last executing test programs:

41.565699022s ago: executing program 1 (id=439):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2a182)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000600)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa}, @ldst={0x0, 0x0, 0x0, 0x1, 0x7, 0x1d, 0xfffffffffffffff0}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0xd, 0x7, 0x2, 0xffffffffffffffff, 0x1}, @jmp={0x5, 0x0, 0x4, 0xb, 0x6, 0x18, 0x4}, @generic={0xfa, 0x2, 0x2, 0x4, 0xfffffff7}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000100)={0x81, 0x401})
syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00feb8174aa0956f62f68a5851ca8000000000000000000000000000bbfe8000000000000000000000000000aa03029078000000006002081000001100fc010000007065000000000000000000000000000000000000000000000000000000000000000000052f000100000000fb807f04442be993894b35a336eeca6f"], 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10e)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = userfaultfd(0x801)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2)
ioctl$sock_SIOCADDDLCI(r3, 0x5452, &(0x7f0000000100)={'veth1\x00'})
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
read$rfkill(r6, &(0x7f0000000080), 0x8)

39.185163058s ago: executing program 1 (id=445):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b2", 0x54}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d19", 0xab}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b4", 0xe8}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e", 0x7a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

38.294736571s ago: executing program 1 (id=447):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

34.707337634s ago: executing program 1 (id=457):
ustat(0x2, 0x0)

32.590973536s ago: executing program 1 (id=461):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x24008010)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
ptrace(0x10, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

24.557259745s ago: executing program 1 (id=476):
unshare(0x60000000)
socket$netlink(0x10, 0x3, 0x10)
syz_emit_ethernet(0x37, &(0x7f0000000100)={@multicast, @local, @void, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x10, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45525ca05a", @broadcast, "3d711ad34e"}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

10.687948841s ago: executing program 0 (id=506):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8382, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
unshare(0x2c020400)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x40000000)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
unshare(0x2040400)
socket$kcm(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7)

9.615054397s ago: executing program 0 (id=508):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000120001e724"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000002c0)=0x4)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

9.302683102s ago: executing program 32 (id=476):
unshare(0x60000000)
socket$netlink(0x10, 0x3, 0x10)
syz_emit_ethernet(0x37, &(0x7f0000000100)={@multicast, @local, @void, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x10, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45525ca05a", @broadcast, "3d711ad34e"}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

7.878785073s ago: executing program 3 (id=512):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20443, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f00000adb40)=[{0x4000000, 0x92, 0x0, 0x2, 0xe}]})

7.855849713s ago: executing program 4 (id=513):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x1000, 0x0, &(0x7f0000001580)="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"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020)

7.647226356s ago: executing program 3 (id=514):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)

7.646121806s ago: executing program 0 (id=515):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)

6.464701134s ago: executing program 0 (id=517):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x8000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x3, 0x1800, 0x0, 0xc, 0x4}]}}, 0x0, 0x26}, 0x28)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r4}, 0x38)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xa, 0x7, 0x2, 0x4002804c4, 0x9, 0x5, 0x5, 0x0, 0x4, 0xfff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x11500})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.405978694s ago: executing program 3 (id=518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000005, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000003c0)={0x40f0f000, 0x205, "9a0700000066e134d198b1abaa7da80f00000000000009ffffffff0000130028", 0x9, 0x7, 0x0, 0x7, 0x9, 0x1, 0x0, 0xe0f, [0x0, 0x0, 0x10, 0x2]})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000010c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000001200)={0x10001, 0xffff, @value=0xb})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r3}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xd5f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r7)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r10, 0x402, 0x29)
syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001140)=ANY=[@ANYBLOB="038e71e43634aaaaaaaaaa1686dd6082379f00082b0020010000000000000000000000000001ff0200000000000000000000000000010004000000089078672bc655e2a86d4c148af3660d11ad9307ba6d64f49460d05f96caf60e70bc77db33ee9b7060c08500f6c2fde07bb3666814b3b1c91d7c554ad5b1175a9ca3260fb37be8032b29313def69cecd981e7bfffd9e192cfa750088d4b9f50b0cd153d124326088bc4caf12b543dc3bf280a7fad7f8"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400002024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES8=r11, @ANYBLOB="24000300000000000000030000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8)

6.405402214s ago: executing program 4 (id=519):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8382, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
unshare(0x2c020400)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x40000000)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
unshare(0x2040400)
socket$kcm(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7)

5.444116029s ago: executing program 2 (id=520):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
io_submit(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r4, 0x2)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
shutdown(r6, 0x1)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

5.442820279s ago: executing program 4 (id=521):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x1000, 0x0, &(0x7f0000001580)="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"})

5.292879071s ago: executing program 3 (id=522):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_clone(0x23200100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r3)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

5.061202514s ago: executing program 2 (id=523):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
syz_open_dev$amidi(0x0, 0x2, 0x20000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_io_uring_complete(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
setsockopt(0xffffffffffffffff, 0xfffffffc, 0x5, &(0x7f00000022c0)="def0ebbf17268d5f3838f39edbcf3cfc7561f7a4bd685a294b4af3bb80ba38ce081a64b1c994d5b77932e3c208ea3b75f1bc808f9c33b7efd39ab2e1a79c8a89493bfba4799779a50857956fe6521d68a05069622779c5ee2188418b86519a0725e5319f6c311fb28f33f473f74213c92458bc5b", 0x74)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r4, 0x2000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x480000, 0x0)

5.026652715s ago: executing program 3 (id=524):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000120001e724"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000002c0)=0x4)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

