last executing test programs:

19.946453045s ago: executing program 1 (id=5292):
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(r5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000f7ffffff000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003"], 0x24}}, 0x0)

18.981702848s ago: executing program 1 (id=5293):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000f100000000000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
r2 = open$dir(0x0, 0x80080, 0x180)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x1000a10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89f9, &(0x7f0000000280)={'wg2\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6a2982, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000002c0)={0x288000c, r4, 0x0, 0x0, 0x1})
getdents(r2, &(0x7f00000001c0)=""/83, 0x53)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_fd}, 0x20)
fcntl$setlease(r6, 0x10, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000580)={{0xfffff800, 0x750}, 0x100, './file0\x00'})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000500)="440f20c0350a000000440f22c0c483791470ef0066ba6100b00cee0f01c4c4e205ad5b84c4837d054787e3c7442400a3000000c744240296d80000ff1c243e0f3248b8c3000000000000000f23c00f21f835030003000f23f80f20e035020000000f22e0", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0c062f20"], 0xf)

18.254430051s ago: executing program 1 (id=5296):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)

18.247810726s ago: executing program 1 (id=5297):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt(r0, 0x7f, 0xff, &(0x7f0000000040)="b0be3a7bdb9f1030d65c380d27051787180e096f", 0x14)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@private=0xa010100, @loopback, 0x1, 0x3, [@multicast2, @rand_addr=0x64010100, @broadcast]}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
flistxattr(r1, &(0x7f0000000240)=""/22, 0x16)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000280))
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvfrom$x25(r2, &(0x7f00000002c0)=""/6, 0x6, 0x10000, &(0x7f0000000300), 0x12)
r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60)
accept4$nfc_llcp(r3, 0x0, &(0x7f0000000400), 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000440)=0x4, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet_sctp(0x2, 0x0, 0x84)
fsetxattr$smack_xattr_label(r1, &(0x7f00000007c0)='security.SMACK64IPIN\x00', &(0x7f0000000800)={'syz'}, 0x4, 0x1)

13.952653261s ago: executing program 3 (id=5298):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100))
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_open_procfs$pagemap(r1, &(0x7f00000002c0))
listen(r5, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "cef9d91eee4f4bec163023a7d98d297e"}, @md5sig={0x13, 0x12, "c5d7cb3485609d71e4b75c20d03d4ae9"}]}}}}}}}, 0x0)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904b000003a3846000904"], 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000300))
setsockopt(r4, 0x84, 0x76, &(0x7f0000000200)="0c00000002000000", 0x8)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "011c4e", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "6b1b3e", 0x0, 0x0, 0x0, @private2, @private0}}}}}}}, 0x0)

13.842217822s ago: executing program 1 (id=5300):
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x240040c4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000006114540000000000050000000000000095007400000000006f1fbcdc400ba3dc92830312caafed3827dd3782a01ba7049cbd16ca84f468df37d317b1cc41ba9c090f1a0479b99712434c8bd55ddaf78c2277bdeabe46b6b78cf4e0bf644bcd5c6ba5e293e62a0be0291a724829fb673777753f7c63a9f8231a1c6fbf0bc7510a982c299aab9bc955dfff62ef7648aa58694593facd659984bafc77cacb66406108"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

12.53251801s ago: executing program 1 (id=5307):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002d00)={'wlan0\x00', <r4=>0x0})
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0), 0x1, 0x400})
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r4, @ANYBLOB="0324"], 0x28}}, 0x0)
mkdir(0x0, 0x0)
open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
getpid()
r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x261, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000040), 0x0}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$MON_IOCG_STATS(r7, 0x80089203, &(0x7f00000000c0))

9.256486301s ago: executing program 3 (id=5320):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c0008000000000000000000080001000000000044000780"], 0x90}}, 0x0)

8.877561463s ago: executing program 3 (id=5322):
r0 = socket(0x10, 0x3, 0x2)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x0, 0x200000}, 0xc)

8.557947993s ago: executing program 3 (id=5323):
r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file1', [{0x20, 'LBb-'}]}, 0x10)

8.13025766s ago: executing program 3 (id=5326):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x1}})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b231a0987f70e06d038e7ff7fc6e5539b3272078b089b3b08384b090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef3195201c0ffe8d17870000000001b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb199f6b76383709d8f5c55432a909fda039aec54a1238580f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82999ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad0f765cf60bd0ba2f3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b599d0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x98)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

5.702913253s ago: executing program 4 (id=5335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x60, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x45}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x128}}, 0x0)

5.33461398s ago: executing program 3 (id=5337):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x7ff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, "fe1d3413001001000000000caa000000090000000000000004b42718001000"}})

5.264529739s ago: executing program 4 (id=5338):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="fba7000000002bd4000004"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
process_mrelease(0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0xfff)
socket$inet6(0xa, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5a, 0x0, 0x0)

4.342630348s ago: executing program 2 (id=5341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)

4.208922289s ago: executing program 4 (id=5343):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x4})

4.098634757s ago: executing program 2 (id=5344):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))

3.864622892s ago: executing program 4 (id=5346):
r0 = socket$igmp(0x2, 0x3, 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x14}}, 0x1c}}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000480)=0x40)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100))
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0), 0x4)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, 0x0})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000200000000000800000000000000950000000000000056e016db478f80d6db662dc1a64f3407c15dbb5d0704deb24761e2c50e31a96e6479ce7d980d2df4fbce4148995f55ea80f7967a67667c9e72d9c924bd82f05db68a503c3df542525a6b252676dd5d38d80b7870ebaa18a325c49ae1b53df8"], &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x189202)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.state\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r8 = socket(0x1d, 0x3, 0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x65, 0x8, 0x0, 0x20000000)

3.746658811s ago: executing program 2 (id=5347):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)

2.884711595s ago: executing program 4 (id=5348):
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0xc0902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x248, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x1b0, 0x230, 0x230, 0x1b0, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd8, 0x0, {0x1000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
shmctl$IPC_SET(0x0, 0x1, 0x0)
syz_pidfd_open(0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000201000000000000000000000a000000a3ffdf1039369f4e1a72b4b77d6f32685ff72d38994bb00c0357203436b5382084130ce332b3572cd1e90100a6b6ac08e5409676d2c3632356c42ec10f89d1c818707b3f2d25bb356581d6c73752b19b"], 0x14}}, 0x404c8c0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8}, 0x9c)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000040)={0x0, 0x0, @raw_data})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

2.699772221s ago: executing program 2 (id=5349):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)

2.334834032s ago: executing program 0 (id=5350):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0700000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x108)

2.111386359s ago: executing program 0 (id=5352):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz0\x00'})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.694297478s ago: executing program 4 (id=5353):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, 0x0)
r3 = io_uring_setup(0x5f72, &(0x7f0000000580)={0x0, 0x9236, 0x0, 0x1, 0x36d})
io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map, 0xffffffffffffffff, 0x17, 0x0, 0xffffffffffffffff, @link_id}, 0x20)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aaedda7f345881d8e3299cca7bf6eb1730423b84df251adc5a6a3df5fbcdaba7541a96a745211d458ecbd25f7adabff10c56381424f96521b18ab8e2a5f92b0fc2997ff7102298726aff76f6f46139d32dadd2bf29ffa86c4902dc74bb62d15481c333ccb19d37853c99140df83581334f906b4cbe1849b81f6c0158c4485c080bde83d1b0c671742a9bcdd5435d7ba018e1ca147d42a41398b21678000e9b4a35f291fa943efe0d5439c7f86d7af723bc2c4723ed4a0cb1f2aaa6b7210d02fda5cab34ddb9307d6d345d01fc0b7ab2e69c1048e76a6488505cc4ff59838b659539e2321231b76999fef78f23602b828fc29af05e82c537b7cc37d83881e3ef1ab6c760eedefc1c3d5b63feae1f0af8a57f7e95992e1e95bd0fd20cc7a194741f22874e7f70ae3bb4b7d92582508c4ff3c45b82f051eadf07b60028d3b68aa5dabe2342572266a01d01b8844a6e0500e0473045e2d8cd7e86e2d2e7b3e0c6401683894095eafeffa21f73bd7c7a8ed7ca9efc797a2a4f0f765a68de8baad872cc26f43f3ab85fe06bffc1e428a67950cefbd3b500552680cb438c7674b537ede667c886aea214752810d2ad3ec881ae6d25711766b593f91d2fc845eeb4bf75a3478935bc3e5a36963fc9fa00fd68633f40b3609b2778bef24984fdd42e67cae06981f1202f0298fd680cd34dbc25aee19751d8168bf7ddc203147ad3a62ca795e1fcfc3cfa5fcc2081ffe421fbeb563c45fb141ea711527b54b87693a5d9a5f229bce179e590c364858c4d0da131717dc65bc4ecd81190a7529b041aa9c33fd88df1e3215b9019e3b377d914628c27bcbadae3a6159d27c69a49f470dbe69fbfbdef238b6af64bb110bf8a97229249443a4bc732f798b4a645eec36a4724f429740960db9bfe97ec3370607c3799e9382fa8468ed11a6b09078dfc43bb67658a66eb44b729ec4d30c2a2fbcc98527", 0x2c6}], 0x1}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0)

1.595330209s ago: executing program 0 (id=5354):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004b5bbe19000000000061104e00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000010000000000000000850000003600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
r3 = socket(0x1, 0x2, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r5 = userfaultfd(0x80001)
unshare(0x400)
r6 = gettid()
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r7, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x4058534c, &(0x7f00000000c0)={0x80})
tkill(r6, 0x7)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000440))
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x40000000})
ftruncate(r0, 0x3)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r8, &(0x7f0000000180)}, 0x20)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0xeeff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000001c0)=""/22, &(0x7f00000002c0)=0x16)

914.955001ms ago: executing program 0 (id=5355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
unshare(0x8040480)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8)

598.02214ms ago: executing program 2 (id=5356):
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x12, 0xffff, 0x8, 0x7fffffff, 0x0, 0x1}, 0x48)

375.061937ms ago: executing program 0 (id=5357):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x0)
setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[@ANYBLOB="0403"], 0xff02, 0x0)
open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0)

286.415236ms ago: executing program 2 (id=5358):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fanotify_init(0x200, 0x0)
r6 = dup(r4)
fanotify_mark(r5, 0x1, 0x48000060, r6, 0x0)
syz_io_uring_setup(0x1103, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=<r7=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0)
r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80100, 0x2)
execveat(r9, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=[&(0x7f00000001c0)='\xd5}!!^/,-\x00', &(0x7f0000000200)='/dev/nullb0\x00', &(0x7f0000000240)='.%/+\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/nullb0\x00', &(0x7f0000000300)='/dev/nullb0\x00', &(0x7f0000000380)='/dev/nullb0\x00', &(0x7f00000003c0)='/dev/nullb0\x00', &(0x7f0000000400)='/)\x00'], &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/nullb0\x00', &(0x7f0000000500)='/dev/nullb0\x00', &(0x7f0000000540)='*!\x00', &(0x7f0000000580)='/dev/nullb0\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='-&@%\',#[@}${\x00'], 0x800)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x0, 0xa00})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000000340)="230000000100", 0x6)

