: can't add hid device: -71
[  743.273650][ T6853] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  743.307299][ T6853] usb 8-1: USB disconnect, device number 6
[  743.543528][ T6853] usb 1-1: USB disconnect, device number 6
[  743.629916][T12584] usb 1-1: ath9k_htc: Unable to allocate URBs
[  743.631883][ T6853] usb 1-1: ath9k_htc: USB layer deinitialized
[  743.819722][ T1579] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  743.971252][ T1579] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  743.971285][ T1579] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  743.971329][ T1579] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  743.971353][ T1579] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.027187][T12884] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.240750][ T1579] usb 6-1: usb_control_msg returned -32
[  744.240794][ T1579] usbtmc 6-1:16.0: can't read capabilities
[  744.273651][T12884] 8021q: adding VLAN 0 to HW filter on device team0
[  744.338648][T13091] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.338800][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  744.359067][T13087] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.359190][T13087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  744.738909][T12584] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  744.826214][ T5740] usb 6-1: USB disconnect, device number 3
[  744.904334][T12584] usb 8-1: Using ep0 maxpacket: 8
[  744.907685][T12584] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  744.907716][T12584] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  744.907740][T12584] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  744.907763][T12584] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  744.907804][T12584] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  744.907828][T12584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.168894][T12584] usb 8-1: GET_CAPABILITIES returned 0
[  745.168943][T12584] usbtmc 8-1:16.0: can't read capabilities
[  745.391992][T12584] usb 8-1: USB disconnect, device number 7
[  746.072723][T12884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.028855][ T6853] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  747.188781][ T6853] usb 8-1: Using ep0 maxpacket: 8
[  747.191110][ T6853] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  747.191138][ T6853] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  747.191160][ T6853] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  747.191183][ T6853] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  747.191224][ T6853] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  747.191246][ T6853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.351396][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[  747.351464][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[  747.506628][ T6853] usb 8-1: GET_CAPABILITIES returned 0
[  747.506680][ T6853] usbtmc 8-1:16.0: can't read capabilities
[  747.709787][T12584] usb 8-1: USB disconnect, device number 8
[  748.134596][T12884] veth0_vlan: entered promiscuous mode
[  748.210495][T12884] veth1_vlan: entered promiscuous mode
[  748.302999][T12884] veth0_macvtap: entered promiscuous mode
[  748.415129][T12884] veth1_macvtap: entered promiscuous mode
[  748.477931][T12884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  748.546534][T12884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.713613][   T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.714551][   T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.720610][   T31] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  748.723114][   T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.723158][   T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.941155][   T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  748.941188][   T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  748.941230][   T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  748.941252][   T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.256634][   T31] usb 8-1: usb_control_msg returned -32
[  749.256683][   T31] usbtmc 8-1:16.0: can't read capabilities
[  749.862728][T12584] usb 8-1: USB disconnect, device number 9
[  750.127561][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.127582][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.146848][ T5740] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  750.281276][ T3276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.281299][ T3276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.318683][ T5740] usb 6-1: Using ep0 maxpacket: 8
[  750.339624][ T5740] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  750.339656][ T5740] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  750.339681][ T5740] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  750.339704][ T5740] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  750.339750][ T5740] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  750.339774][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.700576][ T5740] usb 6-1: GET_CAPABILITIES returned 0
[  750.700620][ T5740] usbtmc 6-1:16.0: can't read capabilities
[  750.759296][ T5607] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  750.914283][ T5607] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  750.914331][ T5607] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  750.914355][ T5607] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  750.914376][ T5607] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  750.915403][ T5607] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  750.915429][ T5607] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  750.915447][ T5607] usb 8-1: Manufacturer: syz
[  750.978711][ T5740] usb 6-1: USB disconnect, device number 4
[  751.025560][ T5607] usb 8-1: config 0 descriptor??
[  751.038699][ T5734] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  751.195958][ T5734] usb 5-1: Using ep0 maxpacket: 32
[  751.204295][ T5734] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[  751.204323][ T5734] usb 5-1: config 0 has no interface number 0
[  751.204365][ T5734] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  751.204386][ T5734] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  751.204412][ T5734] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  751.204433][ T5734] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  751.211587][ T5734] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  751.211616][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.211635][ T5734] usb 5-1: Product: syz
[  751.211649][ T5734] usb 5-1: Manufacturer: syz
[  751.211663][ T5734] usb 5-1: SerialNumber: syz
[  751.240204][ T5734] usb 5-1: config 0 descriptor??
[  751.326305][ T5734] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input45
[  751.652629][ T1579] usb 5-1: USB disconnect, device number 57
[  751.719309][ T5740] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  751.872325][ T5740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  751.872358][ T5740] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  751.872455][ T5740] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  751.872478][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.133853][ T5740] usb 7-1: usb_control_msg returned -32
[  752.133966][ T5740] usbtmc 7-1:16.0: can't read capabilities
[  752.434635][T13624] netlink: 'syz.7.2275': attribute type 33 has an invalid length.