4.02335559s ago: executing program 2 (id=525):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4000)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.265686056s ago: executing program 3 (id=526):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc)
r0 = socket(0x11, 0xa, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2008280000002831f70ba3810300000000000000e2cb4fdca0e1e46a560f920d54f365c5b1d43ee44fbf6fc93f0808251f24ac"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
set_mempolicy(0x3, 0x0, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)

2.265375156s ago: executing program 4 (id=527):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)

2.264698786s ago: executing program 2 (id=535):
r0 = socket$netlink(0x10, 0x3, 0x1)
bind$netlink(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000120001e724"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {0xd, 0x10}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000002c0)=0x4)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

1.133406363s ago: executing program 0 (id=528):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0)

968.418255ms ago: executing program 2 (id=529):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_open_dev$cec(0x0, 0x0, 0x80000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0x87}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)

968.210075ms ago: executing program 4 (id=530):
semop(0x0, &(0x7f0000000200), 0x53)
semctl$IPC_RMID(0x0, 0x0, 0x0)

17.825009ms ago: executing program 2 (id=531):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8382, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
unshare(0x2c020400)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x40000000)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
unshare(0x2040400)
socket$kcm(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7)

17.448619ms ago: executing program 4 (id=532):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
io_submit(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r4, 0x2)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
shutdown(r6, 0x1)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