0s ago: executing program 0 (id=5359):
socket$inet6(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3}}, 0x1c}}, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan0\x00'})

kernel console output (not intermixed with test programs):

lock magic 00000000 at 1
[ 1190.968793][T19605] vxfs: WRONG superblock magic 00000000 at 8
[ 1190.974931][T19605] vxfs: can't find superblock.
[ 1191.637125][T19612] ax25_connect(): syz.4.4629 uses autobind, please contact jreuter@yaina.de
[ 1191.727886][ T5267] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1192.015965][ T5267] usb 4-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84
[ 1192.162066][T19623] xt_NFQUEUE: number of total queues is 0
[ 1192.185346][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.196993][ T5267] usb 4-1: Product: syz
[ 1192.202152][ T5267] usb 4-1: Manufacturer: syz
[ 1192.225495][ T5267] usb 4-1: SerialNumber: syz
[ 1192.358153][ T5267] usb 4-1: config 0 descriptor??
[ 1192.486783][ T5267] usb 4-1: bad CDC descriptors
[ 1192.888513][ T5267] usb 4-1: USB disconnect, device number 87
[ 1193.358257][T19643] netlink: 'syz.2.4642': attribute type 1 has an invalid length.
[ 1193.392801][T19643] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4642'.
[ 1193.414859][T19643] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4642'.
[ 1193.518759][T19648] netem: incorrect ge model size
[ 1193.524929][T19648] netem: change failed
[ 1193.675804][T19651] netlink: 'syz.3.4646': attribute type 11 has an invalid length.
[ 1193.707683][ T5267] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1193.715941][T19651] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.4646'.
[ 1193.967470][ T5267] usb 5-1: Using ep0 maxpacket: 16
[ 1194.001773][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1194.069228][ T5267] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1194.096932][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.123306][ T5267] usb 5-1: config 0 descriptor??
[ 1194.137534][T12519] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1194.379011][T12519] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1194.415459][T12519] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[ 1194.448336][T12519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.483541][T12519] usb 3-1: config 0 descriptor??
[ 1194.507148][T12519] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1194.594318][T19647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1194.624129][T19647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1194.646153][ T5267] hid (null): nested delimiters
[ 1194.676866][ T5267] hid (null): report_id 24797 is invalid
[ 1194.711178][ T5267] hid (null): unknown global tag 0xa5
[ 1194.735285][ T5267] hid (null): unknown global tag 0xd
[ 1194.738156][T12519] usb 3-1: USB disconnect, device number 50
[ 1194.757752][ T5267] hid (null): unknown global tag 0xc
[ 1194.799137][ T5267] hid-generic 0003:0158:0100.003B: unknown main item tag 0x1
[ 1194.819687][ T5267] hid-generic 0003:0158:0100.003B: unexpected long global item
[ 1194.867676][ T5267] hid-generic 0003:0158:0100.003B: probe with driver hid-generic failed with error -22
[ 1194.936926][ T5267] usb 5-1: USB disconnect, device number 56
[ 1195.539346][T19680] Invalid ELF header len 1
[ 1195.822326][   T29] audit: type=1400 audit(2000000485.732:473): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=19686 comm="syz.0.4659" daddr=ff01::1 dest=20000
[ 1195.925267][   T29] audit: type=1326 audit(2000000485.832:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1195.969758][   T29] audit: type=1326 audit(2000000485.832:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1195.986005][T19693] binder: 19692:19693 ioctl c0306201 20000580 returned -14
[ 1196.015347][   T29] audit: type=1326 audit(2000000485.832:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb81176390 code=0x7ffc0000
[ 1196.047439][   T29] audit: type=1326 audit(2000000485.832:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811775fb code=0x7ffc0000
[ 1196.083828][   T29] audit: type=1326 audit(2000000485.832:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811775fb code=0x7ffc0000
[ 1196.150987][   T29] audit: type=1326 audit(2000000485.832:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811775fb code=0x7ffc0000
[ 1196.207443][T12519] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1196.218166][   T29] audit: type=1326 audit(2000000485.832:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811775fb code=0x7ffc0000
[ 1196.244576][   T29] audit: type=1326 audit(2000000485.952:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811775fb code=0x7ffc0000
[ 1196.266045][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1196.345274][   T29] audit: type=1326 audit(2000000486.052:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19691 comm="syz.3.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811775fb code=0x7ffc0000
[ 1196.366831][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1196.417409][T12519] usb 4-1: Using ep0 maxpacket: 32
[ 1196.425496][T12519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1196.437051][T12519] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1196.457429][T12519] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1196.466779][T12519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.509391][T12519] usb 4-1: config 0 descriptor??
[ 1196.541735][T12519] hub 4-1:0.0: USB hub found
[ 1196.608715][T19710] xt_connbytes: Forcing CT accounting to be enabled
[ 1197.168735][T12519] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1197.604857][ T5266] IPVS: starting estimator thread 0...
[ 1197.616109][T12519] usbhid 4-1:0.0: can't add hid device: -71
[ 1197.635070][T12519] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1197.718509][T12519] usb 4-1: USB disconnect, device number 88
[ 1197.727568][T19718] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1198.324724][T19736] misc userio: No port type given on /dev/userio
[ 1198.390521][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'.
[ 1201.727698][T19740] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1202.091139][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1202.244051][T19746] netlink: 'syz.1.4679': attribute type 4 has an invalid length.
[ 1202.365932][T19746] netlink: 'syz.1.4679': attribute type 17 has an invalid length.
[ 1202.467507][ T5319] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1202.671057][ T5319] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1202.707199][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1202.757617][ T5319] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1202.788987][ T5319] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1202.796985][ T5319] usb 3-1: Manufacturer: syz
[ 1202.840506][ T5319] usb 3-1: config 0 descriptor??
[ 1203.007680][ T5319] rc_core: IR keymap rc-hauppauge not found
[ 1203.013847][ T5319] Registered IR keymap rc-empty
[ 1203.026120][ T5319] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1203.055922][ T5319] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input76
[ 1203.096131][T19765] netlink: 44 bytes leftover after parsing attributes in process `½“©'.
[ 1203.558954][ T5265] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1203.707034][T19772] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000
[ 1203.811626][ T5265] usb 2-1: config index 0 descriptor too short (expected 106, got 36)
[ 1203.839327][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11
[ 1203.884358][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024
[ 1203.899495][ T5266] usb 3-1: USB disconnect, device number 51
[ 1203.920403][ T5265] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[ 1203.970129][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1204.006044][ T5265] usb 2-1: config 0 descriptor??
[ 1204.041956][T19785] binder: 19783:19785 ioctl c018620c 20000000 returned -22
[ 1204.227521][   T29] kauditd_printk_skb: 47 callbacks suppressed
[ 1204.227542][   T29] audit: type=1400 audit(2000000494.132:530): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=19784 comm="syz.0.4691" daddr=fe80::
[ 1204.337414][ T5267] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1204.948957][ T5265] corsair 0003:1B1C:1B3E.003C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0
[ 1205.088837][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1205.107350][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1205.147498][ T5267] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 1205.156580][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1205.281137][ T5267] usb 4-1: config 0 descriptor??
[ 1205.302029][ T5266] usb 2-1: USB disconnect, device number 68
[ 1205.505336][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4696'.
[ 1205.517182][T19785] program syz.3.4690 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1205.538755][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4696'.
[ 1206.308431][   T29] audit: type=1400 audit(2000000495.842:531): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=19794 comm="syz.4.4694"
[ 1206.380183][ T5267] steelseries 0003:1038:12B6.003D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0
[ 1206.500633][ T5267] steelseries 0003:1038:12B6.003D: hid_hw_raw_request() failed with -71
[ 1206.607614][ T5267] usb 4-1: USB disconnect, device number 89
[ 1207.648077][ T5265] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 1207.900143][ T5265] usb 3-1: not running at top speed; connect to a high speed hub
[ 1208.576212][ T5265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64
[ 1208.663705][ T5265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1208.705493][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.747336][ T5265] usb 3-1: Product: ΠΈ
[ 1208.780287][T19822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1208.923702][   T29] audit: type=1400 audit(2000000498.832:532): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=19842 comm="syz.1.4708" daddr=::ffff:0.0.0.0
[ 1208.943524][ T5266] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1209.177499][ T5266] usb 4-1: Using ep0 maxpacket: 16
[ 1209.197212][ T5266] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00
[ 1209.226748][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.286503][ T5266] usb 4-1: config 0 descriptor??
[ 1209.288265][ T5265] cdc_ncm 3-1:1.0: bind() failure
[ 1209.304276][ T5266] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1209.321200][ T5265] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1209.348009][ T5265] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1209.371889][ T5265] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[ 1209.380470][ T5266] usb 4-1: Detected FT4232H
[ 1209.442669][ T5265] usb 3-1: USB disconnect, device number 52
[ 1209.564200][ T5266] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1209.601196][ T5266] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1209.835990][T19380] usb 4-1: USB disconnect, device number 90
[ 1209.863260][T19380] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1209.875522][T19380] ftdi_sio 4-1:0.0: device disconnected
[ 1210.110865][T19864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4718'.
[ 1210.245313][   T29] audit: type=1326 audit(2000000500.152:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19863 comm="syz.0.4718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x0
[ 1211.805406][T19885] Process accounting resumed
[ 1212.211747][T19903] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1212.219795][T19903] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1212.273104][T19903] bridge0: entered allmulticast mode
[ 1212.317242][T19904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4727'.
[ 1212.344807][T19908] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.4729'.
[ 1212.361890][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'.
[ 1212.409432][T19334] Bluetooth: hci4: sending frame failed (-49)
[ 1212.417680][T12460] Bluetooth: hci4: Opcode 0x1003 failed: -49
[ 1212.467343][T19903] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1212.474533][T19903] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1212.482143][T19903] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1212.489334][T19903] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1212.508900][T19903] bridge0: entered promiscuous mode
[ 1213.145071][   T29] audit: type=1400 audit(2000000503.052:534): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=19926 comm="syz.0.4738" dest=20000
[ 1213.913606][T12460] Bluetooth: unknown link type 97
[ 1213.913716][T12460] Bluetooth: hci7: connection err: -111
[ 1214.027537][   T29] audit: type=1326 audit(2000000503.932:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.049113][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1214.119228][   T29] audit: type=1326 audit(2000000503.932:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.197482][   T29] audit: type=1326 audit(2000000503.942:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.283795][   T29] audit: type=1326 audit(2000000503.942:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.387728][   T29] audit: type=1326 audit(2000000503.942:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.423310][T12460] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11
[ 1214.438937][   T29] audit: type=1326 audit(2000000503.942:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.491958][   T29] audit: type=1326 audit(2000000503.942:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.596863][   T29] audit: type=1326 audit(2000000503.942:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19937 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1214.687547][ T5265] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1214.857769][T19955] syzkaller1: entered promiscuous mode
[ 1214.863291][T19955] syzkaller1: entered allmulticast mode
[ 1214.900053][ T5265] usb 2-1: New USB device found, idVendor=0413, idProduct=6f00, bcdDevice=d8.3f
[ 1214.932860][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.013247][ T5265] usb 2-1: config 0 descriptor??
[ 1215.113871][T19960] fuse: Unknown parameter 'r'
[ 1215.264169][T19962] IPv6: sit1: Disabled Multicast RS
[ 1215.377733][ T5265] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware
[ 1215.496288][ T5265] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1215.544695][ T5265] dib0700: firmware download failed at 7 with -22
[ 1215.592460][ T5265] usb 2-1: USB disconnect, device number 69
[ 1215.947833][   T57] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1216.167783][   T57] usb 4-1: Using ep0 maxpacket: 8
[ 1216.198409][   T57] usb 4-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[ 1216.211617][   T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.221169][   T57] usb 4-1: Product: syz
[ 1216.225815][   T57] usb 4-1: Manufacturer: syz
[ 1216.230829][   T57] usb 4-1: SerialNumber: syz
[ 1216.251767][   T57] usb 4-1: config 0 descriptor??
[ 1216.280366][   T57] gspca_main: sonixj-2.14.0 probing 0c45:6128
[ 1216.660664][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4761'.
[ 1217.497416][ T5230] usb 4-1: USB disconnect, device number 91
[ 1217.587475][   T57] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1217.820715][   T57] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1217.841145][   T57] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1217.883676][   T57] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1217.901602][   T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.929989][   T57] usb 1-1: Product: syz
[ 1217.937112][T20016] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[ 1217.940105][   T57] usb 1-1: Manufacturer: syz
[ 1217.955197][T20016] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1217.987432][T20016] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1217.987502][   T57] usb 1-1: SerialNumber: syz
[ 1218.013110][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1218.093734][   T57] usb 1-1: config 0 descriptor??
[ 1218.108241][T20003] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1218.125880][T20003] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1218.337479][T20016] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1218.364477][T20003] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1218.997769][T20003] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1219.270345][T20023] netlink: 'syz.1.4771': attribute type 4 has an invalid length.
[ 1219.899280][   T57] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1219.965436][   T57] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20