[  752.434660][T13624] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2275'.
[  752.665372][T12584] usb 7-1: USB disconnect, device number 13
[  753.948989][ T5607] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  754.058856][ T5734] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  754.238146][T13649] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  754.274648][ T5607] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  754.301266][ T5734] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  754.301307][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  754.301331][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  754.301351][ T5734] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  754.302369][ T5734] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  754.302395][ T5734] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  754.302412][ T5734] usb 7-1: Manufacturer: syz
[  754.343344][ T5734] usb 7-1: config 0 descriptor??
[  754.636442][T13632] Bluetooth: hci6: command 0x0406 tx timeout
[  754.636483][T13632] Bluetooth: hci5: command 0x0406 tx timeout
[  755.286080][ T1579] usb 8-1: USB disconnect, device number 10
[  755.433863][ T5734] usbhid 7-1:0.0: can't add hid device: -71
[  755.433966][ T5734] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  755.480642][ T5734] usb 7-1: USB disconnect, device number 14
[  756.565389][T13660] bond1: entered promiscuous mode
[  756.676856][T13662] vcan1: entered promiscuous mode
[  756.676883][T13662] vcan1: entered allmulticast mode
[  757.178745][   T50] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  757.331438][   T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.331459][   T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.331483][   T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  757.331495][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.438974][ T5740] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  757.588688][ T5740] usb 8-1: Using ep0 maxpacket: 16
[  757.606323][ T5740] usb 8-1: config 0 has no interfaces?
[  757.616950][ T5740] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  757.616968][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.616979][ T5740] usb 8-1: Product: syz
[  757.616987][ T5740] usb 8-1: Manufacturer: syz
[  757.616994][ T5740] usb 8-1: SerialNumber: syz
[  757.635680][   T50] usb 7-1: usb_control_msg returned -32
[  757.635710][   T50] usbtmc 7-1:16.0: can't read capabilities
[  757.679549][ T5740] usb 8-1: config 0 descriptor??
[  757.728729][ T5607] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  757.878688][ T5607] usb 5-1: Using ep0 maxpacket: 32
[  757.880666][ T5607] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[  757.880692][ T5607] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.880709][ T5607] usb 5-1: config 0 has no interface number 0
[  757.880734][ T5607] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  757.884285][ T5607] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  757.884315][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.884333][ T5607] usb 5-1: Product: syz
[  757.884345][ T5607] usb 5-1: Manufacturer: syz
[  757.884353][ T5607] usb 5-1: SerialNumber: syz
[  757.970257][ T5607] usb 5-1: config 0 descriptor??
[  757.992826][ T5607] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input46
[  758.066152][ T5734] usb 8-1: USB disconnect, device number 11
[  758.172793][  T820] usb 7-1: USB disconnect, device number 15
[  758.382045][ T5734] usb 5-1: USB disconnect, device number 58
[  759.658682][ T5606] Bluetooth: hci7: command 0x0406 tx timeout
[  761.423911][   T36] audit: type=1326 audit(1778957735.297:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.425751][   T36] audit: type=1326 audit(1778957735.297:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.435139][   T36] audit: type=1326 audit(1778957735.307:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.435404][   T36] audit: type=1326 audit(1778957735.307:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.438486][   T36] audit: type=1326 audit(1778957735.307:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.448713][   T36] audit: type=1326 audit(1778957735.317:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.450219][   T36] audit: type=1326 audit(1778957735.327:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.451064][   T36] audit: type=1326 audit(1778957735.327:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.451393][   T36] audit: type=1326 audit(1778957735.327:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  761.453259][   T36] audit: type=1326 audit(1778957735.327:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13755 comm="syz.0.2323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d8fce59 code=0x7ffc0000
[  762.462240][T13773] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2330'.
[  762.687084][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  766.556557][T13793] kernel read not supported for file /ba
adv_slave_1 (pid: 13793 comm: syz.5.2337)
[  766.621775][T13792] 9p: Bad value for 'wfdno'
[  766.690287][   T36] audit: type=1800 audit(1778957740.427:194): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2337" name=6261016164765F736C6176655F31 dev="mqueue" ino=52379 res=0 errno=0
[  766.897451][T13801] Illegal XDP return value 278 on prog  (id 47) dev N/A, expect packet loss!
[  767.968657][T13821] netlink: 'syz.4.2347': attribute type 3 has an invalid length.
[  767.968686][T13821] netlink: 'syz.4.2347': attribute type 3 has an invalid length.
[  768.603391][   T36] audit: type=1800 audit(1778957742.477:195): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2345" name="file0" dev="fuse" ino=0 res=0 errno=0
[  769.469828][T13849] capability: warning: `syz.7.2354' uses 32-bit capabilities (legacy support in use)
[  772.446777][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'.