0s ago: executing program 0 (id=541):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_open_dev$cec(0x0, 0x0, 0x80000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0x87}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts.
[   61.924533][ T4176] cgroup: Unknown subsys name 'net'
[   62.054909][ T4176] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   63.514676][ T4176] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   65.356390][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   65.521689][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   65.543526][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.562465][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.571183][ T4192] device bridge_slave_0 entered promiscuous mode
[   65.581110][ T4201] chnl_net:caif_netlink_parms(): no params data found
[   65.608999][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.616097][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.625221][ T4192] device bridge_slave_1 entered promiscuous mode
[   65.634054][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   65.648691][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   65.679400][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.701331][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.793099][ T4192] team0: Port device team_slave_0 added
[   65.812403][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.821728][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.831343][ T4191] device bridge_slave_0 entered promiscuous mode
[   65.839756][ T4192] team0: Port device team_slave_1 added
[   65.884040][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.891420][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.900176][ T4191] device bridge_slave_1 entered promiscuous mode
[   65.924476][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.931759][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.940319][ T4190] device bridge_slave_0 entered promiscuous mode
[   65.973629][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.981036][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.007429][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.023759][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.030960][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.039138][ T4190] device bridge_slave_1 entered promiscuous mode
[   66.046145][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.053567][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.061870][ T4201] device bridge_slave_0 entered promiscuous mode
[   66.069797][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.076877][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.085435][ T4189] device bridge_slave_0 entered promiscuous mode
[   66.095439][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.105838][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.113965][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.140310][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.160930][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.168434][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.176402][ T4201] device bridge_slave_1 entered promiscuous mode
[   66.183741][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.191149][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.199408][ T4189] device bridge_slave_1 entered promiscuous mode
[   66.208236][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.249365][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.266607][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.279088][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.317484][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.328783][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.346061][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.358902][ T4191] team0: Port device team_slave_0 added
[   66.367279][ T4189] team0: Port device team_slave_0 added
[   66.405524][ T4191] team0: Port device team_slave_1 added
[   66.413689][ T4189] team0: Port device team_slave_1 added
[   66.425485][ T4192] device hsr_slave_0 entered promiscuous mode
[   66.432661][ T4192] device hsr_slave_1 entered promiscuous mode
[   66.443316][ T4190] team0: Port device team_slave_0 added
[   66.477651][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.484705][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.511575][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.526166][ T4190] team0: Port device team_slave_1 added
[   66.534434][ T4201] team0: Port device team_slave_0 added
[   66.549110][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.556285][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.583263][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.595452][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.602956][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.629258][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.649202][ T4201] team0: Port device team_slave_1 added
[   66.665803][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.673385][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.699647][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.742044][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.749748][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.775895][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.812021][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.819171][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.845476][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.857614][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.865184][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.891993][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.928053][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.935076][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.961990][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.980993][ T4191] device hsr_slave_0 entered promiscuous mode
[   66.992369][ T4191] device hsr_slave_1 entered promiscuous mode
[   66.999392][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.007164][ T4191] Cannot create hsr debugfs directory
[   67.020818][ T4189] device hsr_slave_0 entered promiscuous mode
[   67.027757][ T4189] device hsr_slave_1 entered promiscuous mode
[   67.034842][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.042926][ T4189] Cannot create hsr debugfs directory
[   67.114291][ T4190] device hsr_slave_0 entered promiscuous mode
[   67.120859][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   67.120860][ T3521] Bluetooth: hci1: command 0x0409 tx timeout
[   67.121820][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   67.127693][ T3521] Bluetooth: hci4: command 0x0409 tx timeout
[   67.136252][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   67.156996][ T4190] device hsr_slave_1 entered promiscuous mode
[   67.163903][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.171589][ T4190] Cannot create hsr debugfs directory
[   67.223768][ T4201] device hsr_slave_0 entered promiscuous mode
[   67.230775][ T4201] device hsr_slave_1 entered promiscuous mode
[   67.237538][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.246014][ T4201] Cannot create hsr debugfs directory
[   67.513029][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   67.525060][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   67.546977][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   67.556493][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   67.592077][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.602736][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.619866][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.634564][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.693173][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   67.729168][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.739646][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.760089][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.817539][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.859040][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.869415][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.884655][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.896863][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.931213][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.963904][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.972818][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   67.985968][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.998186][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.018055][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.029381][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.042322][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.050634][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.058960][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.068847][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.078159][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.085456][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.094877][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.109646][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   68.124542][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.146361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.163493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.173996][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.181199][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.194661][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.202886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.212444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.221676][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.228828][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.237328][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.250779][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.259913][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.268570][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.275628][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.298158][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.323432][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.334581][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.345018][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.354150][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.363622][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.391691][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.402404][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.412228][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.422680][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.431871][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.440229][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.467787][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.480565][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.490196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.501451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.511085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.520279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.530457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.539407][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.559596][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   