[ 1220.037942][   T57] usb 1-1: USB disconnect, device number 68
[ 1220.058943][   T57] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[ 1221.057650][T20027] Bluetooth: hci7: command 0x0406 tx timeout
[ 1221.064790][T20027] Bluetooth: hci8: command 0x0406 tx timeout
[ 1221.491444][   T29] kauditd_printk_skb: 21 callbacks suppressed
[ 1221.491506][   T29] audit: type=1400 audit(2000000511.402:564): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20053 comm="syz.0.4782"
[ 1222.763648][T20066] mkiss: ax0: crc mode is auto.
[ 1223.157567][T19380] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1223.381494][T19380] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1223.421622][T19380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1223.469961][T19380] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78
[ 1223.506053][T19380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.565694][T19380] usb 2-1: Product: syz
[ 1223.584173][T19380] usb 2-1: Manufacturer: syz
[ 1223.610141][T19380] usb 2-1: SerialNumber: syz
[ 1223.646921][T19380] usb 2-1: config 0 descriptor??
[ 1223.657451][   T57] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1223.689833][T19380] usbtest 2-1:0.0: usb test device
[ 1223.695112][T19380] usbtest 2-1:0.0: high-speed {control in/out iso-in} tests (+alt)
[ 1223.892572][   T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1223.916025][   T57] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1223.931825][ T5267] usb 2-1: USB disconnect, device number 70
[ 1223.955689][   T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1223.977418][   T57] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1224.019770][   T57] usb 3-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2
[ 1224.044363][   T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.056350][   T57] usb 3-1: Product: syz
[ 1224.067525][   T57] usb 3-1: Manufacturer: syz
[ 1224.078002][   T57] usb 3-1: SerialNumber: syz
[ 1224.095112][   T57] usb 3-1: config 0 descriptor??
[ 1224.122577][T20083] sctp: [Deprecated]: syz.0.4791 (pid 20083) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1224.122577][T20083] Use struct sctp_sack_info instead
[ 1224.176785][   T57] pl2303 3-1:0.0: required interrupt-in endpoint missing
[ 1224.557544][ T5265] usb 3-1: USB disconnect, device number 53
[ 1224.947590][ T5319] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1224.987540][ T5230] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1225.068112][T20095] PKCS8: Unsupported PKCS#8 version
[ 1225.169906][ T5319] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1225.179478][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.188648][ T5230] usb 2-1: Using ep0 maxpacket: 32
[ 1225.240013][ T5230] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1225.261072][ T5319] usb 4-1: config 0 descriptor??
[ 1225.276296][ T5230] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1225.292331][ T5319] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1225.325969][ T5230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1225.378419][ T5230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1225.407719][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.415777][ T5230] usb 2-1: Product: syz
[ 1225.447878][ T5230] usb 2-1: SerialNumber: syz
[ 1225.708454][ T5230] usb 2-1: 0:2 : does not exist
[ 1225.728536][T19334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1225.746321][T19334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1225.787942][T19334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1225.803523][T19334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1225.817723][T19334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1225.938284][T19334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1226.562671][T20105] xt_CT: No such helper "snmp_trap"
[ 1226.565677][ T5230] usb 2-1: USB disconnect, device number 71
[ 1227.447931][ T5319] gspca_stv06xx: HDCS-1020 sensor detected
[ 1227.549212][T20102] chnl_net:caif_netlink_parms(): no params data found
[ 1227.720125][ T5319] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71
[ 1227.760092][T20125] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4808'.
[ 1227.770194][ T5319] usb 4-1: USB disconnect, device number 92
[ 1227.811581][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4809'.
[ 1227.974982][T20121] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4805'.
[ 1227.984793][T20121] veth0_vlan: left promiscuous mode
[ 1227.990122][T20121] veth0_vlan: entered allmulticast mode
[ 1227.998161][T20121] veth0_vlan: entered promiscuous mode
[ 1228.373623][T20102] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1228.411154][T20102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1228.445338][T20141] netlink: 'syz.1.4811': attribute type 3 has an invalid length.
[ 1228.453584][T20141] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4811'.
[ 1228.635772][T20102] bridge_slave_0: entered allmulticast mode
[ 1228.658726][T12460] Bluetooth: hci4: command tx timeout
[ 1228.947716][T20102] bridge_slave_0: entered promiscuous mode
[ 1229.238960][T20102] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1229.246218][T20102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1229.255871][T20102] bridge_slave_1: entered allmulticast mode
[ 1229.268925][T20102] bridge_slave_1: entered promiscuous mode
[ 1230.150575][T20102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1230.244104][T20102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1230.531993][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4816'.
[ 1230.676100][T20102] team0: Port device team_slave_0 added
[ 1230.719576][T20102] team0: Port device team_slave_1 added
[ 1230.737655][T12460] Bluetooth: hci4: command tx timeout
[ 1230.776379][T20172] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4824'.
[ 1231.009609][T20102] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1231.017051][T20102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1231.105731][T20102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1231.169174][T20102] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1231.183883][T20102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1231.209778][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1231.514893][T20102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1232.520322][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4826'.
[ 1233.337482][T12460] Bluetooth: hci4: command tx timeout
[ 1233.739837][T20196] netlink: 'syz.1.4832': attribute type 1 has an invalid length.
[ 1233.768134][T20196] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4832'.
[ 1233.841593][T20102] hsr_slave_0: entered promiscuous mode
[ 1233.914346][T20102] hsr_slave_1: entered promiscuous mode
[ 1233.980847][T20102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1234.001071][T20102] Cannot create hsr debugfs directory
[ 1234.627121][   T29] audit: type=1400 audit(2000000524.532:565): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20210 comm="syz.3.4835" daddr=::1c9a:e7ff:fe9a:6f34
[ 1234.808670][T20216] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.4836'.
[ 1235.207718][T20102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1235.263831][T20102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1235.377346][T12460] Bluetooth: hci4: command tx timeout
[ 1235.830998][T20102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1235.867508][T20102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.229308][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.241546][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1241.009028][T20102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1241.039810][T20102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1241.050333][   T57] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1243.767866][T19380] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1243.930431][T20102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1243.957857][T19380] usb 2-1: device descriptor read/64, error -71
[ 1243.981436][T20102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1244.263502][T19380] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1244.428682][T19380] usb 2-1: device descriptor read/64, error -71
[ 1244.547829][T19380] usb usb2-port1: attempt power cycle
[ 1244.662216][T20102] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1244.737876][T20102] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1244.780839][T20102] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1244.852217][T20102] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1245.498726][   T57] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[ 1245.850827][   T57] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1245.887364][   T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.946356][   T57] usb 1-1: config 0 descriptor??
[ 1245.973260][   T57] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1246.120663][T12460] Bluetooth: hci2: unexpected event for opcode 0x0c14
[ 1246.139508][   T29] audit: type=1326 audit(2000000536.042:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20286 comm="syz.2.4858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71c8f779f9 code=0x0
[ 1246.211514][   T29] audit: type=1326 audit(2000000536.112:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20286 comm="syz.2.4858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71c8f779f9 code=0x0
[ 1246.248993][T20102] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1246.346080][T20102] 8021q: adding VLAN 0 to HW filter on device team0
[ 1246.397215][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1246.397371][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1246.440779][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1246.450953][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1246.461479][   T57] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22)
[ 1246.481029][   T57] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22
[ 1246.535733][T20294] team_slave_0: entered promiscuous mode
[ 1246.535963][T20294] team_slave_1: entered promiscuous mode
[ 1246.717840][ T5267] usb 1-1: USB disconnect, device number 70
[ 1248.321040][T12460] Bluetooth: hci7: unexpected event for opcode 0x0c24
[ 1248.325708][T20102] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1248.387657][T19380] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1248.521044][T20320] Process accounting resumed
[ 1248.629954][T19380] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1248.667611][T19380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1248.736606][T19380] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1248.783786][T19380] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1248.820168][T19380] usb 2-1: Manufacturer: syz
[ 1248.849391][T19380] usb 2-1: config 0 descriptor??
[ 1249.047626][T19380] rc_core: IR keymap rc-hauppauge not found
[ 1249.076523][T19380] Registered IR keymap rc-empty
[ 1249.129482][T19380] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1249.181878][T19380] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input78
[ 1249.531564][T20102] veth0_vlan: entered promiscuous mode
[ 1249.547596][T20309] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000
[ 1249.570489][T20102] veth1_vlan: entered promiscuous mode
[ 1249.682100][T19380] usb 2-1: USB disconnect, device number 75
[ 1249.691033][T20102] veth0_macvtap: entered promiscuous mode
[ 1249.731100][T20102] veth1_macvtap: entered promiscuous mode
[ 1249.803533][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1249.836929][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1249.858072][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1249.888720][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1249.923076][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1249.950966][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1249.977326][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1250.017922][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.042171][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1250.073158][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.097388][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1250.127341][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.157373][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1250.177744][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.198229][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1250.237465][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.249590][    T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1250.277785][T20345] netlink: 'syz.2.4873': attribute type 1 has an invalid length.
[ 1250.319314][T20102] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1250.342821][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1250.377409][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.411846][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1250.457419][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.488054][    T9] usb 4-1: config 0 has no interfaces?
[ 1250.498803][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1250.520242][    T9] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[ 1250.540424][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.550613][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.608090][    T9] usb 4-1: Product: syz
[ 1250.612522][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1250.634281][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4875'.
[ 1250.658053][    T9] usb 4-1: Manufacturer: syz
[ 1250.662698][    T9] usb 4-1: SerialNumber: syz
[ 1250.697319][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1250.706545][T12460] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1250.707383][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1250.727955][T12460] CPU: 0 UID: 0 PID: 12460 Comm: kworker/u9:1 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0
[ 1250.727986][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1250.728001][T12460] Workqueue: hci1 hci_rx_work
[ 1250.737382][T20348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4875'.
[ 1250.738943][T12460] 
[ 1250.738954][T12460] Call Trace:
[ 1250.738965][T12460]  <TASK>
[ 1250.738976][T12460]  dump_stack_lvl+0x241/0x360
[ 1250.776082][T12460]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1250.781318][T12460]  ? __pfx__printk+0x10/0x10
[ 1250.785944][T12460]  ? sysfs_create_dir_ns+0x28a/0x3a0
[ 1250.791257][T12460]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[ 1250.796839][T12460]  sysfs_create_dir_ns+0x2ce/0x3a0
[ 1250.801977][T12460]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1250.807623][T12460]  kobject_add_internal+0x435/0x8d0
[ 1250.812832][T12460]  kobject_add+0x152/0x220
[ 1250.817251][T12460]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1250.822459][T12460]  ? device_add+0x3e7/0xbf0
[ 1250.826954][T12460]  ? __pfx_kobject_add+0x10/0x10
[ 1250.831979][T12460]  ? _raw_spin_unlock+0x28/0x50
[ 1250.837011][T12460]  ? get_device_parent+0x165/0x410
[ 1250.842210][T12460]  device_add+0x4e5/0xbf0
[ 1250.846580][T12460]  hci_conn_add_sysfs+0xe8/0x200
[ 1250.851531][T12460]  le_conn_complete_evt+0xc9f/0x12e0
[ 1250.856832][T12460]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1250.862553][T12460]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1250.868194][T12460]  ? __copy_skb_header+0x437/0x5b0
[ 1250.873305][T12460]  ? skb_pull_data+0x112/0x230
[ 1250.878072][T12460]  hci_le_enh_conn_complete_evt+0x185/0x420
[ 1250.884060][T12460]  hci_event_packet+0xa55/0x1540
[ 1250.888998][T12460]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1250.894291][T12460]  ? __pfx_hci_event_packet+0x10/0x10
[ 1250.899662][T12460]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1250.905040][T12460]  ? hci_send_to_monitor+0xd8/0x7f0
[ 1250.910238][T12460]  ? kcov_remote_start+0x9e/0x7e0
[ 1250.915265][T12460]  hci_rx_work+0x3e8/0xca0
[ 1250.919685][T12460]  ? process_scheduled_works+0x945/0x1830
[ 1250.925402][T12460]  process_scheduled_works+0xa2c/0x1830
[ 1250.930966][T12460]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1250.936950][T12460]  ? assign_work+0x364/0x3d0
[ 1250.941541][T12460]  worker_thread+0x86d/0xd40
[ 1250.946144][T12460]  ? __kthread_parkme+0x169/0x1d0
[ 1250.951168][T12460]  ? __pfx_worker_thread+0x10/0x10
[ 1250.956276][T12460]  kthread+0x2f0/0x390
[ 1250.960345][T12460]  ? __pfx_worker_thread+0x10/0x10
[ 1250.965452][T12460]  ? __pfx_kthread+0x10/0x10