[  772.795742][T13897] input: syz0 as /devices/virtual/input/input47
[  773.377377][ T5740] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  773.538683][ T5740] usb 6-1: Using ep0 maxpacket: 8
[  773.542551][ T5740] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  773.542580][ T5740] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  773.542604][ T5740] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  773.542628][ T5740] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  773.542669][ T5740] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  773.542691][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.849421][ T5740] usb 6-1: GET_CAPABILITIES returned 0
[  773.849467][ T5740] usbtmc 6-1:16.0: can't read capabilities
[  774.068424][ T1579] usb 6-1: USB disconnect, device number 5
[  774.350889][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'.
[  774.351041][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  774.460499][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.680381][T13935] input: syz0 as /devices/virtual/input/input48
[  774.971508][T13930] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  775.203623][ T5740] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  775.348756][ T5740] usb 6-1: Using ep0 maxpacket: 32
[  775.350871][ T5740] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[  775.350896][ T5740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  775.351013][ T5740] usb 6-1: config 0 has no interface number 0
[  775.351057][ T5740] usb 6-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  775.354872][ T5740] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  775.354899][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.354917][ T5740] usb 6-1: Product: syz
[  775.354931][ T5740] usb 6-1: Manufacturer: syz
[  775.354944][ T5740] usb 6-1: SerialNumber: syz
[  775.449912][ T5740] usb 6-1: config 0 descriptor??
[  775.465997][ T5740] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input49
[  775.852617][ T5740] usb 6-1: USB disconnect, device number 6
[  775.942110][T11876] udevd[11876]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  775.942273][T11876] udevd[11876]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  776.099050][T12584] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  776.272112][T12584] usb 8-1: config 0 has no interfaces?
[  776.272136][T12584] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  776.272149][T12584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.286587][T12584] usb 8-1: config 0 descriptor??
[  776.505916][T13963] binder_alloc: 13962: binder_alloc_buf, no vma
[  776.509898][T13963] binder: 13962:13963 ioctl c0306201 200000001440 returned -11
[  776.959463][ T5740] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  777.230553][ T5740] usb 1-1: Using ep0 maxpacket: 8
[  777.234369][ T5740] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  777.234399][ T5740] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  777.234424][ T5740] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  777.234447][ T5740] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  777.234487][ T5740] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  777.234509][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.594975][ T5740] usb 1-1: usb_control_msg returned -71
[  777.595025][ T5740] usbtmc 1-1:16.0: can't read capabilities
[  777.638904][ T5740] usb 1-1: USB disconnect, device number 7
[  778.910160][ T5740] usb 8-1: USB disconnect, device number 12
[  780.297890][T14003] syzkaller0: tun_chr_ioctl cmd 1074025681
[  780.311007][T14003] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  781.154720][T14009] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  781.250212][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2412'.
[  782.814852][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'.
[  784.405693][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2426'.
[  785.261490][T14070] input: syz0 as /devices/virtual/input/input50
[  785.379282][T14075] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  785.582159][ T5735] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  785.737319][ T5735] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  785.737350][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.737370][ T5735] usb 7-1: Product: syz
[  785.737384][ T5735] usb 7-1: Manufacturer: syz
[  785.737398][ T5735] usb 7-1: SerialNumber: syz
[  785.795746][ T5735] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  785.900529][ T5734] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  786.209535][   T31] usb 7-1: USB disconnect, device number 16
[  786.503781][T14096] binder_alloc: 14095: binder_alloc_buf, no vma
[  786.504126][T14096] binder: 14095:14096 ioctl c0306201 200000001440 returned -11
[  787.183396][ T5734] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  787.184189][ T5734] ath9k_htc: Failed to initialize the device
[  787.236572][   T31] usb 7-1: ath9k_htc: USB layer deinitialized
[  787.337698][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'.
[  787.363593][T14116] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  789.515153][T14142] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  790.777545][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2460'.
[  791.486938][T14174] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2466'.
[  792.900843][T14205] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  793.029919][T14211] input: syz0 as /devices/virtual/input/input52
[  793.187652][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'.
[  793.288671][ T5740] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  793.466700][ T5740] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  793.466732][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.466752][ T5740] usb 6-1: Product: syz
[  793.466766][ T5740] usb 6-1: Manufacturer: syz
[  793.466779][ T5740] usb 6-1: SerialNumber: syz
[  793.527216][ T5740] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  793.554830][   T31] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  793.864744][T12585] usb 6-1: USB disconnect, device number 7
[  794.126052][T14226] input: syz0 as /devices/virtual/input/input53
[  794.350505][T14232] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  794.698928][   T31] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  794.699108][   T31] ath9k_htc: Failed to initialize the device
[  794.699893][T12585] usb 6-1: ath9k_htc: USB layer deinitialized
[  794.828183][ T3393] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.989999][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2488'.
[  795.448281][ T3393] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.714425][T14250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2493'.
