Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts.
2020/09/03 10:59:35 fuzzer started
2020/09/03 10:59:36 dialing manager at 10.128.0.26:46153
2020/09/03 10:59:36 syscalls: 3166
2020/09/03 10:59:36 code coverage: enabled
2020/09/03 10:59:36 comparison tracing: enabled
2020/09/03 10:59:36 extra coverage: enabled
2020/09/03 10:59:36 setuid sandbox: enabled
2020/09/03 10:59:36 namespace sandbox: enabled
2020/09/03 10:59:36 Android sandbox: /sys/fs/selinux/policy does not exist
2020/09/03 10:59:36 fault injection: enabled
2020/09/03 10:59:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/09/03 10:59:36 net packet injection: enabled
2020/09/03 10:59:36 net device setup: enabled
2020/09/03 10:59:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/09/03 10:59:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/09/03 10:59:36 USB emulation: enabled
2020/09/03 10:59:36 hci packet injection: enabled
11:04:22 executing program 0:

[  432.039773][ T8495] IPVS: ftp: loaded support on port[0] = 21
[  432.521875][ T8495] chnl_net:caif_netlink_parms(): no params data found
[  432.673044][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.680335][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.689783][ T8495] device bridge_slave_0 entered promiscuous mode
[  432.709262][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.717056][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.726413][ T8495] device bridge_slave_1 entered promiscuous mode
[  432.777671][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.793999][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.845643][ T8495] team0: Port device team_slave_0 added
[  432.858504][ T8495] team0: Port device team_slave_1 added
[  432.902601][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.909663][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.935818][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.957001][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.964972][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.991079][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.055791][ T8495] device hsr_slave_0 entered promiscuous mode
[  433.066099][ T8495] device hsr_slave_1 entered promiscuous mode
[  433.394257][ T8495] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  433.409750][ T8495] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  433.475224][ T8495] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  433.513292][ T8495] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  433.827968][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.866582][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  433.875827][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  433.892514][ T8495] 8021q: adding VLAN 0 to HW filter on device team0
[  433.920806][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  433.930678][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  433.939879][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.947228][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.956272][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  433.966219][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  433.975580][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.982873][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.994655][ T3802] Bluetooth: hci0: command 0x0409 tx timeout
[  434.001965][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  434.037273][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  434.072227][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  434.083222][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  434.093673][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  434.141537][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  434.151677][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  434.162021][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  434.172362][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  434.181920][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  434.206349][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  434.215860][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  434.240278][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  434.297047][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  434.305248][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  434.340367][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.403833][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  434.413856][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  434.476976][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  434.488216][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  434.506489][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  434.516142][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  434.542299][ T8495] device veth0_vlan entered promiscuous mode
[  434.566100][ T8495] device veth1_vlan entered promiscuous mode
[  434.639757][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  434.649603][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  434.658981][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  434.668838][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  434.694800][ T8495] device veth0_macvtap entered promiscuous mode
[  434.716265][ T8495] device veth1_macvtap entered promiscuous mode
[  434.771943][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.779601][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  434.789073][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  434.798669][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  434.808779][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  434.834255][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.874377][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  434.884243][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
11:04:27 executing program 0:

11:04:27 executing program 0:

11:04:27 executing program 0:

11:04:28 executing program 0:

[  436.022983][ T8706] Bluetooth: hci0: command 0x041b tx timeout
11:04:28 executing program 0:

11:04:28 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8a000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='&-\xf7!,proccpuset)wlan1vboxnet0\x00')

11:04:28 executing program 0:
clone(0x1000000218007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100))
add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000), 0xffffffffffffff2a, 0xfffffffffffffffe)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x7ff}, 0x16, 0x0)

11:04:28 executing program 0:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="b646b8d1a1edbe42c8cf90e8f884ff101b999348cc80015e8f85c086df1c6d8fc253afcefd01f813a9f1628c55f16e34d0d4ac6239201c66"], 0xc)
symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
close(r0)
connect(0xffffffffffffffff, &(0x7f0000000300)=@sco={0x1f, @none}, 0x80)
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x3, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x800, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc019dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da7f040000009d80e6e596575e6b44c483adc4b5fdeaaa47b19b5636505ac7757a520c406912e1ffedb665875880214367de884c4e6fc7cd7505290b29f09f232a0ffc574981d7096b74"], 0x14f)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
setfsgid(r3)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0xffffffff})
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000140)={0x6})
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000001c0)={0x0, 0x3})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  436.754253][    C1] sd 0:0:1:0: [sg0] tag#1684 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  436.764993][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB: Test Unit Ready
[  436.771824][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.781697][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.791566][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.801433][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.811289][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.821145][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.831008][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.840862][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.850722][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.860575][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.870432][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.880505][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.890298][    C1] sd 0:0:1:0: [sg0] tag#1684 CDB[c0]: 00 00 00 00 00 00 00 00
[  437.184159][    C1] sd 0:0:1:0: [sg0] tag#1689 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  437.194921][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB: Test Unit Ready
[  437.201695][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.211559][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.221431][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.231342][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.241209][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.251066][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.260938][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.270823][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.280685][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.290527][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.300451][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.310228][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  437.320081][    C1] sd 0:0:1:0: [sg0] tag#1689 CDB[c0]: 00 00 00 00 00 00 00 00
11:04:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b5b070f31003100000000000000000000003b00000000005d"], 0x78)
r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x171202)
ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000040))

11:04:30 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000100)=0x7ff, 0x4)
setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000080), 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000080)={{0x3, 0x0, @reserved="209e0f93a08e20aac5ab62b606d7a61d531ed691388dd371a80f1a3b3ae8db9a"}})
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8)
sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@x25={0x9, @null='               \x00'}, 0xfffffffffffffc83, 0x0, 0x0, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x116}}], 0x18}, 0x40004)