[ 1250.970133][T12460]  ret_from_fork+0x4b/0x80
[ 1250.974548][T12460]  ? __pfx_kthread+0x10/0x10
[ 1250.979140][T12460]  ret_from_fork_asm+0x1a/0x30
[ 1250.984002][T12460]  </TASK>
[ 1251.006759][T12460] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1251.030104][T12460] Bluetooth: hci1: failed to register connection device
[ 1251.188071][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1251.307483][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1251.361982][    T9] usb 4-1: config 0 descriptor??
[ 1251.367099][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1251.437390][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1251.511972][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1251.593580][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1251.640531][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1251.692590][T20361] VFS: could not find a valid V7 on nullb0.
[ 1252.029229][T20102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1252.319624][T20102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1252.337861][T12460] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[ 1252.347109][T12460] Bluetooth: hci7: Injecting HCI hardware error event
[ 1252.347972][T20102] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1252.358104][T19334] Bluetooth: hci7: hardware error 0x00
[ 1252.502162][   T57] usb 4-1: USB disconnect, device number 93
[ 1252.547149][T20102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.632147][T20102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.673894][T20102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.721334][T20102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1253.140425][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.197348][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1253.320984][ T2551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.340807][ T2551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1253.498756][T20374] netlink: 'syz.2.4880': attribute type 4 has an invalid length.
[ 1253.605776][T20375] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 1253.698473][T20378] netlink: 'syz.2.4880': attribute type 4 has an invalid length.
[ 1253.701368][   T29] audit: type=1326 audit(2000000543.612:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20379 comm="syz.4.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9addb779f9 code=0x7ffc0000
[ 1253.778497][   T29] audit: type=1326 audit(2000000543.642:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20379 comm="syz.4.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f9addb779f9 code=0x7ffc0000
[ 1253.853043][   T29] audit: type=1326 audit(2000000543.642:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20379 comm="syz.4.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9addb779f9 code=0x7ffc0000
[ 1253.937855][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4886'.
[ 1253.966488][   T29] audit: type=1326 audit(2000000543.642:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20379 comm="syz.4.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9addb779f9 code=0x7ffc0000
[ 1254.253552][T20399] sctp: [Deprecated]: syz.3.4887 (pid 20399) Use of int in maxseg socket option.
[ 1254.253552][T20399] Use struct sctp_assoc_value instead
[ 1254.276110][ T5319] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1254.584464][T19334] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 1254.801065][ T5319] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1255.036934][ T5319] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1255.048668][ T5319] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1255.059811][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1255.071780][T20370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1255.944165][ T5319] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[ 1255.984159][ T5319] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input79
[ 1256.086629][ T5319] usb 3-1: USB disconnect, device number 54
[ 1256.092557][    C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1256.427491][T20425] netlink: 'syz.4.4897': attribute type 10 has an invalid length.
[ 1256.441057][T20425] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4897'.
[ 1256.869442][T20431] Error parsing options; rc = [-22]
[ 1259.815928][   T57] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1259.997613][   T57] usb 4-1: Using ep0 maxpacket: 8
[ 1260.030158][   T57] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1260.057668][   T57] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1260.091128][   T57] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1260.346968][   T57] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1260.356204][   T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.370783][   T57] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1260.376745][   T57] hub 4-1:1.0: probe with driver hub failed with error -5
[ 1260.404196][   T57] cdc_wdm 4-1:1.0: invalid descriptor buffer length
[ 1260.439399][   T57] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1260.678572][   T57] usb 4-1: USB disconnect, device number 94
[ 1261.691604][T20477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4912'.
[ 1261.702711][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4912'.
[ 1261.860596][T19334] Bluetooth: hci1: command 0x0406 tx timeout
[ 1264.343656][T20501] tmpfs: Bad value for 'mpol'
[ 1264.949345][   T57] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1265.206132][   T57] usb 2-1: Using ep0 maxpacket: 8
[ 1265.275978][   T57] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=46.d9
[ 1265.341029][   T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.390874][   T57] usb 2-1: config 0 descriptor??
[ 1265.681718][ T5265] usb 2-1: USB disconnect, device number 76
[ 1265.717555][ T5319] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1265.858278][T20526] fuse: Bad value for 'rootmode'
[ 1265.938164][ T5319] usb 1-1: Using ep0 maxpacket: 32
[ 1265.958176][ T5319] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1265.987633][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.013648][ T5319] usb 1-1: config 0 descriptor??
[ 1266.039810][ T5319] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1266.104005][  T945] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1266.349750][  T945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1266.400984][  T945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1266.426639][  T945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1266.457412][  T945] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[ 1266.466608][  T945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.496483][  T945] usb 4-1: config 0 descriptor??
[ 1266.681182][ T5319] gspca_nw80x: reg_w err -71
[ 1266.685937][ T5319] nw80x 1-1:0.0: probe with driver nw80x failed with error -71
[ 1266.742286][ T5319] usb 1-1: USB disconnect, device number 71
[ 1266.950145][  T945] pyra 0003:1E7D:2C24.003E: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0
[ 1267.137811][ T5230] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1267.185784][T20524] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4931'.
[ 1267.254882][T20524] fuse: Bad value for 'fd'
[ 1267.282943][T20524] overlayfs: overlapping lowerdir path
[ 1267.311832][ T5319] usb 4-1: USB disconnect, device number 95
[ 1267.335086][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1267.369551][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1267.401154][ T5230] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[ 1267.433549][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.463646][ T5230] usb 5-1: config 0 descriptor??
[ 1267.897581][ T5319] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1267.914986][ T5230] cypress 0003:04B4:DE61.003F: unknown main item tag 0x7
[ 1267.947062][ T5230] cypress 0003:04B4:DE61.003F: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0
[ 1268.125347][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1268.159247][ T5319] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[ 1268.202654][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.217829][  T945] usb 5-1: USB disconnect, device number 57
[ 1268.248036][ T5319] usb 1-1: config 0 descriptor??
[ 1269.357576][ T5319] logitech-djreceiver 0003:046D:C513.0040: unknown main item tag 0x0
[ 1269.365768][ T5319] logitech-djreceiver 0003:046D:C513.0040: item fetching failed at offset 5/7
[ 1269.494511][ T5319] logitech-djreceiver 0003:046D:C513.0040: logi_dj_probe: parse failed
[ 1269.509701][ T5319] logitech-djreceiver 0003:046D:C513.0040: probe with driver logitech-djreceiver failed with error -22
[ 1269.589455][ T5319] usb 1-1: USB disconnect, device number 72
[ 1269.725654][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4943'.
[ 1269.957852][T20236] bridge_slave_1: left allmulticast mode
[ 1269.968697][T20236] bridge_slave_1: left promiscuous mode
[ 1269.984575][T20236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.019446][T20236] bridge_slave_0: left allmulticast mode
[ 1270.046508][T20236] bridge_slave_0: left promiscuous mode
[ 1270.285728][T20236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1271.569758][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4949'.
[ 1274.179145][T19334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1274.192172][T19334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1274.219124][T19334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1274.232410][T19334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1274.241305][T19334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1274.248793][T19334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1275.070429][T20236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1275.108552][T20236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1275.133715][T20236] bond0 (unregistering): Released all slaves
[ 1275.166893][T20579] veth0_vlan: entered allmulticast mode
[ 1275.612168][T20588] infiniband syz2: set active
[ 1275.616991][T20588] infiniband syz2: added team_slave_1
[ 1275.623986][T20588] syz2: rxe_create_cq: returned err = -12
[ 1275.629811][T20588] infiniband syz2: Couldn't create ib_mad CQ
[ 1275.635910][T20588] infiniband syz2: Couldn't open port 1
[ 1275.664103][T20588] RDS/IB: syz2: added
[ 1275.668301][T20588] smc: adding ib device syz2 with port count 1
[ 1275.674457][T20588] smc:    ib device syz2 port 1 has pnetid 
[ 1275.869987][   T57] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1276.337486][T12460] Bluetooth: hci5: command tx timeout
[ 1276.750277][   T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1276.785061][   T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1276.815611][T20606] tipc: Started in network mode
[ 1276.829214][T20606] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711
[ 1276.836529][   T57] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1276.867730][T20606] tipc: Enabled bearer <eth:batadv_slave_1>, priority 10
[ 1276.879445][   T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1276.925266][   T57] usb 4-1: config 0 descriptor??
[ 1276.949795][T20612] tipc: Started in network mode
[ 1276.954709][T20612] tipc: Node identity 40d114aa, cluster identity 4711
[ 1277.027414][T20612] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1277.273149][T20615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4962'.
[ 1277.294455][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4964'.
[ 1277.468421][ T5319] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1277.472128][   T57] creative-sb0540 0003:041E:3100.0041: No inputs registered, leaving
[ 1277.600367][   T57] creative-sb0540 0003:041E:3100.0041: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0
[ 1277.644912][T12519] usb 4-1: USB disconnect, device number 96
[ 1277.837505][ T5319] usb 2-1: Using ep0 maxpacket: 8
[ 1277.849952][ T5319] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1277.867462][ T5319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1277.909143][ T5319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1277.937357][ T5319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1277.957600][ T5319] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1278.007361][   T57] tipc: Node number set to 9808554
[ 1278.007496][ T5319] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1278.071384][ T5319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.417457][T12460] Bluetooth: hci5: command tx timeout
[ 1278.453653][ T5319] usb 2-1: GET_CAPABILITIES returned 0
[ 1278.467295][ T5319] usbtmc 2-1:16.0: can't read capabilities
[ 1278.506369][T20630] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1278.675564][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1278.762188][T20236] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1278.823055][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1278.863736][T20236] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1278.969517][T20236] veth0_macvtap: left promiscuous mode
[ 1279.007457][T20236] veth1_vlan: left promiscuous mode
[ 1279.028899][T20236] veth0_vlan: left promiscuous mode
[ 1279.117359][T12519] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1279.451141][   T29] audit: type=1400 audit(2000000569.292:572): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20645 comm="syz.0.4972" daddr=ff02::1
[ 1280.177683][T12519] usb 5-1: Using ep0 maxpacket: 32
[ 1280.335225][T12519] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1280.361466][   T29] audit: type=1400 audit(2000000569.292:573): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20645 comm="syz.0.4972" daddr=::ffff:224.0.0.16 dest=20000
[ 1280.381907][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1280.397400][T12519] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1280.427972][   T57] usb 2-1: USB disconnect, device number 77
[ 1280.449867][T12519] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1280.505868][T12460] Bluetooth: hci5: command tx timeout
[ 1280.511588][T12519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1280.635731][T12519] hub 5-1:4.0: USB hub found
[ 1280.867741][   T29] audit: type=1400 audit(2000000570.762:574): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20651 comm="syz.0.4973" daddr=fc01:: dest=20004
[ 1281.487207][T12519] hub 5-1:4.0: 2 ports detected
[ 1281.492236][T12519] usb 5-1: selecting invalid altsetting 1
[ 1281.507386][T12519] hub 5-1:4.0: Using single TT (err -22)
[ 1281.517037][T12519] hub 5-1:4.0: config failed, can't get hub status (err -5)
[ 1281.589016][T12519] usb 5-1: USB disconnect, device number 58
[ 1282.587342][T12460] Bluetooth: hci5: command tx timeout
[ 1283.237572][T20679] program syz.4.4983 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1283.263936][T20236] team0 (unregistering): Port device team_slave_1 removed
[ 1283.483645][T20236] team0 (unregistering): Port device team_slave_0 removed
[ 1283.675412][   T29] audit: type=1400 audit(2000000573.582:575): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20682 comm="syz.4.4985" daddr=fe80::1b dest=16385
[ 1283.701503][T12460] Bluetooth: hci4: ACL packet for unknown connection handle 203
[ 1285.530985][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4973'.
[ 1285.639457][T20685] tipc: Enabled bearer <eth:macvlan1>, priority 0
[ 1285.962908][T20598] chnl_net:caif_netlink_parms(): no params data found
[ 1287.487665][T20598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.494918][T20598] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1287.527813][T20598] bridge_slave_0: entered allmulticast mode
[ 1287.537658][T20598] bridge_slave_0: entered promiscuous mode
[ 1287.858405][T12519] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1288.628313][T20598] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1288.656384][T20598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1288.707565][T20598] bridge_slave_1: entered allmulticast mode
[ 1288.715100][T20598] bridge_slave_1: entered promiscuous mode
[ 1288.730534][T12519] usb 1-1: Using ep0 maxpacket: 8
[ 1288.740419][T12519] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1288.763493][T12519] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1288.807422][T12519] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1288.867665][T12519] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1288.882907][T20725] UBIFS error (pid: 20725): cannot open "./file0", error -22