[  796.681888][T14261] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  796.863358][ T3393] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.970524][T14259] syzkaller0: tun_chr_ioctl cmd 1074025681
[  796.970620][T14263] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  797.829886][T14271] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  797.984216][ T3393] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.099233][   T31] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  798.212786][T14270] syzkaller0: tun_chr_ioctl cmd 1074025681
[  798.212847][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2500'.
[  798.253668][   T31] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  798.253714][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.253741][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  798.253763][   T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  798.255295][   T31] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  798.255323][   T31] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  798.255344][   T31] usb 7-1: Manufacturer: syz
[  798.296568][   T31] usb 7-1: config 0 descriptor??
[  798.769246][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2504'.
[  799.062487][   T31] usbhid 7-1:0.0: can't add hid device: -71
[  799.062649][   T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  799.089725][   T31] usb 7-1: USB disconnect, device number 17
[  799.333852][T14302] binder: BINDER_SET_CONTEXT_MGR already set
[  799.333863][T14302] binder: 14299:14302 ioctl 4018620d 200000000040 returned -16
[  799.377103][T14300] input: syz0 as /devices/virtual/input/input54
[  802.328687][ T5740] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  802.495822][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  802.495843][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  802.495856][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  802.497701][ T5740] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  802.497717][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.497728][ T5740] usb 5-1: Product: syz
[  802.497735][ T5740] usb 5-1: Manufacturer: syz
[  802.497743][ T5740] usb 5-1: SerialNumber: syz
[  802.600558][ T5740] usb 5-1: config 0 descriptor??
[  802.614716][ T5740] adutux 5-1:0.0: interrupt endpoints not found
[  802.859712][ T3393] bridge_slave_1: left allmulticast mode
[  802.859752][ T3393] bridge_slave_1: left promiscuous mode
[  802.859913][ T3393] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.019726][ T3393] bridge_slave_0: left allmulticast mode
[  803.019759][ T3393] bridge_slave_0: left promiscuous mode
[  803.020011][ T3393] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.060525][T14379] input: syz0 as /devices/virtual/input/input55
[  804.540720][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2532'.
[  805.202448][ T5601] usb 5-1: USB disconnect, device number 59
[  805.409459][ T5740] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  805.565320][ T5740] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  805.565368][ T5740] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.565394][ T5740] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  805.565415][ T5740] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  805.566911][ T5740] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  805.566938][ T5740] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  805.566956][ T5740] usb 7-1: Manufacturer: syz
[  805.676137][ T5740] usb 7-1: config 0 descriptor??
[  806.131124][T14456] input: syz0 as /devices/virtual/input/input56
[  806.312687][ T5740] usbhid 7-1:0.0: can't add hid device: -71
[  806.312803][ T5740] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  806.348661][ T5740] usb 7-1: USB disconnect, device number 18
[  806.442743][ T3393] bond1 (unregistering): (slave gretap1): Releasing active interface
[  806.873797][ T3393] bond1 (unregistering): (slave bridge2): Releasing active interface
[  807.040204][ T3393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  807.100369][ T3393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  807.183974][ T3393] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  807.237380][ T3393] bond0 (unregistering): Released all slaves
[  807.258141][ T3393] bond1 (unregistering): Released all slaves
[  807.400122][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  807.748836][T14450] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  808.168810][ T5607] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  808.309156][ T5607] usb 6-1: device descriptor read/64, error -71
[  808.608656][ T5607] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  808.727461][T14490] binder_alloc: 14488: binder_alloc_buf, no vma
[  808.727683][T14490] binder: 14488:14490 ioctl c0306201 200000001440 returned -11
[  808.786134][ T5607] usb 6-1: device descriptor read/64, error -71
[  808.786994][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[  808.787036][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[  808.889432][ T5607] usb usb6-port1: attempt power cycle
[  809.209240][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2553'.
[  809.258747][ T5607] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  809.290015][ T5607] usb 6-1: device descriptor read/8, error -71
[  809.441515][T14501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2554'.
[  809.538649][ T5607] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  809.559462][ T5607] usb 6-1: device descriptor read/8, error -71
[  809.685991][ T5607] usb usb6-port1: unable to enumerate USB device
[  810.421381][T14528] input: syz0 as /devices/virtual/input/input57
[  811.202465][ T3393] hsr_slave_0: left promiscuous mode
[  811.204445][T14546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'.
[  811.251778][ T3393] hsr_slave_1: left promiscuous mode
[  811.252893][ T3393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.252917][ T3393] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.299762][ T3393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.299790][ T3393] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.382984][ T3393] veth1_macvtap: left promiscuous mode
[  811.383085][ T3393] veth0_macvtap: left promiscuous mode
[  811.383549][ T3393] veth1_vlan: left promiscuous mode
[  811.386415][ T3393] veth0_vlan: left promiscuous mode
[  811.608651][ T5601] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  811.772511][ T5601] usb 7-1: Using ep0 maxpacket: 16
[  811.773389][ T5601] usb 7-1: no configurations
[  811.773406][ T5601] usb 7-1: can't read configurations, error -22
[  811.908759][ T5601] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  812.068716][ T5601] usb 7-1: Using ep0 maxpacket: 16
[  812.069586][ T5601] usb 7-1: no configurations
[  812.069601][ T5601] usb 7-1: can't read configurations, error -22
[  812.070018][ T5601] usb usb7-port1: attempt power cycle
[  812.136381][T14566] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2572'.