11:04:30 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
prctl$PR_GET_DUMPABLE(0x3)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  438.091577][ T8706] Bluetooth: hci0: command 0x040f tx timeout
[  438.520697][ T8707] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  438.760936][ T8707] usb 1-1: Using ep0 maxpacket: 16
[  438.881285][ T8707] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  438.894775][ T8707] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  438.904163][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.962477][ T8707] usb 1-1: config 0 descriptor??
[  439.009485][ T8707] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  439.215121][ T8709] usb 1-1: USB disconnect, device number 2
[  439.800432][ T8709] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  440.041681][ T8709] usb 1-1: Using ep0 maxpacket: 32
11:04:32 executing program 1:
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)=0xfffff82a)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000040)={"222cab17fc0c760273cf689cf0a06b8198b7846a606cc75321489d963a7f", 0x7fff, 0x2, 0x6, [0x6, 0x3, 0x0, 0x7, 0x3f, 0xff, 0x1f, 0x3, 0x5, 0x4, 0x4, 0x1ff, 0x4, 0x5, 0x8, 0xffff, 0x4]})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x660601, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x400000)
getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000140)=""/115, &(0x7f00000001c0)=0x73)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x101)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8)
ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000000280)=0x1)
pipe2(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000300))
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xfc, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x684}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x1)
sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x18)
recvfrom$phonet(r4, &(0x7f0000000600)=""/115, 0x73, 0x10020, &(0x7f0000000680)={0x23, 0x2, 0x1, 0x8}, 0x10)
r5 = openat$random(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/urandom\x00', 0x800, 0x0)
r6 = dup(r5)
bind$xdp(r0, &(0x7f0000000700)={0x2c, 0xb, 0x0, 0x1b, r1}, 0x10)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000740)=0x81)
write(r6, &(0x7f0000000780)="babad10c284422e1cc45c7dcab3d7cec030fae35570241db8d66d88f4218dbda65f7df90b500bd53605adb1aa559df6b6a6b4098fa1f8ddb5f5582b2ba600278523f5ed3e0e4cc94d8c991767e701907ac710fcf3bdd4281aed28285806d315e122163333b99567c9f41f0d09202ca6744b4562e8b190f59796e53b321f78e66cc151d1b278a21cd2808308beac4004e050fc56d6eb500a15349fd9215b61a98116037d85eaa1b88e26bae9d4cf26156510521a80245150c06cd695717e077eb9994e13f40b9a28c439750bbc967b7796e92fcc727eac372a5093acb15bb32e710e77fcc8c40f6bdf4d24585d92b2546d65f4688ce", 0xf5)
setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000940), 0x4)

[  440.161934][ T8709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.173201][ T8709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.180349][ T8706] Bluetooth: hci0: command 0x0419 tx timeout
[  440.183226][ T8709] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[  440.198216][ T8709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.254301][ T8709] usb 1-1: config 0 descriptor??
[  440.293515][ T8709] hub 1-1:0.0: USB hub found
[  440.591704][ T8709] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  440.607309][ T8709] usbhid 1-1:0.0: can't add hid device: -22
[  440.613757][ T8709] usbhid: probe of 1-1:0.0 failed with error -22
11:04:33 executing program 0:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000240)="39f497f23f87694a71cf5a688c30574e6dd24873cb16797ff9811cdbc33a788aa234c4a0ed06bedb567af78fc2846812b858df1b6cd0dc247ff847a121429bba78d4d55ad6f7c94bf5d5d303d25acdf8e11e405bf5972282a4baae5187ec35e0930e1643987a9775f5b42ce4abda7275674e39f93ce91581fc7e3c8826c924d4978b7ea78d44a1aee75dfd8e04cf5eaffbc598dfe3ba28a066348641ab634fefb3400bcfa7888afd206862a48838f4e66bce402ee948edd50fc6f261d37632a1fb08b835c24a5253f35732ce9b3a64c7c7ca91b7a9d286c0ec3be88ee738f2ea0a5d73e1464961736d0c6165ccdc1fa1bd2f22", 0xfffffffffffffce9, 0x0, &(0x7f0000000100)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}], 0x10)
setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3a)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x4800, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000200))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0x14)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x8, @mcast2}, 0x100, [0x9, 0x0, 0x0, 0x204, 0x4, 0x4, 0x6, 0x1]}, 0x5c)
setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300250069000007a2e407edab1d0558100000003e038107a2770e1419000a0010000000000003f5000000000000ef38bf461e59d7", 0x330}], 0x1)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, [], 0x33}, 0x5}, {0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x5, 0x1]}, 0x5c)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000a1400032dbd7000ffdbdf250800030003000000081a00150003008b929993e1692642358c3b47dc4f58e91d4dcc1f4df62df59d9f17808f20cf31dde8ff0ca3d15b4ce1c8ca8ff1a61acc596e6049bb7fcedc79872e316c6d353e2fc36e80b7c49f7797976a594422edba488cb892f8ddb01e1c3086bc2d491db77221cdcaaf6d4f57aa634508bdfa248f9bba3880239439591e1192af788b39f541e25b790d8b5d9e285bb6a4a2cd409708ad60c1d70ea05d06f89b0517928458633d7fd46ede2fd5527d2801013742665bf638a91a8e2ca8cdf587a9ce663c"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40001)

[  441.731855][   T27] usb 1-1: USB disconnect, device number 3
[  441.788481][ T8783] IPVS: ftp: loaded support on port[0] = 21
[  441.926827][ T8789] IPVS: ftp: loaded support on port[0] = 21
[  441.966750][ T8786] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  441.975271][ T8786] device team0 entered promiscuous mode
[  441.981017][ T8786] device team_slave_0 entered promiscuous mode
[  441.987734][ T8786] device team_slave_1 entered promiscuous mode
[  441.996969][ T8786] team0: Cannot enslave team device to itself
[  442.196261][ T8783] IPVS: ftp: loaded support on port[0] = 21
[  442.237890][ T8801] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  442.246597][ T8801] team0: Cannot enslave team device to itself
[  442.392361][  T580] tipc: TX() has been purged, node left!
11:04:34 executing program 0:
fspick(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009030800418e00000004fcff", 0x58}], 0x1)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000100)={0x3, 0x3, 0x8, 0x3, 0x3, 0xfff, 0x1000, 0x7fff, 0x7, 0x7, 0x2, 0x80000, 0xfffff6af, 0xcd86})

[  442.841086][ T8789] chnl_net:caif_netlink_parms(): no params data found
11:04:35 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setsig(r0, 0xa, 0x39)
ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xffff, 0xc4, &(0x7f0000000080)={0x0, 0x14, 0x1, 0xa0, 0x3}, 0x8, 0x26ade266, 0x1f, 0x0, 0xffffffff, 0x8, &(0x7f0000000180)="1dbf9cc4c2ac57616a58bca6932fd208684c3f9c7233d402886d83f1960ce4da9a8edc16c77802dee0b8370e3fb939878000d866626bd43d2019ac96dd53157a3afd5dd9fa781130fd0040a193ff73b3d08bc0fe75c0398906073246f42f565814c38bdb5bb0dc68e9ea5fa1303753163d9aa6f00a600ecbe4c3a03ee8840a1a09e241668d7fa54dfcd733df650b71997efe820000000000000000"})

11:04:35 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setsig(r0, 0xa, 0x39)
ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xffff, 0xc4, &(0x7f0000000080)={0x0, 0x14, 0x1, 0xa0, 0x3}, 0x8, 0x26ade266, 0x1f, 0x0, 0xffffffff, 0x8, &(0x7f0000000180)="1dbf9cc4c2ac57616a58bca6932fd208684c3f9c7233d402886d83f1960ce4da9a8edc16c77802dee0b8370e3fb939878000d866626bd43d2019ac96dd53157a3afd5dd9fa781130fd0040a193ff73b3d08bc0fe75c0398906073246f42f565814c38bdb5bb0dc68e9ea5fa1303753163d9aa6f00a600ecbe4c3a03ee8840a1a09e241668d7fa54dfcd733df650b71997efe820000000000000000"})