68.574914][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.584115][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.594019][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.603373][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.614002][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.624056][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.632935][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.640067][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.654886][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.663918][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.672990][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.680132][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.688297][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.701716][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.713382][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.739804][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.752793][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.761763][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.787752][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.831739][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.850058][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.868789][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.885741][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.895781][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.923415][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.946429][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.956259][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.967059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.980353][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.995841][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.017600][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.037527][ T4201] 8021q: adding VLAN 0 to HW filter on device team0
[   69.058723][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.077065][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.130574][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.139645][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.147629][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.163312][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.175835][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.183028][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.195874][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.200903][   T21] Bluetooth: hci2: command 0x041b tx timeout
[   69.210330][   T21] Bluetooth: hci4: command 0x041b tx timeout
[   69.216434][   T21] Bluetooth: hci3: command 0x041b tx timeout
[   69.220027][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.224799][   T21] Bluetooth: hci1: command 0x041b tx timeout
[   69.236995][   T21] Bluetooth: hci0: command 0x041b tx timeout
[   69.244366][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.251521][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.259609][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.272062][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.283984][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   69.297446][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.306990][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.334121][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.352135][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.368880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.384434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.394336][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.409243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.419805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.429423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.437961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.445517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.453883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.489883][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.512350][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.521673][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.538894][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.546007][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.554562][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.563810][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.573146][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.580274][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.589279][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.598212][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.607136][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.615487][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.623649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.633404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.642947][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.653290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.663422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.678415][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.703322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.711914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.721587][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.733116][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.750052][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.762504][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.792628][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.808863][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.825676][ T4192] device veth0_vlan entered promiscuous mode
[   69.879739][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.897405][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.914688][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.925309][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.941588][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.953866][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.968616][ T4192] device veth1_vlan entered promiscuous mode
[   69.989477][ T4191] device veth0_vlan entered promiscuous mode
[   69.998226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.009361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.025588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.035545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.049012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.061592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.070818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.087102][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.105478][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.136666][ T4191] device veth1_vlan entered promiscuous mode
[   70.144629][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.153106][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.163241][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.171340][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.210172][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.229130][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.245521][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.281288][ T4192] device veth0_macvtap entered promiscuous mode
[   70.296299][ T4191] device veth0_macvtap entered promiscuous mode
[   70.313015][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.323038][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.335489][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.350508][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.360946][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.370374][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.390743][ T4192] device veth1_macvtap entered promiscuous mode
[   70.411164][ T4191] device veth1_macvtap entered promiscuous mode
[   70.458307][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.466398][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.480590][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.490272][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.532123][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.540959][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.549754][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.557625][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.567132][ T4201] device veth0_vlan entered promiscuous mode
[   70.580669][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.591262][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.602862][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.614873][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.628380][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.638101][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.647584][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.657654][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.667790][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.678027][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.686612][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.697597][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.713568][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.722705][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.745712][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.753805][ T4189] device veth0_vlan entered promiscuous mode
[   70.762660][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.773622][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.789926][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.803453][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.814218][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.823286][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.833681][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.847415][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.860613][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.870028][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.879096][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.898787][ T4201] device veth1_vlan entered promiscuous mode
[   70.908842][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.917611][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.926708][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.936902][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.950966][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.961122][ T4189] device veth1_vlan entered promiscuous mode