[ 1288.907923][T12519] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1288.968410][T20598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1288.977301][T12519] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1288.986549][T12519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.248774][T12519] usb 1-1: usb_control_msg returned -32
[ 1289.254414][T12519] usbtmc 1-1:16.0: can't read capabilities
[ 1289.325989][ T1290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.410521][T20598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1289.501083][T20731] program syz.1.5002 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1289.723372][ T1290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.754173][   T29] audit: type=1400 audit(2000000579.662:576): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20735 comm="syz.1.5005" daddr=::ffff:100.1.1.0
[ 1289.810668][T20598] team0: Port device team_slave_0 added
[ 1289.831295][T20598] team0: Port device team_slave_1 added
[ 1289.980160][ T1290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1290.012613][T20598] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1290.021309][   T57] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1290.059544][T20598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1290.086040][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1290.133516][T20598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1290.147062][T20598] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1290.157298][T20598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1290.195993][T20598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1290.245381][   T57] usb 4-1: Using ep0 maxpacket: 16
[ 1290.279974][   T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.330145][   T57] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[ 1290.397521][   T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.405670][   T57] usb 4-1: Product: syz
[ 1290.420555][   T57] usb 4-1: Manufacturer: syz
[ 1290.425242][   T57] usb 4-1: SerialNumber: syz
[ 1290.446582][ T1290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1290.473153][   T57] usb 4-1: config 0 descriptor??
[ 1290.495863][   T57] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1290.534212][T19334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1290.554574][T19334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1290.565917][T19334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1290.574511][T19334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1290.582556][T19334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1290.595713][T19334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1290.854760][T20598] hsr_slave_0: entered promiscuous mode
[ 1290.875407][T20598] hsr_slave_1: entered promiscuous mode
[ 1290.892379][T20598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1290.922715][T20598] Cannot create hsr debugfs directory
[ 1291.035765][   T29] audit: type=1400 audit(2000000580.942:577): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=20736 comm="syz.3.5006" daddr=fc01:: dest=20002
[ 1291.085761][ T5265] usb 1-1: USB disconnect, device number 73
[ 1291.139177][T20746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5006'.
[ 1291.228003][   T57] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[ 1291.261153][   T57] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110
[ 1292.289581][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5006'.
[ 1292.380374][ T1290] bridge_slave_1: left allmulticast mode
[ 1292.394413][ T1290] bridge_slave_1: left promiscuous mode
[ 1292.415398][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.447469][ T1290] bridge_slave_0: left allmulticast mode
[ 1292.458759][ T1290] bridge_slave_0: left promiscuous mode
[ 1292.471249][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.657608][T19334] Bluetooth: hci4: command tx timeout
[ 1293.405629][T12519] usb 4-1: USB disconnect, device number 97
[ 1294.618325][ T1290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1294.668227][T20763] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5013'.
[ 1294.687852][ T1290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1294.723256][ T1290] bond0 (unregistering): Released all slaves
[ 1294.737409][T19334] Bluetooth: hci4: command tx timeout
[ 1294.896348][T20755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5010'.
[ 1294.967718][ T1290] tipc: Disabling bearer <eth:batadv_slave_1>
[ 1295.028480][ T1290] tipc: Disabling bearer <eth:macvlan1>
[ 1295.099845][ T1290] tipc: Left network mode
[ 1296.817629][T19334] Bluetooth: hci4: command tx timeout
[ 1297.774591][T20598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.373985][T20799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5025'.
[ 1298.427726][T20799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5025'.
[ 1298.591736][T20598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.897797][T19334] Bluetooth: hci4: command tx timeout
[ 1298.992569][T20598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.574754][T20598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.715299][ T1290] hsr_slave_0: left promiscuous mode
[ 1299.768287][ T1290] hsr_slave_1: left promiscuous mode
[ 1299.811998][ T1290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1299.852936][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1299.888248][ T1290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1299.925991][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1300.091552][ T1290] veth1_macvtap: left promiscuous mode
[ 1300.097148][ T1290] veth0_macvtap: left promiscuous mode
[ 1300.160251][ T1290] veth1_vlan: left promiscuous mode
[ 1300.581722][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.588562][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.330067][ T1290] team0 (unregistering): Port device team_slave_1 removed
[ 1303.554601][ T1290] team0 (unregistering): Port device team_slave_0 removed
[ 1306.241718][T20815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5030'.
[ 1306.301180][T20834] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5036'.
[ 1306.842320][T20855] openvswitch: netlink: Missing key (keys=20040, expected=200000)
[ 1306.937043][T20598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1307.071204][T20598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1307.132846][T20598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1307.214031][T20598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1307.334481][T20744] chnl_net:caif_netlink_parms(): no params data found
[ 1307.979612][T20744] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1307.986842][T20744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.079567][T20744] bridge_slave_0: entered allmulticast mode
[ 1308.573669][T20744] bridge_slave_0: entered promiscuous mode
[ 1308.936158][T20744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1308.975045][T20744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.007714][T20744] bridge_slave_1: entered allmulticast mode
[ 1309.036001][T20744] bridge_slave_1: entered promiscuous mode
[ 1309.161515][T20873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5049'.
[ 1309.463528][T20744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1309.516434][T20744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1309.778568][T20744] team0: Port device team_slave_0 added
[ 1309.824221][T20744] team0: Port device team_slave_1 added
[ 1310.385682][T20598] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1310.595655][T20744] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1310.603068][T20744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1310.639526][T20744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1310.690733][T20744] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1310.751295][T20744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1310.898032][T20744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1310.966602][T20598] 8021q: adding VLAN 0 to HW filter on device team0
[ 1311.202230][T20744] hsr_slave_0: entered promiscuous mode
[ 1311.258777][T20744] hsr_slave_1: entered promiscuous mode
[ 1311.336401][T20744] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1311.387450][T20744] Cannot create hsr debugfs directory
[ 1312.300291][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1312.307735][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1312.661221][  T945] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1312.668487][  T945] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1312.827156][T20598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1312.924592][T20598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1313.334987][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'.
[ 1313.521546][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'.
[ 1315.745505][T20933] ip6gretap1: entered promiscuous mode
[ 1315.751093][T20933] ip6gretap1: entered allmulticast mode
[ 1315.863242][   T29] audit: type=1804 audit(2000000605.772:578): pid=20934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.5065" name="/newroot/172/file0/bus" dev="hugetlbfs" ino=86853 res=1 errno=0
[ 1315.948550][T20598] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1316.179520][   T29] audit: type=1804 audit(2000000605.952:579): pid=20934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.5065" name="/newroot/172/file0/bus" dev="hugetlbfs" ino=86853 res=1 errno=0
[ 1316.227158][   T29] audit: type=1804 audit(2000000605.992:580): pid=20934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.5065" name="/newroot/172/file0/bus" dev="hugetlbfs" ino=86853 res=1 errno=0
[ 1316.267503][T20937] Process accounting resumed
[ 1316.552810][T20598] veth0_vlan: entered promiscuous mode
[ 1316.785241][T20598] veth1_vlan: entered promiscuous mode
[ 1316.921833][T20598] veth0_macvtap: entered promiscuous mode
[ 1317.030903][T20598] veth1_macvtap: entered promiscuous mode
[ 1317.165926][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1317.269508][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.279775][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1317.290341][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.303699][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1317.675443][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.736902][T20955] serio: Serial port ptm0
[ 1318.019153][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.048973][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.101517][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.137985][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.177417][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.211369][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.257433][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.287356][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.319787][T20598] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1318.440944][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.453473][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.463605][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.481751][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.514827][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.582636][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.632091][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'.
[ 1318.645679][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.671264][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'.
[ 1318.691836][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.725065][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.767441][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.817450][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.858482][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.897132][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.943030][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.990864][T20598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1319.029734][T20598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1319.072104][T20598] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1322.163349][T20598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.208045][T20598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.251903][T20598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.287331][T20598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1322.368116][T20971] input: syz0 as /devices/virtual/input/input80
[ 1325.740498][T20744] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1325.805374][T20744] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1325.889957][T20744] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1325.950902][T20744] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1325.987549][ T5319] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1326.013301][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1326.046486][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.083027][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5083'.
[ 1326.189959][ T5319] usb 1-1: Using ep0 maxpacket: 16
[ 1326.199114][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1326.207070][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.217015][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1326.269592][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1326.302251][ T5319] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1326.325510][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1326.364321][ T5319] usb 1-1: config 0 descriptor??
[ 1326.503586][T20744] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1326.592567][T20744] 8021q: adding VLAN 0 to HW filter on device team0
[ 1326.644796][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1326.652033][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1326.721901][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1326.729154][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1327.009149][T20744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1327.134252][T21007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1327.188900][T21007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1327.328675][ T5319] hid (null): invalid report_size 812540268
[ 1327.349627][ T5319] hid-generic 0003:0158:0100.0042: unknown main item tag 0x1
[ 1327.365766][ T5319] hid-generic 0003:0158:0100.0042: unexpected long global item
[ 1327.371013][T21010] netlink: 'syz.1.5088': attribute type 29 has an invalid length.
[ 1327.378951][ T5319] hid-generic 0003:0158:0100.0042: probe with driver hid-generic failed with error -22
[ 1328.437452][ T5230] usb 1-1: USB disconnect, device number 74
[ 1328.863916][T21017] IPv6: Can't replace route, no match found
[ 1330.210976][T20744] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1330.587512][T21052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5098'.
[ 1331.260890][T21059] hfs: can't find a HFS filesystem on dev nullb0
[ 1332.732538][ T5266] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1333.168053][ T5266] usb 3-1: Using ep0 maxpacket: 16
[ 1333.199215][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1333.251731][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1333.444051][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1334.027508][ T5266] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00
[ 1334.036642][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1334.050500][ T5266] usb 3-1: config 0 descriptor??
[ 1334.479405][T20744] veth0_vlan: entered promiscuous mode
[ 1334.556743][T20744] veth1_vlan: entered promiscuous mode
[ 1334.752732][T21094] netlink: 'syz.0.5107': attribute type 1 has an invalid length.
[ 1335.504196][ T5266] wacom 0003:056A:0022.0043: Unknown device_type for 'HID 056a:0022'. Assuming pen.
[ 1335.539619][   T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1335.614405][T20744] veth0_macvtap: entered promiscuous mode
[ 1335.638228][ T5266] wacom 0003:056A:0022.0043: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.2-1/input0
[ 1335.687937][T20744] veth1_macvtap: entered promiscuous mode
[ 1335.726189][ T5266] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0022.0043/input/input81
[ 1335.799020][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1335.827829][   T25] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[ 1335.867777][ T5266] usb 3-1: USB disconnect, device number 55
[ 1335.873989][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1335.884480][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.955348][   T25] usb 2-1: config 0 descriptor??
[ 1335.960642][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1335.979541][   T25] usb 2-1: bad CDC descriptors