[  812.136407][T14566] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2572'.
[  812.448722][ T5601] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  812.469813][ T5601] usb 7-1: Using ep0 maxpacket: 16
[  812.471104][ T5601] usb 7-1: no configurations
[  812.471121][ T5601] usb 7-1: can't read configurations, error -22
[  812.601233][ T5601] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  812.619351][ T5601] usb 7-1: Using ep0 maxpacket: 16
[  812.620632][ T5601] usb 7-1: no configurations
[  812.620650][ T5601] usb 7-1: can't read configurations, error -22
[  812.621776][ T5601] usb usb7-port1: unable to enumerate USB device
[  813.160429][ T5601] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  813.298679][ T5601] usb 5-1: device descriptor read/64, error -71
[  813.583800][ T5601] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  813.708836][ T5601] usb 5-1: device descriptor read/64, error -71
[  813.819943][ T5601] usb usb5-port1: attempt power cycle
[  814.023311][ T3393] team_slave_1 (unregistering): left allmulticast mode
[  814.062783][ T3393] team0 (unregistering): Port device team_slave_1 removed
[  814.093527][ T3393] team_slave_0 (unregistering): left allmulticast mode
[  814.129160][ T3393] team0 (unregistering): Port device team_slave_0 removed
[  814.218690][ T5601] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  814.240859][ T5601] usb 5-1: device descriptor read/8, error -71
[  814.277919][ T3393] team0 (unregistering): left allmulticast mode
[  814.443172][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[  814.444488][T14538] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  814.449118][T14553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2567'.
[  814.499148][ T5601] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  814.565870][ T5601] usb 5-1: device descriptor read/8, error -71
[  814.679202][ T5601] usb usb5-port1: unable to enumerate USB device
[  814.805000][T14584] binder_alloc: 14582: binder_alloc_buf, no vma
[  814.805842][T14584] binder: 14582:14584 ioctl c0306201 200000001440 returned -11
[  815.758397][T14615] input: syz0 as /devices/virtual/input/input58
[  816.015283][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'.
[  816.068688][T12584] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  816.302414][T12584] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  816.302433][T12584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.302444][T12584] usb 7-1: Product: syz
[  816.302451][T12584] usb 7-1: Manufacturer: syz
[  816.302459][T12584] usb 7-1: SerialNumber: syz
[  816.382797][T12584] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  816.417805][T12585] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  816.757686][   T31] usb 7-1: USB disconnect, device number 23
[  816.831506][T14630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  817.439035][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11
[  817.661944][T12585] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  817.662121][T12585] ath9k_htc: Failed to initialize the device
[  817.726178][   T31] usb 7-1: ath9k_htc: USB layer deinitialized
[  818.145389][T14641] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  819.528753][T12585] usb 7-1: new full-speed USB device number 24 using dummy_hcd
[  819.661960][T12585] usb 7-1: device descriptor read/64, error -71
[  819.913170][T12585] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  820.118734][T12585] usb 7-1: device descriptor read/64, error -71
[  820.229202][T12585] usb usb7-port1: attempt power cycle
[  820.598749][T12585] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  820.630432][T12585] usb 7-1: device descriptor read/8, error -71
[  820.699925][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12
[  820.868781][T12585] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  820.889401][T12585] usb 7-1: device descriptor read/8, error -71
[  820.999205][T12585] usb usb7-port1: unable to enumerate USB device
[  821.063874][T14703] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  821.107300][T14698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  821.220723][T14708] binder_alloc: 14707: binder_alloc_buf, no vma
[  821.222430][T14708] binder: 14707:14708 ioctl c0306201 200000001440 returned -11
[  822.633638][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2611'.
[  823.804643][T14745] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  824.088689][ T5607] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  824.278650][ T5607] usb 7-1: Using ep0 maxpacket: 8
[  824.283400][ T5607] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  824.283435][ T5607] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  824.283448][ T5607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.779762][ T5607] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  824.908637][ T5607] usb 8-1: device descriptor read/64, error -71
[  824.957145][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2622'.