[   71.085065][ T4201] device veth0_macvtap entered promiscuous mode
[   71.116094][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.125533][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.134385][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.144022][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.154333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.165810][ T4201] device veth1_macvtap entered promiscuous mode
[   71.175525][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.185132][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.194596][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.225262][ T4189] device veth0_macvtap entered promiscuous mode
[   71.254285][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.263583][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.273945][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.282501][ T4235] Bluetooth: hci0: command 0x040f tx timeout
[   71.287266][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.289307][ T4235] Bluetooth: hci1: command 0x040f tx timeout
[   71.303191][ T4235] Bluetooth: hci3: command 0x040f tx timeout
[   71.309399][ T4235] Bluetooth: hci4: command 0x040f tx timeout
[   71.312119][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.323299][ T4235] Bluetooth: hci2: command 0x040f tx timeout
[   71.332694][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.341378][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.363589][ T4189] device veth1_macvtap entered promiscuous mode
[   71.376848][ T4190] device veth0_vlan entered promiscuous mode
[   71.391543][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.412916][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.426070][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.435467][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.449406][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.449632][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.468130][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.479702][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.491934][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.503710][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.514805][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.525722][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.537186][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.548698][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.566399][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.575413][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.586636][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.595513][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.612820][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.623459][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.631873][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.640833][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.650265][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.659304][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.672253][ T4190] device veth1_vlan entered promiscuous mode
[   71.682457][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.693755][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.703919][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.714735][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.728098][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.739030][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.750910][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.779588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.788220][  T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.796106][  T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.800605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.815537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.852053][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.865691][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.876938][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.888020][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.898261][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.908926][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.921967][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.941036][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.949692][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.991526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.000903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.011109][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.020684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.029454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.043610][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.052845][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.062326][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.072699][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.095114][ T4190] device veth0_macvtap entered promiscuous mode
[   72.102825][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.114207][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.123174][ T4190] device veth1_macvtap entered promiscuous mode
[   72.153558][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.165104][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.174869][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.196346][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.209072][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.219339][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.230066][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.241404][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.258096][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.271752][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.282436][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.294775][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.339416][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.362611][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.373830][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.392720][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.406354][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.418672][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.429073][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.449592][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.465530][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.476436][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.490098][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.502418][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.520222][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.528126][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.536972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.589757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.608770][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.617528][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.632950][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.660648][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.764066][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.772197][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.794711][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.809575][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.853522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.872282][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.888626][ T4275] process 'syz.1.2' launched './file0' with NULL argv: empty string added
[   73.018220][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   73.064401][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.088278][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.088879][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.120298][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.170860][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.192079][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.222676][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.257398][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.314542][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.359568][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[   73.372250][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[   73.382213][ T4279] netlink: 'syz.2.3': attribute type 11 has an invalid length.
[   73.420415][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[   73.429608][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[   73.448998][ T1108] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[   73.462840][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   73.465233][ T1108] usb 4-1: config 0 has no interface number 0
[   73.520152][ T1108] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[   73.555878][ T1108] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.605637][ T1108] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   73.818111][ T1108] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[   73.827259][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.855996][ T1108] usb 4-1: Product: syz
[   73.876209][ T1108] usb 4-1: Manufacturer: syz
[   73.886417][ T1108] usb 4-1: SerialNumber: syz
[   73.935360][ T1108] usb 4-1: config 0 descriptor??
[   73.942647][ T4291] binder: BINDER_SET_CONTEXT_MGR already set
[   73.982999][ T4291] binder: 4290:4291 ioctl 4018620d 200000004a80 returned -16
[   73.994581][ T4273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.021482][ T1108] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[   74.048960][ T1108] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[   74.127415][ T1108] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   74.167908][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.260103][ T4178] usb 4-1: USB disconnect, device number 2
[   74.279823][ T4178] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   74.297056][ T4178] cyberjack 4-1:0.69: device disconnected
[   74.407981][   T21] usb 3-1: Using ep0 maxpacket: 16
[   74.529138][   T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.544291][   T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.738147][   T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   74.747258][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.777990][   T21] usb 3-1: Product: syz
[   74.782218][   T21] usb 3-1: Manufacturer: syz
[   74.834153][   T21] usb 3-1: SerialNumber: syz
[   74.913692][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.144140][ T4303] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET)
[   75.208704][   T21] usb 3-1: 0:2 : does not exist
[   75.304102][   T21] usb 3-1: USB disconnect, device number 2