[ 1335.990380][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.019150][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1336.059904][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.090838][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1336.140522][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.197321][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1336.241975][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.290832][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1336.347360][T19334] Bluetooth: hci1: command 0x0406 tx timeout
[ 1336.352973][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.437419][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1336.450872][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.471249][   T25] usb 2-1: USB disconnect, device number 78
[ 1336.473434][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1336.489631][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.522460][T20744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1336.588550][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.626965][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.657741][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.685405][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.701869][T21103] netlink: 'syz.2.5111': attribute type 11 has an invalid length.
[ 1336.710576][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.732761][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.765171][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.809921][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.842725][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.877259][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.887119][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.957300][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.967175][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1337.017647][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1337.067299][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1337.123688][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1337.178849][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1337.235940][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1337.309772][T20744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1337.431016][T20744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.491010][T20744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.547718][T20744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.556479][T20744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.857326][   T29] audit: type=1400 audit(2000000627.702:581): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=21111 comm="syz.0.5114" saddr=fe80::bb daddr=fe80::aa dest=3618 netif=wpan0
[ 1338.049301][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1338.088676][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1339.007445][T19380] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1339.154382][ T2551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1339.301750][ T2551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1339.374543][T19380] usb 2-1: Using ep0 maxpacket: 16
[ 1339.854536][T19380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1340.005182][T19380] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1340.178421][T19380] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1340.213190][T19380] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1340.246228][T19380] usb 2-1: Manufacturer: syz
[ 1340.284911][T19380] usb 2-1: config 0 descriptor??
[ 1340.341347][   T29] audit: type=1400 audit(2000000630.252:582): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21140 comm="syz.3.5123" daddr=ff01::1 dest=20000
[ 1340.694555][T19380] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1340.742624][T19380] usb 2-1: USB disconnect, device number 79
[ 1340.828620][   T57] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1340.931103][T12460] Bluetooth: hci9: sending frame failed (-49)
[ 1340.940887][T19334] Bluetooth: hci9: Opcode 0x1003 failed: -49
[ 1341.058018][   T57] usb 1-1: Using ep0 maxpacket: 32
[ 1341.096399][   T57] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[ 1341.147845][   T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1341.202258][   T57] usb 1-1: config 0 descriptor??
[ 1341.229956][   T57] gspca_main: sunplus-2.14.0 probing 0458:7006
[ 1341.594737][T21164] input: syz1 as /devices/virtual/input/input84
[ 1341.878826][T21167] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1341.898832][T21167] use the actual size instead.
[ 1341.977572][T19380] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1342.086012][T21168] netlink: 'syz.4.5131': attribute type 4 has an invalid length.
[ 1342.293216][T19380] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[ 1342.348149][T19380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1342.462581][T19380] usb 4-1: config 0 descriptor??
[ 1342.560851][T19380] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input85
[ 1342.647672][   T57] gspca_sunplus: reg_w_riv err -110
[ 1342.661484][   T57] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[ 1342.730444][   T57] usb 1-1: USB disconnect, device number 75
[ 1342.919886][T19380] usb 4-1: USB disconnect, device number 98
[ 1344.839464][ T5230] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1345.077298][ T5230] usb 5-1: Using ep0 maxpacket: 16
[ 1345.149029][ T5230] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1345.198341][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1345.206473][ T5230] usb 5-1: Product: syz
[ 1345.225405][T21181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5135'.
[ 1345.317883][ T5230] usb 5-1: Manufacturer: syz
[ 1345.710197][ T5230] usb 5-1: SerialNumber: syz
[ 1346.108584][T19334] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1346.122512][T19334] Bluetooth: hci4: Injecting HCI hardware error event
[ 1346.152079][T12460] Bluetooth: hci4: hardware error 0x00
[ 1346.281459][ T5230] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1346.393735][ T5230] r8152-cfgselector 5-1: config 0 descriptor??
[ 1348.689453][ T5230] r8152-cfgselector 5-1: can't set config #0, error -71
[ 1348.745371][T19334] Bluetooth: hci2: command 0x0405 tx timeout
[ 1348.760123][ T5230] r8152-cfgselector 5-1: USB disconnect, device number 59
[ 1348.928944][T21200] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[ 1348.935468][T21200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1348.979645][T21200] vhci_hcd vhci_hcd.0: Device attached
[ 1349.287372][T19380] usb 14-1: SetAddress Request (2) to port 0
[ 1349.388690][T19380] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1349.501888][T21201] vhci_hcd: connection reset by peer
[ 1349.614192][   T61] vhci_hcd: stop threads
[ 1349.647747][   T61] vhci_hcd: release socket
[ 1349.757276][   T61] vhci_hcd: disconnect device
[ 1350.168520][   T29] audit: type=1326 audit(2000000640.082:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1350.298919][   T29] audit: type=1326 audit(2000000640.082:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1350.398879][   T29] audit: type=1326 audit(2000000640.082:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1350.467387][T21229] program syz.4.5150 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1350.488198][ T5267] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[ 1350.512205][   T29] audit: type=1326 audit(2000000640.082:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1350.534822][T21229] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1350.619854][   T29] audit: type=1326 audit(2000000640.082:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1350.663418][T12460] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1350.720345][ T5267] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1350.734452][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.752365][ T5267] usb 4-1: Product: syz
[ 1350.766859][ T5267] usb 4-1: Manufacturer: syz
[ 1350.800799][   T29] audit: type=1326 audit(2000000640.082:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1350.821992][ T5267] usb 4-1: SerialNumber: syz
[ 1350.910392][ T5267] usb 4-1: config 0 descriptor??
[ 1350.957539][   T29] audit: type=1326 audit(2000000640.082:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1351.084968][T21234] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1351.124309][   T29] audit: type=1326 audit(2000000640.082:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1351.266459][   T29] audit: type=1326 audit(2000000640.082:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1351.378518][   T29] audit: type=1326 audit(2000000640.082:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.0.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x7ffc0000
[ 1351.395674][T21235] ALSA: mixer_oss: invalid OSS volume ''
[ 1351.444320][   T57] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1351.512341][ T5267] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1351.589256][ T5267] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1351.665462][ T5267] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19)
[ 1351.685252][T21244] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5154'.
[ 1351.727382][   T57] usb 5-1: Using ep0 maxpacket: 32
[ 1351.735629][T21244] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[ 1351.761353][   T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1351.790466][ T5267] usb 4-1: USB disconnect, device number 99
[ 1351.818999][   T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1351.918652][   T57] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1351.974456][   T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1352.027911][   T57] usb 5-1: config 0 descriptor??
[ 1352.062259][   T57] hub 5-1:0.0: USB hub found
[ 1354.502990][T19380] usb 14-1: device descriptor read/8, error -110
[ 1355.265315][T19380] usb usb14-port1: attempt power cycle
[ 1355.348653][T21277] netlink: 'syz.1.5165': attribute type 1 has an invalid length.
[ 1356.850316][T19380] usb usb14-port1: unable to enumerate USB device
[ 1357.648642][   T57] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1357.817401][   T57] usbhid 5-1:0.0: can't add hid device: -32
[ 1357.837389][   T57] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[ 1358.467445][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1358.822070][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'.
[ 1358.937448][T21303] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[ 1360.137838][   T57] usb 5-1: USB disconnect, device number 60
[ 1360.517395][ T5312] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1360.967265][ T5312] usb 1-1: Using ep0 maxpacket: 16
[ 1360.989163][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1361.027324][T19380] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1361.055987][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1361.088334][ T5312] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1361.137485][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1361.162075][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5177'.
[ 1361.205130][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5178'.
[ 1361.208489][   T29] kauditd_printk_skb: 22 callbacks suppressed
[ 1361.208504][   T29] audit: type=1400 audit(2000000651.112:615): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=21329 comm="syz.1.5178" daddr=fe80::aa dest=20002 netif=wpan0
[ 1361.239631][ T5312] usb 1-1: config 0 descriptor??
[ 1361.281275][T19380] usb 4-1: Using ep0 maxpacket: 16
[ 1361.300755][T19380] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1361.325425][T21332] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5178'.
[ 1361.359085][T19380] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[ 1361.388051][   T29] audit: type=1400 audit(2000000651.112:616): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=21329 comm="syz.1.5178" daddr=fe80::aa dest=20002 netif=wpan0
[ 1361.408154][T19380] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[ 1361.418885][T21332] netlink: 'syz.1.5178': attribute type 1 has an invalid length.
[ 1361.426803][T21332] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.5178'.
[ 1361.481041][T19380] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[ 1361.538312][T19380] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1361.573217][T21332] netlink: 'syz.1.5178': attribute type 1 has an invalid length.
[ 1361.577338][T19380] usb 4-1: config 0 has no interface number 0
[ 1361.606669][T19380] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1361.607235][T21332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5178'.
[ 1361.644059][T19380] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1361.709840][T19380] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1361.750776][T19380] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1361.802147][ T5312] waterforce 0003:1044:7A4D.0044: unknown main item tag 0x0
[ 1361.841041][T19380] usb 4-1: config 0 interface 125 has no altsetting 2
[ 1361.881257][ T5312] waterforce 0003:1044:7A4D.0044: item fetching failed at offset 3/4
[ 1361.907880][T19380] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1361.980194][ T5312] waterforce 0003:1044:7A4D.0044: hid parse failed with -22
[ 1362.005590][T19380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.021477][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.033050][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.242713][ T5312] waterforce 0003:1044:7A4D.0044: probe with driver waterforce failed with error -22
[ 1362.292538][T19380] usb 4-1: Product: syz
[ 1362.297985][T19380] usb 4-1: Manufacturer: syz
[ 1362.303415][T19380] usb 4-1: SerialNumber: syz
[ 1362.316313][ T5312] usb 1-1: USB disconnect, device number 76
[ 1362.332219][T19380] usb 4-1: config 0 descriptor??
[ 1362.440336][T19380] usb 4-1: selecting invalid altsetting 2
[ 1362.852518][ T5319] usb 4-1: USB disconnect, device number 100
[ 1363.155156][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1363.859338][T21359] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR
[ 1364.750471][T21376] binder: BINDER_SET_CONTEXT_MGR already set
[ 1364.765502][T21376] binder: 21367:21376 ioctl 4018620d 20000040 returned -16
[ 1364.824547][ T5312] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1365.237753][T19380] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1365.337490][ T5312] usb 2-1: Using ep0 maxpacket: 8
[ 1365.375052][ T5312] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1365.407392][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1365.442971][ T5312] usb 2-1: Product: syz
[ 1365.487496][ T5312] usb 2-1: Manufacturer: syz
[ 1365.508361][ T5312] usb 2-1: SerialNumber: syz
[ 1365.519589][T19380] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config
[ 1365.553384][ T5312] usb 2-1: config 0 descriptor??
[ 1365.559895][   T29] audit: type=1400 audit(2000000655.472:617): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21382 comm="syz.3.5193" daddr=ff01::1
[ 1365.568759][T19380] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[ 1365.618547][T21383] input: syz0 as /devices/virtual/input/input86
[ 1365.638064][T19380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.688684][T19380] usb 3-1: config 0 descriptor??
[ 1365.707056][T19380] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22
[ 1365.768870][T19380] cdc_acm 3-1:0.0: Control and data interfaces are not separated!
[ 1365.787700][T19380] cdc_acm 3-1:0.0: This needs exactly 3 endpoints
[ 1365.794258][T19380] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22
[ 1365.873554][ T5312] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1367.145344][T21407] vivid-007: kernel_thread() failed
[ 1368.054598][   T25] usb 3-1: USB disconnect, device number 56
[ 1368.333260][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1368.418246][ T5312] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1368.464711][ T5312] usb 2-1: USB disconnect, device number 80