[  443.164967][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.172334][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.181837][ T8789] device bridge_slave_0 entered promiscuous mode
[  443.194558][ T8968] Unknown ioctl -1071098813
[  443.273498][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.280833][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.290466][ T8789] device bridge_slave_1 entered promiscuous mode
[  443.428805][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.466914][ T8982] Unknown ioctl -1071098813
[  443.495423][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
11:04:35 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setsig(r0, 0xa, 0x39)
ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xffff, 0xc4, &(0x7f0000000080)={0x0, 0x14, 0x1, 0xa0, 0x3}, 0x8, 0x26ade266, 0x1f, 0x0, 0xffffffff, 0x8, &(0x7f0000000180)="1dbf9cc4c2ac57616a58bca6932fd208684c3f9c7233d402886d83f1960ce4da9a8edc16c77802dee0b8370e3fb939878000d866626bd43d2019ac96dd53157a3afd5dd9fa781130fd0040a193ff73b3d08bc0fe75c0398906073246f42f565814c38bdb5bb0dc68e9ea5fa1303753163d9aa6f00a600ecbe4c3a03ee8840a1a09e241668d7fa54dfcd733df650b71997efe820000000000000000"})

[  443.651327][ T8789] team0: Port device team_slave_0 added
[  443.693223][ T8789] team0: Port device team_slave_1 added
[  443.770198][ T8706] Bluetooth: hci1: command 0x0409 tx timeout
[  443.788550][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0
11:04:36 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setsig(r0, 0xa, 0x39)
ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x89)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xffff, 0xc4, &(0x7f0000000080)={0x0, 0x14, 0x1, 0xa0, 0x3}, 0x8, 0x26ade266, 0x1f, 0x0, 0xffffffff, 0x8, &(0x7f0000000180)="1dbf9cc4c2ac57616a58bca6932fd208684c3f9c7233d402886d83f1960ce4da9a8edc16c77802dee0b8370e3fb939878000d866626bd43d2019ac96dd53157a3afd5dd9fa781130fd0040a193ff73b3d08bc0fe75c0398906073246f42f565814c38bdb5bb0dc68e9ea5fa1303753163d9aa6f00a600ecbe4c3a03ee8840a1a09e241668d7fa54dfcd733df650b71997efe820000000000000000"})

[  443.796246][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.822402][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.854632][ T9002] Unknown ioctl -1071098813
[  443.904517][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.911712][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.937976][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
11:04:36 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x2007fff)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "0de8678c41fb2a37", "bae2445a070be0ef3b9fba9533b8f1bb", "6dcfd8b0", "7b2dc25999bc85e8"}, 0x28)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/233)
sendfile(r3, r1, 0x0, 0x800100020001)
creat(&(0x7f00000000c0)='./file0\x00', 0xd9)

[  444.037345][ T9005] Unknown ioctl -1071098813
[  444.229695][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  444.254370][ T8789] device hsr_slave_0 entered promiscuous mode
[  444.287920][ T8789] device hsr_slave_1 entered promiscuous mode
[  444.306008][ T8789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  444.314181][ T8789] Cannot create hsr debugfs directory
[  444.691029][  T580] tipc: TX() has been purged, node left!
[  444.973178][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  444.998878][ T8789] netdevsim netdevsim1 netdevsim0: renamed from eth0
11:04:37 executing program 0:
sendmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000001001000002000000000081f9de25b464456c075d2851448e16b7ebe3eca12f815fe0d7cf5fbabd4997f58b0d9f1078c87d82768f0d8097005294d0ebb93bbe652ba27cfb67aa47ccc6e3ab27eb90461b12f02c9fde2e9244230f51ceed7a535b3fe45537d8255369525180e038937be0f2f5fe69106df034f0b6a27f117b0a14262d891dd91df73108c35d8ab1a3c978f60ca91dbb869ce9cfeb62647f622d3954b535ebd8d55af9e15edd080bdf46f728b92b4419a7a9fe6ef35c7784d23d707240394d09ca83d20c1566e3b8d2a8aeb44060ae0634cec934e9c327a54a2382126660850836bd7183e29d2b96f582fa1102ed1fc77a"], 0x18}}], 0x3, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
sendmmsg(r0, &(0x7f0000003e80), 0x2, 0x0)

[  445.168785][ T8789] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  445.234572][ T8789] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  445.269587][ T8789] netdevsim netdevsim1 netdevsim3: renamed from eth3
11:04:37 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@loopback}}}, &(0x7f0000000140)=0xe8)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0xc}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)

11:04:37 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
unshare(0x2c020400)
ioctl$UFFDIO_REGISTER(r0, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}})

[  445.765660][ T9088] xt_addrtype: ipv6 does not support BROADCAST matching
[  445.850142][   T27] Bluetooth: hci1: command 0x041b tx timeout
[  445.956720][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.027503][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  446.036486][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  446.066786][ T8789] 8021q: adding VLAN 0 to HW filter on device team0
[  446.115238][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  446.125034][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  446.134419][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.141714][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
11:04:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
prctl$PR_GET_SECUREBITS(0x1b)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000004c0)=0x100, 0x4)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000500))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100251911b10000000000001cff48c664073f4528a96a3361641d82", @ANYRES32=r8], 0x20}}, 0x0)

[  446.228918][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  446.238036][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  446.247787][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  446.257373][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.264663][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.273732][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  446.324367][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  446.366578][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  446.376838][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  446.411644][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  446.450199][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  446.459630][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  446.470060][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  446.481232][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  446.490730][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  446.551953][ T8789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  446.566012][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  446.616876][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  446.626374][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  446.689561][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  446.698200][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  446.747681][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.861559][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  446.871576][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  446.963810][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  446.973587][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  447.002766][ T8789] device veth0_vlan entered promiscuous mode
[  447.014999][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  447.025052][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  447.068346][ T8789] device veth1_vlan entered promiscuous mode
[  447.221262][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  447.230642][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  447.239877][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  447.249480][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  447.279884][ T8789] device veth0_macvtap entered promiscuous mode
[  447.304824][ T8789] device veth1_macvtap entered promiscuous mode
[  447.362317][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  447.373226][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.387007][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.395205][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  447.404636][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  447.413873][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  447.423701][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  447.493002][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  447.503654][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.517521][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.540428][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  447.550541][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  447.932361][ T8711] Bluetooth: hci1: command 0x040f tx timeout
11:04:40 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
pipe(&(0x7f0000000040))
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0)
close(r5)
dup2(r4, r5)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0)
getsockname(r4, &(0x7f0000000140)=@xdp, &(0x7f0000000400)=0x80)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x611ed}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_MTU={0x8, 0x4, 0x1005}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xeb8c}]}, 0x58}}, 0x4040)