[   75.609406][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   76.161959][ T4319] kvm: pic: non byte write
[   77.128065][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.345040][ T4336] fuse: Bad value for 'fd'
[   77.355917][ T4338] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.21'.
[   77.378014][   T21] usb 1-1: Using ep0 maxpacket: 16
[   77.383633][ T4336] binder: 4330:4336 unknown command 0
[   77.402374][ T4336] binder: 4330:4336 ioctl c0306201 200000004a40 returned -22
[   77.501743][   T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[   77.718221][   T21] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   77.736154][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.763604][   T21] usb 1-1: Product: syz
[   77.776738][   T21] usb 1-1: Manufacturer: syz
[   77.795150][   T21] usb 1-1: SerialNumber: syz
[   77.823045][   T21] usb 1-1: config 0 descriptor??
[   77.998435][ T4195] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.430050][ T4353] kvm: pic: non byte write
[   78.518128][ T4195] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[   78.527592][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   78.551860][ T4195] usb 2-1: Product: syz
[   78.556075][ T4195] usb 2-1: SerialNumber: syz
[   78.584532][ T4195] usb 2-1: config 0 descriptor??
[   78.599183][   T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   78.861625][ T4195] usb 2-1: USB disconnect, device number 2
[   79.018149][   T21] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[   79.027115][   T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129
[   79.078258][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   79.228143][   T21] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[   79.237489][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.245623][   T21] usb 5-1: Product: syz
[   79.250022][   T21] usb 5-1: Manufacturer: syz
[   79.254658][   T21] usb 5-1: SerialNumber: syz
[   79.263536][   T21] usb 5-1: config 0 descriptor??
[   79.338147][   T23] usb 4-1: Using ep0 maxpacket: 32
[   79.468166][   T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[   79.476703][   T23] usb 4-1: config 0 has no interface number 0
[   79.483850][   T23] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   79.657050][ T4377] =======================================================
[   79.657050][ T4377] WARNING: The mand mount option has been deprecated and
[   79.657050][ T4377]          and is ignored by this kernel. Remove the mand
[   79.657050][ T4377]          option from the mount to silence this warning.
[   79.657050][ T4377] =======================================================
[   79.708208][   T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   79.727874][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.745270][   T23] usb 4-1: Product: syz
[   79.760410][   T23] usb 4-1: Manufacturer: syz
[   79.775469][   T23] usb 4-1: SerialNumber: syz
[   79.813353][   T23] usb 4-1: config 0 descriptor??
[   79.880938][   T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   79.939173][   T21] mos7840 5-1:0.0: required endpoints missing
[   79.953525][   T21] usb 5-1: USB disconnect, device number 2
[   80.098054][   T23] usb 4-1: qt2_setup_urbs - submit read urb failed -8
[   80.105520][   T23] quatech2: probe of 4-1:0.51 failed with error -8
[   80.223797][   T21] usb 1-1: USB disconnect, device number 2
[   80.323791][ T4195] usb 4-1: USB disconnect, device number 3
[   80.434429][ T4392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   80.477613][ T4392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   80.517512][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[   81.057844][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   81.067878][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   82.288850][ T4195] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   82.669081][ T4195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.714767][ T4195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.763784][ T4195] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[   82.787930][ T4195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.799356][ T4195] usb 4-1: config 0 descriptor??
[   82.857654][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[   82.867668][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[   82.894465][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'.
[   82.927932][ T3521] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.094700][ T4439] netlink: 'syz.1.50': attribute type 7 has an invalid length.
[   83.198183][ T3521] usb 1-1: Using ep0 maxpacket: 16
[   83.323894][ T3521] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.335227][ T3521] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.347983][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.402953][ T4195] hid-generic 0003:18D1:9400.0001: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0
[   83.528482][ T3521] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.553711][ T3521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.576408][ T3521] usb 1-1: Product: syz
[   83.588080][ T4234] usb 3-1: Using ep0 maxpacket: 8
[   83.596594][ T3521] usb 1-1: Manufacturer: syz
[   83.612225][ T3521] usb 1-1: SerialNumber: syz
[   83.641226][ T4235] usb 4-1: USB disconnect, device number 4
[   83.828127][ T4195] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.868078][ T4234] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   83.877191][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.902747][ T4234] usb 3-1: Product: syz
[   83.907266][ T4234] usb 3-1: Manufacturer: syz
[   83.911987][ T4234] usb 3-1: SerialNumber: syz
[   83.938834][ T4234] usb 3-1: config 0 descriptor??
[   83.959246][ T3521] usb 1-1: 0:2 : does not exist
[   83.980783][ T4234] gspca_main: se401-2.14.0 probing 047d:5003
[   84.022020][ T3521] usb 1-1: USB disconnect, device number 3
[   84.077974][ T4195] usb 2-1: Using ep0 maxpacket: 8
[   84.181036][ T4442] udc-core: couldn't find an available UDC or it's busy
[   84.188800][ T4442] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   84.271035][ T4456] binder: 4455:4456 ioctl c0306201 0 returned -14
[   84.280223][ T4454] af_packet: tpacket_rcv: packet too big, clamped from 184 to 4294967272. macoff=96
[   84.292461][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.369060][ T4195] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   84.385228][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.404889][ T4195] usb 2-1: Product: syz
[   84.425138][ T4195] usb 2-1: Manufacturer: syz
[   84.430214][ T4234] gspca_se401: ExtraFeatures: 4
[   84.443205][ T4234] gspca_se401: Frame size: 64x0 bayer
[   84.451963][ T4195] usb 2-1: SerialNumber: syz
[   84.457537][ T4234] gspca_se401: Frame size: 0x0 1/16th janggu
[   84.499768][ T4195] usb 2-1: config 0 descriptor??
[   84.508834][ T4234] gspca_se401: Frame size: 0x0 1/16th janggu
[   84.550028][ T4234] gspca_se401: Frame size: 0x0 1/16th janggu
[   84.570053][ T4234] gspca_se401: Frame size: 0x0 1/16th janggu
[   84.590610][ T4195] gspca_main: se401-2.14.0 probing 047d:5003
[   84.672116][ T4442] udc-core: couldn't find an available UDC or it's busy
[   84.688053][ T4442] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   84.837923][ T4235] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.921837][ T4234] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   84.977247][ T4234] usb 3-1: USB disconnect, device number 3
[   85.124410][ T4235] usb 1-1: Using ep0 maxpacket: 16
[   85.238850][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'.
[   85.248138][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'.
[   85.267632][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'.
[   85.328343][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short
[   85.458189][ T4235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.468249][ T4195] usb 2-1: reset high-speed USB device number 3 using dummy_hcd
[   85.533820][ T4235] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   85.808471][ T4235] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   85.823965][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.832641][ T4235] usb 1-1: Product: syz
[   85.837991][ T4235] usb 1-1: Manufacturer: syz
[   85.846667][ T4235] usb 1-1: SerialNumber: syz
[   85.858014][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   86.087984][ T4195] gspca_se401: read req failed req 0x06 error -71
[   86.103716][ T4195] se401: probe of 2-1:0.0 failed with error -71
[   86.121959][ T4461] udc-core: couldn't find an available UDC or it's busy
[   86.134434][ T4195] usb 2-1: USB disconnect, device number 3
[   86.146383][ T4461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   86.228364][ T4236] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[   86.252517][ T4236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129
[   86.274928][ T4235] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   86.323153][ T4235] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   86.448368][ T4236] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[   86.462965][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.474218][ T4461] Zero length message leads to an empty skb
[   86.493965][ T4236] usb 3-1: Product: syz
[   86.498508][ T4236] usb 3-1: Manufacturer: syz
[   86.499268][ T4461] netlink: 'syz.0.59': attribute type 21 has an invalid length.
[   86.503151][ T4236] usb 3-1: SerialNumber: syz
[   86.510970][ T4236] usb 3-1: config 0 descriptor??
[   86.530089][ T4461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.59'.
[   86.802068][   T13] cfg80211: failed to load regulatory.db
[   86.908096][ T4236] mos7840 3-1:0.0: required endpoints missing
[   86.948149][ T4236] usb 3-1: USB disconnect, device number 4
[   87.670696][ T4235] usb 1-1: USB disconnect, device number 4
[   88.416949][ T4513] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.557896][   T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   88.574264][ T4528] binder: 4527:4528 ioctl c0306201 0 returned -14
[   88.684787][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   88.688278][ T4236] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   88.717670][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   88.937900][ T4236] usb 3-1: Using ep0 maxpacket: 16
[   89.048123][   T13] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[   89.057353][   T13] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   89.065666][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.068131][   T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   89.085218][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   89.096342][   T13] usb 4-1: Product: syz
[   89.104734][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   89.114568][   T13] usb 4-1: SerialNumber: syz
[   89.121393][   T13] usb 4-1: config 0 descriptor??