[ 1368.500677][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1368.740839][   T29] audit: type=1326 audit(2000000658.652:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1368.762510][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1368.861030][   T29] audit: type=1326 audit(2000000658.682:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1369.003617][   T29] audit: type=1326 audit(2000000658.712:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1369.141717][   T29] audit: type=1326 audit(2000000658.712:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1369.370429][   T29] audit: type=1326 audit(2000000658.712:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1369.393234][    T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1369.412608][   T29] audit: type=1326 audit(2000000658.712:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1370.134266][   T29] audit: type=1326 audit(2000000658.712:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1370.235665][   T29] audit: type=1326 audit(2000000658.712:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1370.318006][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1370.336066][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1370.398423][   T29] audit: type=1326 audit(2000000658.712:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1370.398720][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1370.502056][   T29] audit: type=1326 audit(2000000658.712:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21428 comm="syz.3.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb811779f9 code=0x7ffc0000
[ 1370.511040][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1370.603558][T20238] tipc: Subscription rejected, illegal request
[ 1370.612507][    T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1370.652603][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.717429][    T9] usb 4-1: Product: syz
[ 1370.736177][    T9] usb 4-1: Manufacturer: syz
[ 1370.753463][    T9] usb 4-1: SerialNumber: syz
[ 1370.775931][    T9] usb 4-1: config 0 descriptor??
[ 1370.808103][    T9] ums-isd200 4-1:0.0: USB Mass Storage device detected
[ 1371.112331][    T9] scsi host1: usb-storage 4-1:0.0
[ 1371.181568][    T9] usb 4-1: USB disconnect, device number 101
[ 1372.140934][T21476] i2c i2c-0: Invalid block write size 254
[ 1372.388014][ T5312] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1372.414509][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1372.636279][ T5312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.684329][ T5312] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1372.723394][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.763816][T21495] netlink: 'syz.3.5228': attribute type 32 has an invalid length.
[ 1372.768395][ T5312] usb 3-1: config 0 descriptor??
[ 1372.810920][ T5312] pwc: Askey VC010 type 2 USB webcam detected.
[ 1372.811252][T21495] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5228'.
[ 1372.897040][T21495] unsupported nla_type 8192
[ 1373.017420][T19380] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1373.063245][T21496] netlink: 16114 bytes leftover after parsing attributes in process `syz.0.5227'.
[ 1373.079775][ T5312] pwc: send_video_command error -71
[ 1373.108981][ T5312] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1373.163254][ T5312] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 1373.203319][ T5312] usb 3-1: USB disconnect, device number 57
[ 1373.257345][T19380] usb 2-1: Using ep0 maxpacket: 32
[ 1373.287720][T19380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1373.357358][T19380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1373.400095][T19380] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1373.440038][T19380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.495539][T19380] usb 2-1: config 0 descriptor??
[ 1373.533173][T19380] hub 2-1:0.0: USB hub found
[ 1373.697911][T21498] tipc: Can't bind to reserved service type 0
[ 1373.761463][T19380] hub 2-1:0.0: 1 port detected
[ 1373.788166][ T5312] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1373.978724][T21502] netlink: 'syz.0.5230': attribute type 5 has an invalid length.
[ 1373.986506][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'.
[ 1373.995479][T21502] netlink: 'syz.0.5230': attribute type 1 has an invalid length.
[ 1374.027634][ T5312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1374.087564][ T5312] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1374.137556][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1374.155720][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1374.197802][ T5312] usb 3-1: config 0 descriptor??
[ 1374.222405][ T5312] pwc: Askey VC010 type 2 USB webcam detected.
[ 1374.247443][    T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1374.418407][   T25] hub 2-1:0.0: activate --> -90
[ 1374.487644][    T9] usb 5-1: Using ep0 maxpacket: 16
[ 1374.517377][T19380] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1374.518053][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1374.556948][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1374.608171][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1374.628615][ T5312] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1374.656993][ T5312] pwc: recv_control_msg error -32 req 02 val 2700
[ 1374.657324][    T9] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 1374.682154][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1374.687393][ T5312] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1374.723024][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1374.730892][ T5312] pwc: recv_control_msg error -32 req 04 val 1000
[ 1374.751232][T19380] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1374.755477][    T9] usb 5-1: config 0 descriptor??
[ 1374.772713][ T5312] pwc: recv_control_msg error -32 req 04 val 1300
[ 1374.787258][T19380] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1374.807671][ T5312] pwc: recv_control_msg error -32 req 04 val 1400
[ 1374.828508][ T5312] pwc: recv_control_msg error -32 req 02 val 2000
[ 1374.856622][T19380] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[ 1374.879438][ T5312] pwc: recv_control_msg error -32 req 02 val 2100
[ 1374.922821][   T25] usb 2-1: Failed to suspend device, error -71
[ 1374.923733][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1374.930937][T19380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.000975][T19380] usb 4-1: config 0 descriptor??
[ 1375.033416][T19380] radioshark2 4-1:0.0: Invalid radioSHARK2 device
[ 1375.068766][T19380] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22
[ 1375.084682][T21275] usb 2-1: USB disconnect, device number 81
[ 1375.092543][ T5312] pwc: recv_control_msg error -71 req 02 val 2500
[ 1375.112770][T19380] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1375.135341][ T5312] pwc: recv_control_msg error -71 req 02 val 2400
[ 1375.157414][ T5312] pwc: recv_control_msg error -71 req 02 val 2600
[ 1375.174713][ T5312] pwc: recv_control_msg error -71 req 02 val 2900
[ 1375.182758][ T5312] pwc: recv_control_msg error -71 req 02 val 2800
[ 1375.190692][ T5312] pwc: recv_control_msg error -71 req 04 val 1100
[ 1375.215187][ T5312] pwc: recv_control_msg error -71 req 04 val 1200
[ 1375.237961][ T5312] pwc: Registered as video71.
[ 1375.257082][ T5312] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87
[ 1375.283463][   T29] kauditd_printk_skb: 23 callbacks suppressed
[ 1375.283552][   T29] audit: type=1400 audit(2000000665.192:651): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21516 comm="syz.0.5237" daddr=::ffff:172.20.20.187
[ 1375.309587][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1375.337994][    T9] ntrig 0003:1B96:0008.0045: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0
[ 1375.340682][ T5312] usb 3-1: USB disconnect, device number 58
[ 1375.382817][T21275] usb 4-1: USB disconnect, device number 102
[ 1375.439929][   T29] audit: type=1400 audit(2000000665.272:652): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21516 comm="syz.0.5237" daddr=::ffff:172.20.20.170 dest=20005
[ 1375.460460][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1375.518582][    T9] ntrig 0003:1B96:0008.0045: Firmware version: 2.13.12.1.7 (35a5 3780)
[ 1375.790841][ T5312] usb 5-1: USB disconnect, device number 61
[ 1375.881402][T12460] Bluetooth: hci1: unexpected event for opcode 0x041b
[ 1376.201999][T21532] netlink: 'syz.3.5242': attribute type 1 has an invalid length.
[ 1376.940388][   T29] audit: type=1400 audit(2000000666.822:653): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21536 comm="syz.0.5245" daddr=::ffff:100.1.1.0
[ 1376.959881][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1377.032450][T21541] cannot load conntrack support for proto=3
[ 1378.288674][T21275] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1378.296463][ T5312] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1378.770831][T21545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.625105][ T5312] usb 1-1: Using ep0 maxpacket: 32
[ 1379.637815][T21275] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1379.669832][ T5312] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1379.695515][T21275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.724531][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.754764][T21275] usb 3-1: Product: syz
[ 1379.773659][T21275] usb 3-1: Manufacturer: syz
[ 1379.795882][T21275] usb 3-1: SerialNumber: syz
[ 1379.801785][ T5312] usb 1-1: config 0 descriptor??
[ 1379.841277][ T5312] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1379.848953][T21275] usb 3-1: config 0 descriptor??
[ 1379.880588][T21275] ch341 3-1:0.0: ch341-uart converter detected
[ 1379.903107][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1380.044918][T21275] usb 3-1: failed to receive control message: -71
[ 1380.083215][T21275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1380.149857][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'.
[ 1380.159763][T21275] usb 3-1: USB disconnect, device number 59
[ 1380.167017][T21275] ch341 3-1:0.0: device disconnected
[ 1380.587496][   T25] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1380.844173][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.891280][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1380.925553][   T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1380.944338][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1381.029818][   T25] usb 4-1: config 0 descriptor??
[ 1381.529764][   T25] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0
[ 1381.588444][   T25] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving
[ 1381.680725][   T25] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1381.805737][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.122358][  T945] usb 4-1: USB disconnect, device number 103
[ 1382.630909][T21595] io-wq is not configured for unbound workers
[ 1382.631217][ T5312] gspca_vc032x: reg_w err -71
[ 1382.655885][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.682027][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.706065][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.741275][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.746873][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.783747][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.812718][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.858954][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.883922][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.917769][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.923117][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.964530][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1382.997868][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1383.003224][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1383.041704][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1383.047150][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1383.082013][ T5312] gspca_vc032x: I2c Bus Busy Wait 00
[ 1383.102545][ T5312] gspca_vc032x: Unknown sensor...
[ 1383.118060][ T5312] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[ 1383.173259][ T5312] usb 1-1: USB disconnect, device number 77
[ 1384.684168][T21625] overlayfs: workdir and upperdir must be separate subtrees
[ 1385.274039][T21645] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1386.068016][   T29] audit: type=1400 audit(2000000675.982:654): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21651 comm="syz.2.5287" daddr=::ffff:0.0.0.0 dest=20004
[ 1386.277367][  T945] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1386.479912][  T945] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1386.519266][  T945] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1386.548913][  T945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.577423][    T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1386.622075][  T945] usb 4-1: config 0 descriptor??
[ 1386.799693][    T9] usb 5-1: config index 0 descriptor too short (expected 11076, got 36)
[ 1386.836931][    T9] usb 5-1: config 74 has too many interfaces: 179, using maximum allowed: 32
[ 1386.892926][    T9] usb 5-1: config 74 has 1 interface, different from the descriptor's value: 179
[ 1386.965445][    T9] usb 5-1: config 74 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1387.027508][    T9] usb 5-1: config 74 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1387.082172][    T9] usb 5-1: config 74 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1387.147388][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[ 1387.197477][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1387.651543][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5292'.
[ 1387.713529][   T29] audit: type=1400 audit(2000000677.622:655): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=21647 comm="syz.3.5285" daddr=::1c9a:e7ff:fe9a:6f34
[ 1388.744370][T12460] Bluetooth: hci1: unexpected event for opcode 0x202f
[ 1389.350485][T21692] netlink: 'syz.2.5294': attribute type 3 has an invalid length.
[ 1389.358449][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'.
[ 1392.608975][    T9] usbhid 5-1:74.0: can't add hid device: -32
[ 1392.634337][    T9] usbhid 5-1:74.0: probe with driver usbhid failed with error -32
[ 1393.309662][T12519] usb 4-1: USB disconnect, device number 104
[ 1393.487296][  T945] usb 5-1: USB disconnect, device number 62
[ 1393.803801][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5302'.
[ 1394.883884][T21275] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1395.177316][T21275] usb 4-1: Using ep0 maxpacket: 8
[ 1395.206851][T21275] usb 4-1: config 0 has an invalid interface number: 6 but max is 2
[ 1395.218296][T21275] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[ 1395.226657][T21275] usb 4-1: config 0 has no interface number 1
[ 1395.251591][T21275] usb 4-1: config 0 has no interface number 2
[ 1395.277514][T21275] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[ 1395.286885][T21275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1395.324884][T21275] usb 4-1: config 0 descriptor??
[ 1395.615825][T21275] qcserial 4-1:0.6: Qualcomm USB modem converter detected
[ 1395.706993][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5307'.
[ 1395.751461][T21726] lo speed is unknown, defaulting to 1000
[ 1395.791577][T21726] lo speed is unknown, defaulting to 1000
[ 1395.810635][T21732] autofs: Bad value for 'fd'
[ 1395.831370][T21726] lo speed is unknown, defaulting to 1000
[ 1396.977410][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1397.118435][T21726] infiniband syz1: set down
[ 1397.124827][ T5230] lo speed is unknown, defaulting to 1000
[ 1397.150111][T21726] infiniband syz1: added lo
[ 1397.170378][T21726] syz1: rxe_create_cq: returned err = -12
[ 1397.196605][T21726] infiniband syz1: Couldn't create ib_mad CQ
[ 1397.207792][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1397.233030][T21726] infiniband syz1: Couldn't open port 1
[ 1397.240215][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1397.257725][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1397.378630][    T9] usb 3-1: config 0 has no interface number 0
[ 1397.388291][T21726] RDS/IB: syz1: added
[ 1397.392344][T21726] smc: adding ib device syz1 with port count 1
[ 1397.405007][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1397.424336][T21726] smc:    ib device syz1 port 1 has pnetid 
[ 1397.432769][    T9] usb 3-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd
[ 1397.444879][T21726] lo speed is unknown, defaulting to 1000
[ 1397.452979][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.522191][   T29] audit: type=1400 audit(2000000687.432:656): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=21749 comm="syz.4.5316" saddr=fb80::bb daddr=fe80::aa dest=20002 netif=wpan0
[ 1397.544954][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1397.603804][   T88] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents
[ 1397.627429][ T5230] lo speed is unknown, defaulting to 1000
[ 1397.638624][    T9] usb 3-1: Product: syz