[  824.980307][  T820] usb 7-1: USB disconnect, device number 28
[  825.158661][ T5607] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  825.288816][ T5607] usb 8-1: device descriptor read/64, error -71
[  825.399029][ T5607] usb usb8-port1: attempt power cycle
[  825.518730][  T820] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  825.660588][  T820] usb 6-1: device descriptor read/64, error -71
[  825.738700][ T5607] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  825.770890][ T5607] usb 8-1: device descriptor read/8, error -71
[  825.798655][ T5601] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  825.911444][  T820] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  825.960439][ T5601] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  825.960509][ T5601] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64
[  825.960529][ T5601] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64
[  825.960543][ T5601] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  825.960567][ T5601] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  825.960579][ T5601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.028597][ T5607] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  826.060174][ T5607] usb 8-1: device descriptor read/8, error -71
[  826.098673][  T820] usb 6-1: device descriptor read/64, error -71
[  826.171850][ T5607] usb usb8-port1: unable to enumerate USB device
[  826.218857][ T4913] Bluetooth: hci2: command 0x0406 tx timeout
[  826.260005][  T820] usb usb6-port1: attempt power cycle
[  826.272853][ T5601] usb 7-1: GET_CAPABILITIES returned 0
[  826.272902][ T5601] usbtmc 7-1:16.0: can't read capabilities
[  826.537866][T14780] netlink: 179640 bytes leftover after parsing attributes in process `syz.4.2630'.
[  826.598195][ T5601] usb 7-1: USB disconnect, device number 29
[  826.722890][  T820] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  826.751255][  T820] usb 6-1: device descriptor read/8, error -71
[  827.308946][  T820] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  827.342252][  T820] usb 6-1: device descriptor read/8, error -71
[  827.588940][  T820] usb usb6-port1: unable to enumerate USB device
[  828.570847][ T5601] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  828.752633][ T5601] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  829.395549][T14811] fido_id[14811]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0009/report_descriptor': No such device
[  829.598744][ T5601] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  829.783180][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  829.783214][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  829.783227][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  829.785318][ T5601] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  829.785347][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.785365][ T5601] usb 1-1: Product: syz
[  829.785373][ T5601] usb 1-1: Manufacturer: syz
[  829.785380][ T5601] usb 1-1: SerialNumber: syz
[  829.849153][   T50] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  829.866611][ T5601] usb 1-1: config 0 descriptor??
[  829.881903][ T5601] adutux 1-1:0.0: interrupt endpoints not found
[  829.978779][   T50] usb 8-1: device descriptor read/64, error -71
[  830.237268][   T50] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  830.388701][   T50] usb 8-1: device descriptor read/64, error -71
[  830.501292][   T50] usb usb8-port1: attempt power cycle
[  830.744762][T14836] syzkaller0: tun_chr_ioctl cmd 1074025681
[  830.747595][T14836] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  830.839150][   T50] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  830.863160][   T50] usb 8-1: device descriptor read/8, error -71
[  830.908888][T12584] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  831.058703][T12584] usb 6-1: Using ep0 maxpacket: 8
[  831.060855][T12584] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  831.060908][T12584] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  831.060931][T12584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.144722][   T50] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  831.159244][   T50] usb 8-1: device descriptor read/8, error -71
[  831.287384][   T50] usb usb8-port1: unable to enumerate USB device
[  831.631611][T14858] syzkaller0: tun_chr_ioctl cmd 1074025681
[  831.637347][T14858] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  832.158069][T14876] binder_alloc: 14875: binder_alloc_buf, no vma
[  832.166467][T14876] binder: 14875:14876 ioctl c0306201 200000001440 returned -11
[  832.179105][T12584] usb 1-1: USB disconnect, device number 8
[  833.345614][T14905] fuse: Bad value for 'fd'
[  833.729258][   T50] usb 6-1: USB disconnect, device number 16
[  834.124619][T14925] input: syz0 as /devices/virtual/input/input59
[  834.126086][T14930] binder: BINDER_SET_CONTEXT_MGR already set
[  834.126100][T14930] binder: 14929:14930 ioctl 4018620d 200000000040 returned -16
[  834.134127][T14930] binder: 14929:14930 ioctl c0306201 200000001440 returned -11
[  834.292312][T14932] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  834.889130][ T5607] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  835.046832][ T5607] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  835.046888][ T5607] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  835.046913][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.411085][ T5607] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  836.558660][ T5607] usb 7-1: Using ep0 maxpacket: 8
[  836.560479][ T5607] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  836.560512][ T5607] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  836.560525][ T5607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.029451][T14999] binder: 14997:14999 ioctl c0306201 0 returned -14
[  837.187981][T15002] binder_alloc: 15001: binder_alloc_buf, no vma
[  837.188371][T15002] binder: 15001:15002 ioctl c0306201 200000001440 returned -11
[  837.203310][T14998] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  837.298151][ T5735] usb 7-1: USB disconnect, device number 30
[  837.667179][ T5735] usb 6-1: USB disconnect, device number 17
[  837.822031][T15019] input: syz0 as /devices/virtual/input/input60
[  838.150017][ T5735] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  838.325398][ T5735] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  838.325423][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.325434][ T5735] usb 6-1: Product: syz
[  838.325442][ T5735] usb 6-1: Manufacturer: syz
[  838.325449][ T5735] usb 6-1: SerialNumber: syz
[  838.374033][ T5735] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  838.414385][T12585] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  840.638651][T12585] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  840.638791][T12585] ath9k_htc: Failed to initialize the device
[  840.642725][ T5607] usb 6-1: USB disconnect, device number 18
[  840.705069][ T5607] usb 6-1: ath9k_htc: USB layer deinitialized
[  841.279023][T15041] binder: 15040:15041 ioctl c0306201 0 returned -14
[  841.628702][T12584] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  841.738642][ T5607] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  841.778783][T12585] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  841.798646][T12584] usb 6-1: Using ep0 maxpacket: 16
[  841.800467][T12584] usb 6-1: config 0 has no interfaces?