11:04:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000880, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5a}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000011, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}]}, 0x7)

11:04:40 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4(r1, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000000c0)=0x80, 0x80000)
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
recvmsg(r1, &(0x7f0000005700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/174, 0xae}, 0x0)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x48d}, 0xb)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x0)

[  448.458408][ T9116] device gretap1 entered promiscuous mode
11:04:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$isdn(0x22, 0x3, 0x4)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, 0x4)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080)={r6, 0x7}, 0x8)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r7, @ANYBLOB="000000000000000028000001007665d21f498de41ce2a200000000000001016cc1ffff07c21bdc4a4b26dd4796ec9900000000c2623531cf146c9c65a1daeedef963df161e1238d8ad8ea263af2277ea7ef0e2c2000000000095dd18ad772fcbd77e05091fa588647f3fd0c98f18f7f8f7dbdc2b87c8091f0fd2e6b4506013f7cfadf4a2431553a0"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r7, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffe5}, {0x2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x32, 0xfd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)
ioctl$CHAR_RAW_IOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000300))
r8 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f0000000280), 0x0, 0x0)

[  448.929737][ T9131] sctp: [Deprecated]: syz-executor.0 (pid 9131) Use of int in maxseg socket option.
[  448.929737][ T9131] Use struct sctp_assoc_value instead
[  448.956099][ T9132] sctp: [Deprecated]: syz-executor.0 (pid 9132) Use of int in maxseg socket option.
[  448.956099][ T9132] Use struct sctp_assoc_value instead
[  448.994087][ T9116] device gretap1 entered promiscuous mode
11:04:41 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000080)=""/156, 0x0})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000080280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff358a5e5f092ea8ff6866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x48}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f00000013c0))

[  449.398887][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
11:04:41 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c}], {0x95, 0x0, 0x18}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xc00, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, [], 0x1}, 0x1ff}, {0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x7fff, [0x1, 0x6114, 0x400, 0x0, 0x200, 0xb1, 0xf84, 0x8780]}, 0x5c)

[  449.445043][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  449.545707][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  449.569441][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
11:04:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x19000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)

11:04:42 executing program 1:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8000000000119050004000000000000000000003c0001802c0001001400030016f8bcd383ad9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe8800000000000000000000000000ff14000400ff00000c000000800000000000000001080007000000000024000f001400010008000100c10cd25c780404b67f021001080002"], 0xb8}}, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0))
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x228, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9d3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x95, 0x3, "d4e83b6f8970dc268edf9c4c46a03886d1db9d30fee49336ae4b6ab6b933ef643f1bc3c7035b42d956f563c2cb6ecc55fafc8c3d209923cd9bbba6636c1223ca889fb87ef4d31025ea7e39a18d756561777fdae2543b36961ba49f3a633c8d9f6467c24f4c73429f4f6c05f1af2aea81b52cafa7f1703b0056a857ffb2f3aac2b27e3c4e6c711b143681c5aed273ced9ec"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "3b242942017af4259f333f7707e7aa0e6d41617d2cf5f79de92a0e0db610345a"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa8a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x926}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000}, 0x44001)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0)

[  449.901513][ T9157] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  449.998057][ T9181] Unknown ioctl -1071098813
[  450.011593][ T8709] Bluetooth: hci1: command 0x0419 tx timeout
[  450.055119][ T9181] Unknown ioctl 44609
[  450.125546][ T9197] Unknown ioctl -1071098813
[  450.141080][ T9194] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  450.154879][ T9197] Unknown ioctl -2146946290
[  450.161311][ T9197] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  450.169454][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  450.188174][ T9157] Unknown ioctl -1071098813
[  450.194070][ T9181] Unknown ioctl 44609
[  450.220270][ T9199] Unknown ioctl -1071098813
[  450.238756][ T9199] Unknown ioctl -2146946290
11:04:42 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000209605084184d1150005400000000001090224000100000000090400000203010000092100000001220500090581030000000000"], 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x8}], 0x1c)
ioctl$RTC_UIE_OFF(r1, 0x7004)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x0, 'u9'}, @global=@item_012={0x1, 0x1, 0x3, '\x00'}]}}, 0x0}, 0x0)

11:04:42 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="020000000000001200080001010000000000000000600004000000"], 0xa0}}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x8c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}, {0x6}, {0x8}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x8c}}, 0x0)
r0 = socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

[  450.537264][ T9206] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'.
11:04:42 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="ebd44736f211b68aa4bf9500000000000000000000000000fe1b8648bfc798940c29aea17bcb00802f0000009394f5185ec043a94df20c3ab04a0299daf85ec3094a6574a0ea314ce7933bf8294ce39b78bf2262177d3af9d91f7d74794a87ad2d3cb04b8c91458ef90cee1f87669097619c9e83956d5fa9d1265be87d90de294fa95ad1d619ac221b0f622aefda934e3428dac1b6cd48"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
semop(0xffffffffffffffff, &(0x7f0000000240)=[{0x3, 0x800, 0x800}, {0x4, 0x81, 0x1000}, {0x1, 0x1, 0x1800}, {0x4, 0x7, 0x2000}, {0x2, 0x7f, 0x1000}, {0x3, 0x2, 0x800}, {0x4, 0xbfa7, 0x800}], 0x7)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
getsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000)
ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000))

[  450.801690][ T8709] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  450.905885][ T9211] Unknown ioctl -1071098813
[  450.917565][ T9211] Unknown ioctl -1071098813
[  450.952070][ T9214] Unknown ioctl -1071098813
[  451.039992][ T8709] usb 1-1: Using ep0 maxpacket: 32
11:04:43 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x4000000090b, 0x2001)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x18}, 0x40005)

[  451.080858][ T8709] usb 1-1: too many configurations: 64, using maximum allowed: 8
[  451.201557][ T8709] usb 1-1: unable to read config index 0 descriptor/start: -61
[  451.209374][ T8709] usb 1-1: can't read configurations, error -61
[  451.330197][ T9218] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
11:04:43 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x101, 0x1)
r1 = memfd_create(&(0x7f0000000200)='#\x9c\x1c\x82\x90\"\x15wQ\xfd\xb8V\xf1\xa1M\xab\xaa\xbd\xaf\xfb*6\x98\xf1\x95U\xe0\x9e\xe0\xc7/X\xe5\v\xf1\x1c\xa0\x80\bk<\xf2\xebv\xb5\xf6\xca\xa8\x16bW2tB\xf3\xaf\x1e;@4{\xd6(\x8bU>K?0\xbb\xb0\x0eiVS_\xce*\x93k\x02\xabDD\x97\x91\x97\xca\x8f!~((\x8e\x0f\xef\xba\xbc\x93+\x80\xe4\xaf\xb8\x98\xdc\xd3\xbb\xb7M\n^\xb1\xd9\v\xab\xe0\xb4\ri\xfc^n`\v\xf5!\xb6\xfez{F#D\xe773\x0e\xd2sDj)\xbf\x92', 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e400040000009e"], 0x291)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x4810, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x2, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001014000426bd7000fe7acc661548f44a778a2508004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000000)={{}, 0x8})