[   89.126586][ T4236] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   89.136409][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.228245][ T4236] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   89.237362][ T4236] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   89.249373][ T4236] usb 3-1: Manufacturer: syz
[   89.256562][ T4236] usb 3-1: config 0 descriptor??
[   89.390384][   T13] usb 4-1: USB disconnect, device number 5
[   89.499169][   T21] usb 2-1: config 16 has an invalid interface number: 237 but max is 0
[   89.513758][   T21] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   89.546143][   T21] usb 2-1: config 16 has no interface number 0
[   89.552756][   T21] usb 2-1: config 16 interface 237 altsetting 253 endpoint 0x7 has invalid maxpacket 1537, setting to 64
[   89.575665][   T21] usb 2-1: config 16 interface 237 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0
[   89.596379][   T21] usb 2-1: config 16 interface 237 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.638854][   T21] usb 2-1: config 16 interface 237 has no altsetting 0
[   89.807900][ T4236] rc_core: IR keymap rc-hauppauge not found
[   89.814219][ T4236] Registered IR keymap rc-empty
[   89.879853][   T21] usb 2-1: New USB device found, idVendor=044f, idProduct=37f3, bcdDevice=34.02
[   89.904589][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   89.910808][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.938427][   T21] usb 2-1: Product: syz
[   89.944130][   T21] usb 2-1: Manufacturer: syz
[   89.955483][   T21] usb 2-1: SerialNumber: syz
[   90.036819][ T4535] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   90.049057][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.238575][ T4236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   90.304443][ T4236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6
[   90.379765][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.407981][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.438018][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.468001][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.498069][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.516273][   T21] usb 2-1: USB disconnect, device number 4
[   90.528709][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.570697][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.600829][   T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   90.628124][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.658117][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.687963][ T4236] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   90.719372][ T4236] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   90.737217][ T4236] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   90.895441][   T21] usb 3-1: USB disconnect, device number 5
[   91.018133][   T23] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[   91.037133][   T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129
[   91.274036][   T23] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[   91.293523][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.337842][   T23] usb 4-1: Product: syz
[   91.342083][   T23] usb 4-1: Manufacturer: syz
[   91.363414][   T23] usb 4-1: SerialNumber: syz
[   92.198894][   T23] usb 4-1: config 0 descriptor??
[   93.281555][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'.
[   93.308222][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'.
[   93.449362][   T23] mos7840 4-1:0.0: required endpoints missing
[   93.487586][   T23] usb 4-1: USB disconnect, device number 6
[   93.600116][ T4590] binder: 4589:4590 ioctl c0306201 0 returned -14
[   96.948066][ T4234] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   97.318205][ T4234] usb 4-1: config index 0 descriptor too short (expected 7768, got 18)
[   97.337014][ T4234] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[   97.352926][ T4234] usb 4-1: config 0 has no interface number 0
[   97.361743][ T4234] usb 4-1: too many endpoints for config 0 interface 55 altsetting 169: 64, using maximum allowed: 30
[   97.394963][ T4234] usb 4-1: config 0 interface 55 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[   97.417889][ T4234] usb 4-1: config 0 interface 55 has no altsetting 0
[   97.424754][ T4234] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[   97.438104][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.477235][ T4234] usb 4-1: config 0 descriptor??
[   97.540137][ T4234] ftdi_sio 4-1:0.55: FTDI USB Serial Device converter detected
[   97.557353][ T4234] usb 4-1: Detected FT-X
[   97.748883][ T4234] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   97.792909][ T4234] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   97.828290][ T4234] ftdi_sio 4-1:0.55: GPIO initialisation failed: -71
[   97.846269][ T4234] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   97.933956][ T4234] usb 4-1: USB disconnect, device number 7
[   97.966036][ T4234] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   98.005236][ T4234] ftdi_sio 4-1:0.55: device disconnected
[   99.817870][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.837848][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.847844][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.857837][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.867840][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.877845][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.887834][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   99.897842][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  101.428099][ T4669] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.697919][ T4669] usb 5-1: Using ep0 maxpacket: 16
[  101.848024][ T4669] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.866627][ T4669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  101.897253][ T4669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  101.921132][ T4669] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  101.971894][ T4669] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.108224][ T4669] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  102.132336][ T4669] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  102.175001][ T4669] usb 5-1: Manufacturer: syz
[  102.205779][ T4669] usb 5-1: config 0 descriptor??
[  103.107939][ T4669] rc_core: IR keymap rc-hauppauge not found
[  103.115916][ T4669] Registered IR keymap rc-empty
[  103.143908][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  103.238110][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  103.327950][ T4195] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.352186][   T26] audit: type=1804 audit(1782456312.489:2): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.120" name="bus" dev="ramfs" ino=33575 res=1 errno=0
[  103.948039][ T4195] usb 3-1: Using ep0 maxpacket: 16
[  104.847242][ T4669] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  104.861735][ T4669] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7
[  104.908073][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  104.937961][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  104.960061][   T26] audit: type=1804 audit(1782456312.509:3): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.120" name="bus" dev="ramfs" ino=33575 res=1 errno=0
[  104.980840][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  104.998966][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.030116][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.048201][ T4712] binder: BINDER_SET_CONTEXT_MGR already set
[  105.054263][ T4712] binder: 4709:4712 ioctl 4018620d 200000004a80 returned -16
[  105.087915][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.098204][ T4195] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.124022][ T4195] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.131313][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.198052][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.228094][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.261438][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.297940][ T4669] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  105.333702][ T4195] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  105.341940][ T4669] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  105.355476][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.366055][ T4669] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  105.379967][ T4195] usb 3-1: Product: syz
[  105.384206][ T4195] usb 3-1: Manufacturer: syz
[  105.420961][ T4669] usb 5-1: USB disconnect, device number 3
[  105.441115][ T4195] usb 3-1: SerialNumber: syz
[  105.656448][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'.
[  105.718400][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'.
[  105.784720][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[  105.800983][ T4697] udc-core: couldn't find an available UDC or it's busy
[  105.831244][ T4697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  105.898559][ T4195] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  105.907118][ T4195] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  106.198059][ T4727] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  106.240490][ T4727] team0: Port device team_slave_0 removed
[  106.336473][ T4697] netlink: 'syz.2.119': attribute type 21 has an invalid length.
[  106.390770][ T4697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.119'.
[  106.414791][ T4749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  106.421771][ T4749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  106.499433][ T4749] vhci_hcd vhci_hcd.0: Device attached
[  106.510093][ T4758] fuse: Bad value for 'fd'
[  106.697945][ T4669] vhci_hcd: vhci_device speed not set
[  106.768680][ T4669] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  107.022026][ T4750] vhci_hcd: connection reset by peer
[  107.069858][ T4523] vhci_hcd: stop threads
[  107.075104][ T4523] vhci_hcd: release socket
[  107.144569][ T4523] vhci_hcd: disconnect device
[  107.329099][ T4195] usb 3-1: USB disconnect, device number 6
[  107.465050][ T4778] binder: 4774:4778 ioctl c0306201 0 returned -14
[  107.497668][   T26] audit: type=1800 audit(1782456316.629:4): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.130" name="bus" dev="ramfs" ino=33646 res=0 errno=0
[  107.620784][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.210786][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[  108.230143][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[  108.264065][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[  109.313963][ T4794] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  109.335957][ T4794] team0: Port device team_slave_0 removed
[  110.688351][ T4836] binder: BINDER_SET_CONTEXT_MGR already set
[  110.754235][ T4832] binder: 4831:4832 ioctl c0306201 0 returned -14
[  110.793812][ T4836] binder: 4831:4836 ioctl 4018620d 200000004a80 returned -16