[ 1397.679203][    T9] usb 3-1: Manufacturer: syz
[ 1397.718577][    T9] usb 3-1: SerialNumber: syz
[ 1397.753245][    T9] usb 3-1: config 0 descriptor??
[ 1398.037295][ T5230] usb 4-1: USB disconnect, device number 105
[ 1398.086137][    T9] qmi_wwan 3-1:0.1: probe with driver qmi_wwan failed with error -22
[ 1398.096617][ T5230] qcserial 4-1:0.6: device disconnected
[ 1398.131945][T21726] lo speed is unknown, defaulting to 1000
[ 1398.138223][   T29] audit: type=1326 audit(2000000688.042:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21305779f9 code=0x0
[ 1398.144169][    T9] usb 3-1: USB disconnect, device number 60
[ 1398.159431][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1398.274311][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'.
[ 1398.396153][T21761] netlink: 'syz.0.5318': attribute type 10 has an invalid length.
[ 1398.600305][T21761] team0: Failed to send options change via netlink (err -105)
[ 1398.663132][T21761] team0: Port device netdevsim0 added
[ 1398.746232][T19380] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[ 1398.809187][T21726] lo speed is unknown, defaulting to 1000
[ 1399.579388][T21726] lo speed is unknown, defaulting to 1000
[ 1399.812791][T12519] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1399.937472][T20027] Bluetooth: hci5: command 0x0406 tx timeout
[ 1400.624423][T12519] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1400.644950][T12519] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1400.657991][T12519] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1400.667007][T12519] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1400.681595][T12519] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1400.699273][T12519] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1400.709197][T12519] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1400.717742][T12519] usb 4-1: Product: syz
[ 1400.721944][T12519] usb 4-1: Manufacturer: syz
[ 1400.758443][T12519] cdc_wdm 4-1:1.0: skipping garbage
[ 1400.764945][T12519] cdc_wdm 4-1:1.0: skipping garbage
[ 1400.811967][T12519] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1400.840824][T12519] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1401.018948][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1401.057068][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1401.109075][T12519] usb 4-1: USB disconnect, device number 106
[ 1401.159155][T21726] lo speed is unknown, defaulting to 1000
[ 1401.817713][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5335'.
[ 1401.826626][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5335'.
[ 1402.182174][T21726] lo speed is unknown, defaulting to 1000
[ 1403.249459][T21726] lo speed is unknown, defaulting to 1000
[ 1403.591297][T21726] lo speed is unknown, defaulting to 1000
[ 1404.937808][T21726] lo speed is unknown, defaulting to 1000
[ 1405.017358][T12519] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1405.257323][T12519] usb 3-1: Using ep0 maxpacket: 8
[ 1405.314986][T12519] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1405.417248][T12519] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[ 1405.438863][T21851] input: syz0 as /devices/virtual/input/input88
[ 1405.445195][T21851] input: failed to attach handler leds to device input88, error: -6
[ 1405.463570][T12519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.549578][T12519] usb 3-1: Product: syz
[ 1405.553809][T12519] usb 3-1: Manufacturer: syz
[ 1405.633787][T12519] usb 3-1: SerialNumber: syz
[ 1405.698030][T12519] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input89
[ 1405.714121][T21726] lo speed is unknown, defaulting to 1000
[ 1405.970594][ T4656] bcm5974 3-1:1.0: could not read from device
[ 1406.127698][T12519] usb 3-1: USB disconnect, device number 61
[ 1406.499649][T20027] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1406.527738][T20027] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1406.545087][T20027] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1406.598008][T21853] trusted_key: encrypted_key: insufficient parameters specified
[ 1406.616215][T20027] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1406.631334][T20027] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1406.646434][T20027] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1407.237967][   T29] audit: type=1804 audit(2000000697.122:658): pid=21871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.5357" name="/newroot/248/bus/file0" dev="overlay" ino=1343 res=1 errno=0
[ 1407.467429][   T30] INFO: task syz.2.4917:20483 blocked for more than 143 seconds.
[ 1407.475179][   T30]       Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0
[ 1407.576696][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1407.635809][   T30] task:syz.2.4917      state:D stack:27360 pid:20483 tgid:20482 ppid:19271  flags:0x00000004
[ 1407.727419][   T30] Call Trace:
[ 1407.730788][   T30]  <TASK>
[ 1407.733744][   T30]  __schedule+0x17ae/0x4a10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1407.786683][T21863] lo speed is unknown, defaulting to 1000
[ 1407.797537][   T30]  ? __pfx___schedule+0x10/0x10
[ 1407.882879][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1407.901002][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[ 1407.906515][   T30]  ? schedule+0x90/0x320
[ 1407.987344][   T30]  schedule+0x14b/0x320
[ 1407.991621][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1407.997105][   T30]  __ww_mutex_lock+0xec2/0x2790
[ 1408.105447][   T30]  ? __ww_mutex_lock+0xb08/0x2790
[ 1408.138371][   T30]  ? drm_modeset_lock+0x6f/0x90
[ 1408.167712][   T30]  ? __pfx___ww_mutex_lock+0x10/0x10
[ 1408.173089][   T30]  ? __drm_mode_object_find+0x448/0x5d0
[ 1408.207827][   T30]  ww_mutex_lock+0x40/0x1f0
[ 1408.212401][   T30]  ? drm_modeset_lock+0x65/0x90
[ 1408.251213][   T30]  drm_modeset_lock+0x6f/0x90
[ 1408.256049][   T30]  drm_mode_getplane+0xf0/0x7a0
[ 1408.287284][   T30]  drm_ioctl_kernel+0x33a/0x440
[ 1408.292348][   T30]  ? __pfx_drm_mode_getplane+0x10/0x10
[ 1408.325032][   T30]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1408.348982][   T30]  ? __might_fault+0xc6/0x120
[ 1408.378173][   T30]  drm_ioctl+0x611/0xad0
[ 1408.382501][   T30]  ? __pfx_drm_mode_getplane+0x10/0x10
[ 1408.407325][   T30]  ? __pfx_drm_ioctl+0x10/0x10
[ 1408.412372][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1408.438622][   T30]  ? security_file_ioctl+0x87/0xb0
[ 1408.443831][   T30]  ? __pfx_drm_ioctl+0x10/0x10
[ 1408.478067][   T30]  __se_sys_ioctl+0xfc/0x170
[ 1408.482730][   T30]  do_syscall_64+0xf3/0x230
[ 1408.507497][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1408.512247][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.548668][   T30] RIP: 0033:0x7f71c8f779f9
[ 1408.553142][   T30] RSP: 002b:00007f71c9ce7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1408.587274][   T30] RAX: ffffffffffffffda RBX: 00007f71c9105f80 RCX: 00007f71c8f779f9
[ 1408.596052][   T30] RDX: 0000000020000180 RSI: 00000000c02064b6 RDI: 0000000000000003
[ 1408.647310][   T30] RBP: 00007f71c8fe58ee R08: 0000000000000000 R09: 0000000000000000
[ 1408.655336][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1408.727732][   T30] R13: 000000000000000b R14: 00007f71c9105f80 R15: 00007fffac777968
[ 1408.735784][   T30]  </TASK>
[ 1408.739877][T12460] Bluetooth: hci9: command tx timeout
[ 1408.807285][   T30] 
[ 1408.807285][   T30] Showing all locks held in the system:
[ 1408.815060][   T30] 2 locks held by kworker/u8:0/11:
[ 1408.857230][   T30]  #0: ffff88801bae6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1408.917276][   T30]  #1: ffffc90000107d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1408.957276][   T30] 1 lock held by khungtaskd/30:
[ 1408.962189][   T30]  #0: ffffffff8e7382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 1409.007294][   T30] 2 locks held by kswapd0/88:
[ 1409.012063][   T30] 2 locks held by getty/4972:
[ 1409.016836][   T30]  #0: ffff88802abc00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1409.068156][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[ 1409.107284][   T30] 3 locks held by syz.4.4745/19950:
[ 1409.112526][   T30] 2 locks held by kworker/u8:10/20236:
[ 1409.137306][   T30] 1 lock held by syz.2.4917/20483:
[ 1409.142475][   T30]  #0: ffff8880202ec0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90
[ 1409.187239][   T30] 3 locks held by syz.1.5307/21726:
[ 1409.192479][   T30]  #0: ffff88802d904d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[ 1409.227452][   T30]  #1: ffff88802d904078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[ 1409.257269][   T30]  #2: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 1409.307234][   T30] 1 lock held by syz.3.5337/21808:
[ 1409.312398][   T30]  #0: ffff8880202ec0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90
[ 1409.347230][   T30] 1 lock held by syz.3.5337/21813:
[ 1409.352390][   T30]  #0: ffff8880202ec0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90
[ 1409.407769][   T30] 1 lock held by syz.4.5353/21852:
[ 1409.412936][   T30]  #0: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 1409.447309][   T30] 1 lock held by syz-executor/21863:
[ 1409.452638][   T30]  #0: ffffffff8fa62650 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[ 1409.505653][   T30] 
[ 1409.527388][   T30] =============================================
[ 1409.527388][   T30] 
[ 1409.567249][   T30] NMI backtrace for cpu 0
[ 1409.571630][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0
[ 1409.582159][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1409.592244][   T30] Call Trace:
[ 1409.595549][   T30]  <TASK>
[ 1409.598493][   T30]  dump_stack_lvl+0x241/0x360
[ 1409.603207][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1409.608429][   T30]  ? __pfx__printk+0x10/0x10
[ 1409.613040][   T30]  ? vprintk_emit+0x631/0x770
[ 1409.617749][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[ 1409.622797][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[ 1409.627774][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1409.633248][   T30]  ? _printk+0xd5/0x120
[ 1409.637426][   T30]  ? __pfx__printk+0x10/0x10
[ 1409.642031][   T30]  ? __wake_up_klogd+0xcc/0x110
[ 1409.646895][   T30]  ? __pfx__printk+0x10/0x10
[ 1409.651505][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 1409.656544][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1409.662546][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[ 1409.668556][   T30]  watchdog+0xfee/0x1030
[ 1409.672822][   T30]  ? watchdog+0x1ea/0x1030
[ 1409.677261][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1409.681974][   T30]  kthread+0x2f0/0x390
[ 1409.686072][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1409.690770][   T30]  ? __pfx_kthread+0x10/0x10
[ 1409.695380][   T30]  ret_from_fork+0x4b/0x80
[ 1409.699813][   T30]  ? __pfx_kthread+0x10/0x10
[ 1409.704428][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1409.709230][   T30]  </TASK>
[ 1409.713783][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1409.719755][    C1] NMI backtrace for cpu 1
[ 1409.719768][    C1] CPU: 1 UID: 0 PID: 20236 Comm: kworker/u8:10 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0
[ 1409.719787][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1409.719798][    C1] Workqueue: bat_events batadv_nc_worker
[ 1409.719822][    C1] RIP: 0010:match_held_lock+0x1/0xb0
[ 1409.719843][    C1] Code: 75 11 48 89 d8 48 83 c4 10 5b 41 5e 41 5f c3 cc cc cc cc e8 11 f9 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <53> bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 20 00
[ 1409.719857][    C1] RSP: 0018:ffffc90003e3f950 EFLAGS: 00000087
[ 1409.719871][    C1] RAX: 0000000000000003 RBX: 0000000000000002 RCX: ffffc90003e3f903
[ 1409.719882][    C1] RDX: 1ffff920007c7f3c RSI: ffff88814f1d9498 RDI: ffff88802b188b30
[ 1409.719894][    C1] RBP: ffffc90003e3fa98 R08: ffffffff8ff6956f R09: 1ffffffff1fed2ad
[ 1409.719907][    C1] R10: dffffc0000000000 R11: fffffbfff1fed2ae R12: 000000000000000a
[ 1409.719918][    C1] R13: 0000000000000002 R14: ffff88802b188b30 R15: dffffc0000000000
[ 1409.719929][    C1] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 1409.719943][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1409.719955][    C1] CR2: 000055555ef307e0 CR3: 000000000e534000 CR4: 00000000003506f0
[ 1409.719969][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1409.719979][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1409.719989][    C1] Call Trace:
[ 1409.719996][    C1]  <NMI>
[ 1409.720003][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 1409.720022][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1409.720042][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1409.720067][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1409.720086][    C1]  ? nmi_handle+0x14f/0x5a0
[ 1409.720101][    C1]  ? nmi_handle+0x2a/0x5a0
[ 1409.720117][    C1]  ? match_held_lock+0x1/0xb0
[ 1409.720135][    C1]  ? default_do_nmi+0x63/0x160
[ 1409.720152][    C1]  ? exc_nmi+0x123/0x1f0
[ 1409.720169][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1409.720190][    C1]  ? match_held_lock+0x1/0xb0
[ 1409.720209][    C1]  ? match_held_lock+0x1/0xb0
[ 1409.720229][    C1]  ? match_held_lock+0x1/0xb0
[ 1409.720248][    C1]  </NMI>
[ 1409.720253][    C1]  <TASK>
[ 1409.720259][    C1]  lock_release+0x285/0xa30
[ 1409.720279][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1409.720297][    C1]  ? batadv_nc_purge_paths+0x30f/0x3b0
[ 1409.720316][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1409.720335][    C1]  ? do_raw_spin_lock+0x14f/0x370
[ 1409.720351][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1409.720372][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1409.720390][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[ 1409.720409][    C1]  ? batadv_nc_purge_paths+0x30f/0x3b0
[ 1409.720427][    C1]  _raw_spin_unlock_bh+0x1b/0x40
[ 1409.720445][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[ 1409.720465][    C1]  batadv_nc_purge_paths+0x30f/0x3b0
[ 1409.720496][    C1]  batadv_nc_worker+0x365/0x610
[ 1409.720517][    C1]  ? process_scheduled_works+0x945/0x1830
[ 1409.720536][    C1]  process_scheduled_works+0xa2c/0x1830
[ 1409.720567][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1409.720589][    C1]  ? assign_work+0x364/0x3d0
[ 1409.720609][    C1]  worker_thread+0x86d/0xd40
[ 1409.720634][    C1]  ? __kthread_parkme+0x169/0x1d0
[ 1409.720655][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1409.720673][    C1]  kthread+0x2f0/0x390
[ 1409.720693][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1409.720710][    C1]  ? __pfx_kthread+0x10/0x10
[ 1409.720728][    C1]  ret_from_fork+0x4b/0x80
[ 1409.720747][    C1]  ? __pfx_kthread+0x10/0x10
[ 1409.720767][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1409.720792][    C1]  </TASK>
[ 1410.288109][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1410.295006][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0
[ 1410.305524][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1410.315602][   T30] Call Trace:
[ 1410.318899][   T30]  <TASK>
[ 1410.321844][   T30]  dump_stack_lvl+0x241/0x360
[ 1410.326557][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1410.331789][   T30]  ? __pfx__printk+0x10/0x10
[ 1410.336413][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1410.342436][   T30]  ? vscnprintf+0x5d/0x90
[ 1410.346788][   T30]  panic+0x349/0x860
[ 1410.350707][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1410.356880][   T30]  ? __pfx_panic+0x10/0x10
[ 1410.361307][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[ 1410.366701][   T30]  ? __irq_work_queue_local+0x137/0x410
[ 1410.372268][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1410.377659][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1410.383836][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 1410.390017][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 1410.396199][   T30]  watchdog+0x102d/0x1030
[ 1410.400561][   T30]  ? watchdog+0x1ea/0x1030
[ 1410.405006][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1410.409698][   T30]  kthread+0x2f0/0x390
[ 1410.413785][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1410.418477][   T30]  ? __pfx_kthread+0x10/0x10
[ 1410.423087][   T30]  ret_from_fork+0x4b/0x80
[ 1410.427526][   T30]  ? __pfx_kthread+0x10/0x10
[ 1410.432139][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1410.436942][   T30]  </TASK>
[ 1410.440208][   T30] Kernel Offset: disabled
[ 1410.444560][   T30] Rebooting in 86400 seconds..