[  451.390636][ T8709] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  451.595234][ T9221] Unknown ioctl -1071098813
[  451.611531][ T9221] Unknown ioctl 1074356481
[  451.631563][ T8709] usb 1-1: Using ep0 maxpacket: 32
[  451.654873][ T9222] Unknown ioctl 1074356481
[  451.671538][ T8709] usb 1-1: too many configurations: 64, using maximum allowed: 8
11:04:43 executing program 1:
truncate(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = syz_usb_connect(0x0, 0xbe0, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x3d, 0xdb, 0x25, 0x8, 0x79b, 0x4b, 0x92d0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xbce, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf4, 0x2, 0x10, 0x37, 0x22, 0x81, 0x92, [@uac_control={{0xa, 0x24, 0x1, 0x1f, 0x3}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x9, 0x1, "433319ebba86"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x9, "9818d8e26f"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x9, "1721ad1f22"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x3, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x6, 0x5, 0xfff, 0x8, 0x1}]}], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0x2, 0x40, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x400}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0xce, 0x37, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x20, 0x9}}, {{0x9, 0x5, 0x0, 0xe, 0x400, 0x7, 0x7f, 0x30}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xff, 0xff, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xac, 0x6}, @generic={0xb8, 0x3, "ac8ce41138211afb6f9e09a2ced5d6ad44883e7033272bbc8b83add48121723a873532daa1d82e77febbaddf4cb3a2ea55ec62e7447245328b6a983dc49b1ed113969ec43b2047a91eb0ebf72105be3038de8ff262b4fd3e60b3cf40d24a3c02700ef0da65f8cd0324a0948f33c3ccbbef0c2b0bf4db6e0817d62f7ed79754c31ed776b7f99bf1adad9cde8461281948b666dadd726a6267bde82a3fb2a11eee24e95d46b170cbb0cf636017c22e78a357e64ac8a74a"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x2, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xe0, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x4ce}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1ff}]}}, {{0x9, 0x5, 0x8, 0x11, 0x400, 0xa7, 0x1, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe7, 0x3}, @generic={0xb9, 0x7, "b28f84f29a38480c934b5e914b1e786ac358866fe6e988efcbb4a0b455971833c21d6876fb621292e040256250022002b2c3c63ab9360dd36f777dd9c00dd42b97147b3e4ab7852f6965e5f116627ca0311d5aa4ebeb2a6c11bc32d9f7fb7f5df0e69fae50f48c08119b09ab17e2e5ff2fad3c1caed70a69d9df043d20cbeabae72018a98371575bf47248b18dcefa1f043698047c717379bc7c1a835971dc607d0ee16405ae6f5b257521e4d7e8d3cd8c88d2b116edf2"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x3f, 0x3, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x3, 0x9, 0x20, [@generic={0x41, 0x0, "33d276b0db6c1f33d6c20e2e2d3d306969f2bba978a013c9f85d42ef7ed7876531362377b93fba771a1ccfcb4dece4cac1f61c1c6291a4e317b31145f88076"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x5, 0x9, 0xc9, [@generic={0xae, 0x11, "77921d632351c932bd737b595d15fadb05d20a8935fd988f0f91b3b25a9d5c2098fdec0a12c3ee1163d7c601ff3b864dc16374d1b2eabdaa6e1c0f39605fea4c35ce5ed4af6f76f939d2a655862865ceba2a2d48ca52bdd2f322ab8784bcebf93802706872e1ce338c557a167cc0f7dd1f9a087762886d6c18cf2df85a0b3f6deda2deb3a6dcfdf2e7c9ecb65d08c0778d450822fed58d1cd990a5fb6973781825f1be2066aa9a237a970579"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x418, 0x8, 0xff, 0x0, [@generic={0x3b, 0x8, "12ffbb096def2fdb5b86bae7ec80bc6d10dd9b3e3695ac5274398c93115cb6b8c7800c7d640dd379ab5cd18f6de5bf35d9c2f0aeae41ca34f5"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x7, 0x6, 0x7, [@generic={0x87, 0x24, "9d01ba36485abc39e04d91bfbfe94283974d8418e519b69ab350eb11ec172a572c4b407253d2e0765d073fc5d21bc2dac259d77949f40ad40b1c7f54c6ce62399197c554ca60b6ff9e45982e72275339e7d67ccc639a615feb904175d71df71e61f033ce7c3934095f8b7c6fb2ee99e8710a0017e3d33e9a12a2f74f7d68b0036ab790890a"}, @generic={0xdb, 0x3, "e7dda131bb05a658e1f03aa39253608e0b9fa3bd02c594dfc509ae832d0d0cb6095db8c5a14a1b408d98760053defd29840721a7edba623198da2f10710045c4d98fa5a2f686cd062e58db4905dba6fd525132c103c6915c7875943a0acb7e0c1721d9dfbbe15c62007b4b9d8a71f0120e4bc8ed4bf79782a8c6535e7a3d15b041b8100935500a0b19694cf8074502b88c36df5643c4ad5e5cabd4fdd7a2b444a98ba6b08a613b4d58a4eaff9304d755e1ac768d1cf73499e1f1f7de1edf6d652aa5293b91d24ba28bc42bd0512f55d8e14463724836661898"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xb8, 0x6, 0x20}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0xc8, 0xbc, 0x0, [@generic={0x89, 0x22, "ee4a6e515375d58b591b0a860b6c0a11d182039a28909903b32e15c233657e579766fe7921a31c0d9b4306febab79aa7a0d0d53bbae2cb8b5e79a1b14c772e72a12361de60c91110eed371c92ab36bee7cb7bbf8b637d8c51ba794638875ff36540a79a1cb6e9505afd9ccb304928661929410e967257a45a41b9206c2d29a76c95c14197c63e8"}]}}]}}, {{0x9, 0x4, 0x49, 0x7f, 0x10, 0xfb, 0xc8, 0x7b, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0xf9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xe0, 0x5, 0xc4, [@generic={0xef, 0x23, "94e44450c1de3b41e71d295243fcd2e45df4019ee116572adf75a66f5f2fc0466e4b94367b8de986c03f76699d4df2b689c1780b0db346f896710091fa8fb57ce2d1a686c42bcd1118b0a4dc90680485229784fc466420fa923cb2d204f484efeaff6dcf12b468518e3461ef1c89c3720114ef9d6766c2d4f021ec008a3208a226d2903cf36a3cfe4cdfc297d393dad4c2f7ca1c3b2be898351baee37ba403116bce96a90b355585fc58cd59a64e2a26840b139e40724d33ffa040b0a11ace7329ee6ffbf298d35c4feaed188f834ee304173a5b787b01d3340fabbdabbe64c97b75f9bc1f75a4bf782ca330f4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2f}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x2d, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80}, @generic={0xee, 0xb, "56146d2003167e553786a0fcc06e3bb2343bccae0880019ea54ed8a11e880da93340160ca01d7345d765bf8ac7ea1d3a73bd984532721f24eb029b18a2cc7c29f5396f79836689ab294642e02b80f968f6b6e6866367a8ce94b78e822996dcdc3410638d4f07dd8364db7dde847d7cfe8038674649116246e15d5cd02e45d4d5d6a9fed795ba1bbc9ae2bff41ed4be4cd8efd54b7fad9f6db6087e5cde760a82c4a6ce86741ac0d7e12d647d698048f987f898c826dc0d1fbd2a53dfd209774b159ed827108ab6880cea9fa81c4aca3c9fa2abe65808336d4f68c67c3976aaaed03d9250c15bb46390c52b7e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x3, 0x63, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x99a}]}}, {{0x9, 0x5, 0x0, 0x0, 0x608, 0x3, 0x1, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x0, 0x5, 0x5f, [@generic={0x101, 0x23, "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"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x3, 0x4}, @generic={0x2a, 0xc, "9d57065d260f03d2bae89200996c37f51b2d54488d7442e4e7f30c71ef78705902f61661d50f7116"}]}}, {{0x9, 0x5, 0xc, 0x9, 0x3ff, 0x4, 0x9, 0x7}}, {{0x9, 0x5, 0x1e, 0x8, 0x0, 0x60, 0x0, 0x3, [@generic={0x2c, 0x10, "d71df930a5cdaf90f03826bb46176dd6cf8ae1bd919c0a5fca085e57178de5d210b8599319df74da8e7d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0xff, 0x0, [@generic={0x73, 0x30, "30bf3e862c22f4640bb16e0dc028de4c2e58a66d52893446d8297f641d37e52b82f101e7f1edf2f4caeb71afcd4354e040f5d2486849fb8ae74a5505765100e945ac0ae6f60d7e8071d22a0ca0b489e2d7a702dedffad0013f9ee125e947f03b05a2ca607f6dd60181169badc8cef322f9"}, @generic={0x99, 0x0, "8bf7a3ef1c7a646876898d9b516f510bc63fb46c76c536617d099cbe540f2610213741b576a22791a7f91fb2cb0afa2386555102d5ab46afb8329a752f3827951939fce378ad2e92dd7af6a8ed82bebb7740ad79d97317932189eef87ee0a6aa0268b563abcae046d51bdc4cc587fd18933f93b5c55e61cd073d34fb759ca2f1051469a9e870082fadbe94aa069c929eeb42450a9372bf"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x20, 0x7, 0xfe}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x20, 0x20, [@generic={0xd0, 0x9, "50066b7e0bda977ee5edd0c184c03d81189701addbaff1a7efae1ce9b7f28a891cebdda2bb0315b638edf0bece718b570b891f1d47120c3b5cdfb7de106396bbca9dd43a3438f22ebfed7b5d053d6596fe04166a758eec2c24bb836a7c894b6763aabbb7c50140ba67f2bac09651752194df0a9a4e351ba2eb6faa27a1eed7adbecb7d19fb3b14c02c6ebd87406e2978037446803ad5eb8dab4e5834420a8aaf37fe3a3c510a05ca001500636f05ad2e887fcdc2a776a557812396c244b9f2d6fbcb997ae0ce57149fda74ebc92c"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0xf8, 0x2, 0x81}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x12, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x9, 0xe4, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x1, 0x7c, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0xd1, 0x2}, @generic={0x55, 0x3, "cfc6d5f5458477537f90958fbddd9530b217ff2198c00e8addc57567c50638af3c8387e5774098ff6fdb8793e55afa57b215b99ad37b529596ec14d71f8123f7139501c239915948b651f03adc37230c75ee70"}]}}]}}]}}]}}, 0x0)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000010c0)=""/4096)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x81, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0})