[  841.802775][T12584] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  841.802793][T12584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.802804][T12584] usb 6-1: Product: syz
[  841.802812][T12584] usb 6-1: Manufacturer: syz
[  841.802819][T12584] usb 6-1: SerialNumber: syz
[  841.810492][T12584] usb 6-1: config 0 descriptor??
[  841.931948][T12585] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  841.932004][T12585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.932029][T12585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.932050][T12585] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  841.935519][T12585] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  841.935548][T12585] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  841.935567][T12585] usb 7-1: Manufacturer: syz
[  841.955249][ T5607] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  841.955289][ T5607] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  841.955301][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.968954][T12585] usb 7-1: config 0 descriptor??
[  842.101114][ T5607] usb 6-1: USB disconnect, device number 19
[  842.388897][   T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  842.538628][   T31] usb 1-1: Using ep0 maxpacket: 8
[  842.541643][   T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  842.541673][   T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  842.541696][   T31] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  842.541725][   T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  842.541767][   T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  842.541790][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.629528][   T31] usbtmc 1-1:16.0: bulk endpoints not found
[  842.664433][T12585] usbhid 7-1:0.0: can't add hid device: -71
[  842.664560][T12585] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  842.702556][T12585] usb 7-1: USB disconnect, device number 31
[  843.038692][T12584] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  843.201087][T12584] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  843.201145][T12584] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64
[  843.201172][T12584] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64
[  843.201200][T12584] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  843.201240][T12584] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  843.201262][T12584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.441950][T12584] usb 6-1: usb_control_msg returned -71
[  843.441997][T12584] usbtmc 6-1:16.0: can't read capabilities
[  843.486947][T12584] usb 6-1: USB disconnect, device number 20
[  843.821926][T15084] binder_alloc: 15083: binder_alloc_buf, no vma
[  844.531105][ T5735] usb 5-1: USB disconnect, device number 64
[  844.578967][T12585] usb 8-1: new low-speed USB device number 21 using dummy_hcd
[  844.705428][T15104] input: syz0 as /devices/virtual/input/input61
[  844.731170][T12585] usb 8-1: config 0 has no interfaces?
[  844.732670][T12585] usb 8-1: config 0 has no interfaces?
[  844.735855][T12585] usb 8-1: config 0 has no interfaces?
[  844.819232][T12585] usb 8-1: string descriptor 0 read error: -22
[  844.819342][T12585] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  844.819366][T12585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.879125][T12585] usb 8-1: config 0 descriptor??
[  845.096229][ T5607] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  845.138097][   T50] usb 1-1: USB disconnect, device number 9
[  845.319000][T12585] usb 8-1: USB disconnect, device number 21
[  845.460710][   T36] audit: type=1800 audit(1778957819.307:196): pid=15118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2719" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  845.522638][ T5607] usb 6-1: unable to get BOS descriptor or descriptor too short
[  845.524828][ T5607] usb 6-1: unable to read config index 0 descriptor/start: -71
[  845.524863][ T5607] usb 6-1: can't read configurations, error -71
[  845.692589][ T5735] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  845.869401][ T5735] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  845.869420][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.869431][ T5735] usb 1-1: Product: syz
[  845.869439][ T5735] usb 1-1: Manufacturer: syz
[  845.869446][ T5735] usb 1-1: SerialNumber: syz
[  845.941190][ T5735] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  846.025975][T12584] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  847.348621][T12585] usb 1-1: USB disconnect, device number 10
[  847.366752][T12584] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  847.366913][T12584] ath9k_htc: Failed to initialize the device
[  847.489611][ T5607] ==================================================================