[  451.790336][ T8709] usb 1-1: unable to read config index 0 descriptor/start: -61
[  451.798074][ T8709] usb 1-1: can't read configurations, error -61
[  451.837741][ T8709] usb usb1-port1: attempt power cycle
[  452.240019][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  452.479918][   T27] usb 2-1: Using ep0 maxpacket: 8
[  452.590030][ T8709] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  452.600989][   T27] usb 2-1: config 0 has an invalid interface number: 244 but max is 1
[  452.609376][   T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  452.620096][   T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  452.629108][   T27] usb 2-1: config 0 has no interface number 0
[  452.635585][   T27] usb 2-1: config 0 interface 244 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  452.649006][   T27] usb 2-1: config 0 interface 244 has no altsetting 0
[  452.656243][   T27] usb 2-1: New USB device found, idVendor=079b, idProduct=004b, bcdDevice=92.d0
[  452.665579][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.741545][   T27] usb 2-1: config 0 descriptor??
[  452.763758][ T8709] usb 1-1: Using ep0 maxpacket: 32
[  452.800875][ T8709] usb 1-1: too many configurations: 64, using maximum allowed: 8
[  452.920085][ T8709] usb 1-1: unable to read config index 0 descriptor/start: -61
[  452.927921][ T8709] usb 1-1: can't read configurations, error -61
[  453.021346][   T27] usb 2-1: string descriptor 0 read error: -71
[  453.123040][ T8709] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  453.224058][ T8709] usb 1-1: Using ep0 maxpacket: 32
[  453.260842][ T8709] usb 1-1: too many configurations: 64, using maximum allowed: 8
[  453.380844][ T8709] usb 1-1: unable to read config index 0 descriptor/start: -61
[  453.388610][ T8709] usb 1-1: can't read configurations, error -61
[  453.405709][ T8709] usb usb1-port1: unable to enumerate USB device
[  453.451133][    T0] NOHZ: local_softirq_pending 08
11:04:45 executing program 0:
syz_usb_connect(0x0, 0x312, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xdb, 0x7e, 0xd3, 0x10, 0x3f0, 0x4216, 0xa82, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x300, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x44, 0x7, 0x4, 0xc1, 0x19, 0x37, 0x3, [], [{{0x9, 0x5, 0x6, 0x0, 0x719ae7f33431ecc4, 0x8, 0x6, 0x7f, [@generic={0xc4, 0xa, "c815354decdb918f6e7c6473b141fe3be86a1d0d469eaa97236fdaca288a9e253469c3a63ec170cbd4d10bb4ebf921040e28a0641e79964c6e278518c73638d8a0f615a4b05f7ac07e3a38d04e2bddff1ae9b7e15cb6a15eef241b985596b466a10a82a654a55f7244c1934d009c84a8ae379fd9dc9d1753b8e0f403bdff7c567c160a7b0c0edfd8747a02b9568b6656f96a3aae7a0fbb5b08eeef69116ba7c8a5e3672bd61f98164b3a4b07ceb6332473c323195e7bc1c6684022200d24dc56e560"}, @generic={0xb1, 0x5, "a4ab5eb3322900d36cc0305ee0df251e481919bcdd105cc66320e9202a33a227c0eb4533e4ff2abb868699acc198c4c83f27d23a45dcaf52783f27ad9b6a3f8808da06ff200f86d6e98b64953822c9243f17c4ed7661da1231927dcf70061c144b767f2a92dfa9057f875423f9d1f25a85384b7bc906c224c9b1ed34368ba54b3071a4e7766ba0c455f2327a5ff98efe70c3b6e8a0f2dd45eece1726bdbce48eea1da0b715d4215f93717ed036dec5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x84, 0x0, 0x200, 0x7e, 0x1, 0x1, [@generic={0xf7, 0x16, "4a6421d89eaefcbb281f948107f60d74070b43f6324cbcb6cd54db1bf438a02dde8fd1568aa0e680492f50e688e04a7202f9b229a7f1ef4cd5fb9123442596e9becde3431f4f3ef6c9b706569972de7b5d5e16db6c000c454d8906939a6c9cda43232508b70c66fa923f81d51242cdc309cd76f2712204b423895dfb52356cc2bee12bbe5912a73edd493de506d233ef9c0aafd0a7d8e652942ff71c7fd95d78086d520e1b9fba0a4a0183ebbb9d703c6fc82b3a364fd89a0f453f30ab1e76eed98f0e8258d8f79369b696bf14bde1d21b5c0fffcff8463f9a155896519499feb1f84881fab5066fb0b6146da80a1e895a1674db33"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x1f, 0x1f, 0x8, [@generic={0x50, 0x24, "e3b89a6571ce3b704c65164070980db2b51d5bdc2531f84f147502e85419aa4a03bca7b93e2a522817fb42c1aecd5c32c2f4432d46c11c61f5a32f658222f6f4738cdc321e9f13212655023f3b51"}]}}]}}]}}]}}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x1cae6)

11:04:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001700)='team0\x00', &(0x7f0000001740)='./file0\x00', 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
dup(r1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)="a5ac24b14e8b2003", 0x8}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f00000001c0)="a188385682c3059c7d8f6ab79ecc70c8b95e9175b629bd3b6f4504d9c931e7c23f17e5a8c48cf04291b58334aab430b2cc34bd838994a3c6a63b5762cbad", 0x3e}, {&(0x7f0000001500)="61a69e786bdf686d644fd517ec97b07f60871d952219728f939cf6d52e0a4e2e79e9a10becd65d50a8b55b9b69f582fe2f0ef42ab36ba0988653451767bc245e05cbdecc4d3b61b9349bbcda5d0b7848a2dbd1d3a81fccfa15bbd679a7c0b9320392e34bcb570ac0c005a31e328d0c92f71234b877e5c4149a5bb95cf6ee5ef7c3f1332500b5bfb0bf6d511f110bb28427b6e2bae741226bdaa2f3d700c68567bd4414221629a75f34f7b133093a9665da0f6c2b88ef88692a9f2a02", 0xbc}], 0x4, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6d800000}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x8080)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800d0001006d6163730a00050014000000007caa6d4d9aa28e0e000000000000df00000800"/60, @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
mkdirat(r3, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000001680)="8c162724ec72423f695af9e408d4a8b814399520f1")
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000016c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000d00ff0000000c00010000000000000000000a000500140000000000000008000a00", @ANYRES32=r7, @ANYBLOB="7d05e55060e0583f0b02846780fcd99ff197c72c5af6188ff243b2ccc5e57df89309d63e176b1c3fc34d7acc0218158dfd73b5e048706353906fe6dbaf9eac9d630661a70171fd0996dc3095c00b886de8e0719a62f24e2734db37245b85"], 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