[  847.489627][ T5607] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  847.489821][ T5607] Read of size 8 at addr ffffc9000f54c008 by task kworker/1:5/5607
[  847.489835][ T5607] 
[  847.489864][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: kworker/1:5 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  847.489899][ T5607] Tainted: [L]=SOFTLOCKUP
[  847.489905][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  847.489916][ T5607] Workqueue: usb_hub_wq hub_event
[  847.490014][ T5607] Call Trace:
[  847.490021][ T5607]  <TASK>
[  847.490027][ T5607]  dump_stack_lvl+0xe8/0x150
[  847.490109][ T5607]  print_address_description+0x55/0x1e0
[  847.490137][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.490175][ T5607]  print_report+0x58/0x70
[  847.490194][ T5607]  kasan_report+0x117/0x150
[  847.490266][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.490296][ T5607]  __list_add_valid_or_report+0x4e/0x130
[  847.490323][ T5607]  kcov_remote_stop+0x457/0x680
[  847.490394][ T5607]  hub_event+0x49d8/0x4f60
[  847.490479][ T5607]  ? __pfx_hub_event+0x10/0x10
[  847.490510][ T5607]  ? process_scheduled_works+0xa70/0x1860
[  847.490564][ T5607]  ? process_scheduled_works+0xa70/0x1860
[  847.490581][ T5607]  ? process_scheduled_works+0xa70/0x1860
[  847.490599][ T5607]  process_scheduled_works+0xb5d/0x1860
[  847.490631][ T5607]  ? __pfx_process_scheduled_works+0x10/0x10
[  847.490652][ T5607]  ? assign_work+0x3d5/0x5e0
[  847.490671][ T5607]  worker_thread+0xa53/0xfc0
[  847.490705][ T5607]  kthread+0x388/0x470
[  847.490769][ T5607]  ? __pfx_worker_thread+0x10/0x10
[  847.490786][ T5607]  ? __pfx_kthread+0x10/0x10
[  847.490808][ T5607]  ret_from_fork+0x514/0xb70
[  847.490838][ T5607]  ? __pfx_ret_from_fork+0x10/0x10
[  847.490857][ T5607]  ? __switch_to+0xc79/0x1410
[  847.490884][ T5607]  ? __pfx_kthread+0x10/0x10
[  847.490907][ T5607]  ret_from_fork_asm+0x1a/0x30
[  847.490936][ T5607]  </TASK>
[  847.490943][ T5607] 
[  847.490948][ T5607] The buggy address belongs to a vmalloc virtual mapping
[  847.490964][ T5607] Memory state around the buggy address:
[  847.490974][ T5607]  ffffc9000f54bf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  847.490987][ T5607]  ffffc9000f54bf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  847.490999][ T5607] >ffffc9000f54c000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  847.491008][ T5607]                       ^
[  847.491018][ T5607]  ffffc9000f54c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  847.491030][ T5607]  ffffc9000f54c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  847.491039][ T5607] ==================================================================
[  847.491056][ T5607] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  847.491073][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: kworker/1:5 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  847.491100][ T5607] Tainted: [L]=SOFTLOCKUP
[  847.491107][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  847.491165][ T5607] Workqueue: usb_hub_wq hub_event
[  847.491188][ T5607] Call Trace:
[  847.491196][ T5607]  <TASK>
[  847.491211][ T5607]  vpanic+0x56c/0xa60
[  847.491236][ T5607]  ? __pfx_vpanic+0x10/0x10
[  847.491262][ T5607]  panic+0xc5/0xd0
[  847.491282][ T5607]  ? __pfx_panic+0x10/0x10
[  847.491304][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.491332][ T5607]  ? rcu_is_watching+0x15/0xb0
[  847.491436][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.491463][ T5607]  check_panic_on_warn+0x89/0xb0
[  847.491496][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.491519][ T5607]  end_report+0x73/0x170
[  847.491540][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.491563][ T5607]  kasan_report+0x128/0x150
[  847.491584][ T5607]  ? __list_add_valid_or_report+0x4e/0x130
[  847.491613][ T5607]  __list_add_valid_or_report+0x4e/0x130
[  847.491640][ T5607]  kcov_remote_stop+0x457/0x680
[  847.491662][ T5607]  hub_event+0x49d8/0x4f60
[  847.491700][ T5607]  ? __pfx_hub_event+0x10/0x10
[  847.491720][ T5607]  ? process_scheduled_works+0xa70/0x1860
[  847.491744][ T5607]  ? process_scheduled_works+0xa70/0x1860
[  847.491762][ T5607]  ? process_scheduled_works+0xa70/0x1860
[  847.491782][ T5607]  process_scheduled_works+0xb5d/0x1860
[  847.491811][ T5607]  ? __pfx_process_scheduled_works+0x10/0x10
[  847.491831][ T5607]  ? assign_work+0x3d5/0x5e0
[  847.491850][ T5607]  worker_thread+0xa53/0xfc0
[  847.491879][ T5607]  kthread+0x388/0x470
[  847.491901][ T5607]  ? __pfx_worker_thread+0x10/0x10
[  847.491921][ T5607]  ? __pfx_kthread+0x10/0x10
[  847.491949][ T5607]  ret_from_fork+0x514/0xb70
[  847.491971][ T5607]  ? __pfx_ret_from_fork+0x10/0x10
[  847.491992][ T5607]  ? __switch_to+0xc79/0x1410
[  847.492020][ T5607]  ? __pfx_kthread+0x10/0x10
[  847.492044][ T5607]  ret_from_fork_asm+0x1a/0x30
[  847.492074][ T5607]  </TASK>
[  847.492659][ T5607] Kernel Offset: disabled