[  453.829650][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  453.839040][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  453.886988][   T27] ieee80211 phy3: rt2x00usb_vendor_request: Error - Vendor Request 0x09 failed for offset 0x0000 with error -19
[  453.899020][   T27] =====================================================
[  453.906182][   T27] BUG: KMSAN: uninit-value in rt2500usb_bbp_read+0x19f/0x7e0
[  453.913561][   T27] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted 5.8.0-rc5-syzkaller #0
[  453.921709][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  453.931851][   T27] Workqueue: usb_hub_wq hub_event
[  453.935096][ T9249] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  453.936939][   T27] Call Trace:
[  453.948326][   T27]  dump_stack+0x21c/0x280
[  453.952697][   T27]  kmsan_report+0xf7/0x1e0
[  453.957120][   T27]  __msan_warning+0x58/0xa0
[  453.961633][   T27]  rt2500usb_bbp_read+0x19f/0x7e0
[  453.966671][   T27]  rt2500usb_probe_hw+0x48f/0x2710
[  453.971792][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  453.977704][   T27]  ? rt2500usb_queue_init+0x200/0x200
[  453.983082][   T27]  rt2x00lib_probe_dev+0xc58/0x3620
[  453.988283][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  453.994095][   T27]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[  454.000254][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.005459][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.010668][   T27]  rt2x00usb_probe+0x80a/0xfb0
[  454.015462][   T27]  rt2500usb_probe+0x50/0x60
[  454.020056][   T27]  ? rt2800_brightness_set+0x1090/0x1090
[  454.025738][   T27]  usb_probe_interface+0xece/0x1550
[  454.030955][   T27]  ? usb_register_driver+0x900/0x900
[  454.036302][   T27]  really_probe+0xf20/0x20b0
[  454.040901][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.046108][   T27]  driver_probe_device+0x293/0x390
[  454.051232][   T27]  __device_attach_driver+0x63f/0x830
[  454.056617][   T27]  bus_for_each_drv+0x2ca/0x3f0
[  454.061483][   T27]  ? coredump_store+0xf0/0xf0
[  454.066173][   T27]  __device_attach+0x4e2/0x7f0
[  454.071064][   T27]  device_initial_probe+0x4a/0x60
[  454.076104][   T27]  bus_probe_device+0x177/0x3d0
[  454.080966][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.086776][   T27]  device_add+0x3b0e/0x40d0
[  454.091306][   T27]  usb_set_configuration+0x380f/0x3f10
[  454.096786][   T27]  ? usb_set_configuration+0xb41/0x3f10
[  454.102377][   T27]  usb_generic_driver_probe+0x138/0x300
[  454.107937][   T27]  ? usb_choose_configuration+0xe70/0xe70
[  454.113660][   T27]  usb_probe_device+0x311/0x490
[  454.118522][   T27]  ? usb_register_device_driver+0x540/0x540
[  454.124421][   T27]  really_probe+0xf20/0x20b0
[  454.129023][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.134236][   T27]  driver_probe_device+0x293/0x390
[  454.139639][   T27]  __device_attach_driver+0x63f/0x830
[  454.145029][   T27]  bus_for_each_drv+0x2ca/0x3f0
[  454.149883][   T27]  ? coredump_store+0xf0/0xf0
[  454.154571][   T27]  __device_attach+0x4e2/0x7f0
[  454.159357][   T27]  device_initial_probe+0x4a/0x60
[  454.164391][   T27]  bus_probe_device+0x177/0x3d0
[  454.169247][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.175056][   T27]  device_add+0x3b0e/0x40d0
[  454.179592][   T27]  usb_new_device+0x1bd4/0x2a30
[  454.184462][   T27]  hub_event+0x5e7b/0x8a70
[  454.188929][   T27]  ? sched_clock_cpu+0x65/0x8e0
[  454.193822][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.199026][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.204833][   T27]  ? led_work+0x7c0/0x7c0
[  454.209347][   T27]  process_one_work+0x1688/0x2140
[  454.214403][   T27]  worker_thread+0x10bc/0x2730
[  454.219178][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.224382][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.229599][   T27]  kthread+0x551/0x590
[  454.233675][   T27]  ? process_one_work+0x2140/0x2140
[  454.238882][   T27]  ? kthread_blkcg+0x110/0x110
[  454.243711][   T27]  ret_from_fork+0x1f/0x30
[  454.248129][   T27] 
[  454.250489][   T27] Local variable ----reg.i.i@rt2500usb_bbp_read created at:
[  454.257773][   T27]  rt2500usb_bbp_read+0x98/0x7e0
[  454.262715][   T27]  rt2500usb_bbp_read+0x98/0x7e0
[  454.267650][   T27] =====================================================
[  454.274576][   T27] Disabling lock debugging due to kernel taint
[  454.280729][   T27] Kernel panic - not syncing: panic_on_warn set ...
[  454.287320][   T27] CPU: 1 PID: 27 Comm: kworker/1:1 Tainted: G    B             5.8.0-rc5-syzkaller #0
[  454.296852][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  454.306918][   T27] Workqueue: usb_hub_wq hub_event
[  454.311939][   T27] Call Trace:
[  454.315237][   T27]  dump_stack+0x21c/0x280
[  454.319633][   T27]  panic+0x4d7/0xef7
[  454.323553][   T27]  ? add_taint+0x17c/0x210
[  454.327983][   T27]  kmsan_report+0x1df/0x1e0
[  454.332493][   T27]  __msan_warning+0x58/0xa0
[  454.337005][   T27]  rt2500usb_bbp_read+0x19f/0x7e0
[  454.342042][   T27]  rt2500usb_probe_hw+0x48f/0x2710
[  454.347155][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.352977][   T27]  ? rt2500usb_queue_init+0x200/0x200
[  454.358351][   T27]  rt2x00lib_probe_dev+0xc58/0x3620
[  454.363562][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.369373][   T27]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[  454.375530][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.380732][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.385940][   T27]  rt2x00usb_probe+0x80a/0xfb0
[  454.390718][   T27]  rt2500usb_probe+0x50/0x60
[  454.395312][   T27]  ? rt2800_brightness_set+0x1090/0x1090
[  454.400949][   T27]  usb_probe_interface+0xece/0x1550
[  454.406175][   T27]  ? usb_register_driver+0x900/0x900
[  454.411549][   T27]  really_probe+0xf20/0x20b0
[  454.416180][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.421391][   T27]  driver_probe_device+0x293/0x390
[  454.426513][   T27]  __device_attach_driver+0x63f/0x830
[  454.431900][   T27]  bus_for_each_drv+0x2ca/0x3f0
[  454.436757][   T27]  ? coredump_store+0xf0/0xf0
[  454.441444][   T27]  __device_attach+0x4e2/0x7f0
[  454.446221][   T27]  device_initial_probe+0x4a/0x60
[  454.451249][   T27]  bus_probe_device+0x177/0x3d0
[  454.456106][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.461917][   T27]  device_add+0x3b0e/0x40d0
[  454.466446][   T27]  usb_set_configuration+0x380f/0x3f10
[  454.471916][   T27]  ? usb_set_configuration+0xb41/0x3f10
[  454.477495][   T27]  usb_generic_driver_probe+0x138/0x300
[  454.483046][   T27]  ? usb_choose_configuration+0xe70/0xe70
[  454.488767][   T27]  usb_probe_device+0x311/0x490
[  454.493629][   T27]  ? usb_register_device_driver+0x540/0x540
[  454.499523][   T27]  really_probe+0xf20/0x20b0
[  454.504120][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.509330][   T27]  driver_probe_device+0x293/0x390
[  454.514450][   T27]  __device_attach_driver+0x63f/0x830
[  454.519834][   T27]  bus_for_each_drv+0x2ca/0x3f0
[  454.524687][   T27]  ? coredump_store+0xf0/0xf0
[  454.529486][   T27]  __device_attach+0x4e2/0x7f0
[  454.534267][   T27]  device_initial_probe+0x4a/0x60
[  454.539297][   T27]  bus_probe_device+0x177/0x3d0
[  454.544240][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.550049][   T27]  device_add+0x3b0e/0x40d0
[  454.554577][   T27]  usb_new_device+0x1bd4/0x2a30
[  454.559445][   T27]  hub_event+0x5e7b/0x8a70
[  454.563866][   T27]  ? sched_clock_cpu+0x65/0x8e0
[  454.568757][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.573960][   T27]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  454.579769][   T27]  ? led_work+0x7c0/0x7c0
[  454.584124][   T27]  process_one_work+0x1688/0x2140
[  454.589182][   T27]  worker_thread+0x10bc/0x2730
[  454.593950][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.599160][   T27]  ? kmsan_get_metadata+0x116/0x180
[  454.604374][   T27]  kthread+0x551/0x590
[  454.608469][   T27]  ? process_one_work+0x2140/0x2140
[  454.613683][   T27]  ? kthread_blkcg+0x110/0x110
[  454.618454][   T27]  ret_from_fork+0x1f/0x30
[  454.621957][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  454.633323][   T27] Kernel Offset: disabled
[  454.637641][   T27] Rebooting in 86400 seconds..