[  111.918019][ T4669] vhci_hcd: vhci_device speed not set
[  112.538162][ T4178] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  112.650900][   T26] audit: type=1800 audit(1782456321.776:5): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.154" name="bus" dev="ramfs" ino=33725 res=0 errno=0
[  112.818123][ T4178] usb 2-1: Using ep0 maxpacket: 16
[  113.148545][ T4178] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  113.196346][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.310483][ T4178] usb 2-1: Product: syz
[  113.369318][ T4178] usb 2-1: Manufacturer: syz
[  113.411297][ T4178] usb 2-1: SerialNumber: syz
[  113.602927][ T4178] usb 2-1: config 0 descriptor??
[  113.794717][ T4178] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  114.859725][ T4178] ssu100: probe of 2-1:0.0 failed with error -110
[  115.486185][ T4669] usb 2-1: USB disconnect, device number 5
[  116.381819][ T4877] binder: BC_ACQUIRE_RESULT not supported
[  116.388418][ T4877] binder: 4874:4877 ioctl c0306201 200000000640 returned -22
[  117.012003][   T26] audit: type=1800 audit(1782456326.146:6): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="bus" dev="ramfs" ino=35979 res=0 errno=0
[  117.441711][ T4888] binder: 4887:4888 ioctl c0306201 0 returned -14
[  118.361567][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.379012][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.388981][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.399242][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.415196][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.447384][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.463623][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.473226][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.552626][ T4901] IPVS: length: 30 != 120
[  118.599395][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  118.613726][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  121.463375][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'.
[  121.522148][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'.
[  121.867932][ T4178] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  122.238339][ T4178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.249742][ T4178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.260489][ T4178] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  122.300922][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.334350][ T4178] usb 1-1: config 0 descriptor??
[  122.809251][ T4178] hkems 0003:2006:0118.0002: item fetching failed at offset 6/7
[  122.848049][ T4178] hkems 0003:2006:0118.0002: parse failed
[  122.910962][ T4178] hkems: probe of 0003:2006:0118.0002 failed with error -22
[  123.026478][ T1108] usb 1-1: USB disconnect, device number 5
[  123.499083][ T4991] binder: BINDER_SET_CONTEXT_MGR already set
[  123.514162][ T4991] binder: 4990:4991 ioctl 4018620d 200000004a80 returned -16
[  123.620727][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'.
[  123.655471][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'.
[  123.735971][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[  123.967905][   T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  124.249455][   T21] usb 1-1: Using ep0 maxpacket: 16
[  124.419058][   T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.447932][   T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.719074][   T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.732716][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.748016][   T21] usb 1-1: Product: syz
[  124.753786][   T21] usb 1-1: Manufacturer: syz
[  124.769461][   T21] usb 1-1: SerialNumber: syz
[  125.191061][ T5043] comedi comedi3: comedi_parport: I/O port conflict (0x4,3)
[  125.218644][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'.
[  125.245722][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'.
[  125.258210][   T21] usb 1-1: 0:2 : does not exist
[  125.337748][   T21] usb 1-1: USB disconnect, device number 6
[  125.375396][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[  125.417956][ T4248] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  125.613507][ T5057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  125.645176][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.717990][ T4248] usb 5-1: Using ep0 maxpacket: 16
[  125.839684][ T4248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.867322][ T4248] usb 5-1: config 0 has no interfaces?
[  125.892958][ T4248] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  125.933943][ T4248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.994750][ T4248] usb 5-1: config 0 descriptor??
[  126.264531][ T5036] net_ratelimit: 250 callbacks suppressed
[  126.264550][ T5036] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  126.385853][ T5072] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  126.436191][ T4248] usb 5-1: USB disconnect, device number 4
[  127.206605][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[  127.252024][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[  127.537970][ T4248] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  127.847250][ T4248] usb 5-1: Using ep0 maxpacket: 32
[  128.889257][ T4248] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  128.947583][ T4248] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  129.027124][ T4248] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  129.228166][   T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  129.252741][ T4248] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  129.288094][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.310873][ T4248] usb 5-1: Product: syz
[  129.315351][ T4248] usb 5-1: Manufacturer: syz
[  129.339163][ T4248] usb 5-1: SerialNumber: syz
[  129.430438][ T4248] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  129.458530][ T4248] imon 5-1:155.0: unable to initialize intf0, err -19
[  129.471918][ T4248] imon:imon_probe: failed to initialize context!
[  129.487957][   T23] usb 2-1: Using ep0 maxpacket: 16
[  129.494922][ T4248] imon 5-1:155.0: unable to register, err -19
[  129.648153][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.660868][ T5111] binder: BINDER_SET_CONTEXT_MGR already set
[  129.666902][ T5111] binder: 5110:5111 ioctl 4018620d 200000004a80 returned -16
[  129.675071][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.888118][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  129.915504][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.932170][   T23] usb 2-1: Product: syz
[  129.941225][   T23] usb 2-1: Manufacturer: syz
[  129.955798][   T23] usb 2-1: SerialNumber: syz
[  130.319341][   T23] usb 2-1: 0:2 : does not exist
[  130.386392][   T23] usb 2-1: USB disconnect, device number 6
[  130.680250][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.732435][ T4669] usb 5-1: USB disconnect, device number 5
[  131.955187][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'.
[  132.144973][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[  132.650964][ T5132] team0: Port device team_slave_0 removed
[  132.720168][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'.
[  132.898392][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.905165][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  135.948049][   T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  136.088312][ T4669] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  136.153356][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'.
[  136.187901][   T13] usb 2-1: Using ep0 maxpacket: 16
[  136.364529][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'.
[  136.568791][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.569016][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.573473][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'.
[  136.985165][ T4669] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  137.016361][ T4669] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  137.028071][   T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.038024][ T4669] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  137.056704][ T4669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  137.067748][ T4669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  137.107399][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.173800][   T13] usb 2-1: Product: syz
[  137.253470][   T13] usb 2-1: Manufacturer: syz
[  137.268135][ T4669] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  137.302550][   T13] usb 2-1: SerialNumber: syz
[  137.326742][ T4669] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  137.345249][ T4669] usb 3-1: Product: syz
[  137.377827][ T4669] usb 3-1: Manufacturer: syz
[  138.479165][ T4669] cdc_wdm 3-1:1.0: skipping garbage
[  138.484445][ T4669] cdc_wdm 3-1:1.0: skipping garbage
[  138.497082][ T4669] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  138.504798][ T4669] cdc_wdm 3-1:1.0: Unknown control protocol
[  138.689389][   T13] usb 2-1: 0:2 : does not exist
[  138.766453][   T13] usb 2-1: USB disconnect, device number 7
[  139.744222][ T4178] usb 3-1: USB disconnect, device number 7
[  139.759097][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.067399][ T5227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[  140.097972][ T5227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[  140.173571][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[  140.322518][ T5093] Set syz1 is full, maxelem 65536 reached
[  141.938709][ T4178] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  142.194406][ T4178] usb 5-1: Using ep0 maxpacket: 16
[  142.318280][ T4178] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.416704][ T4178] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.588060][ T4178] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.718115][ T3521] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  143.138512][ T3521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.198902][ T3521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.324129][ T3521] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.531193][ T3521] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  143.686142][ T3521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.949336][ T3521] usb 3-1: config 0 descriptor??
[  144.024844][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.033473][ T4178] usb 5-1: Product: syz
[  144.037854][ T4178] usb 5-1: Manufacturer: syz
[  144.042696][ T4178] usb 5-1: SerialNumber: syz
[  144.078261][ T4178] usb 5-1: can't set config #1, error -71
[  144.098409][ T4178] usb 5-1: USB disconnect, device number 6
[  144.130574][ T5276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'.
[  144.627938][ T4178] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  145.018034][ T4178] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  145.059849][ T4178] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  145.087994][ T3521] usbhid 3-1:0.0: can't add hid device: -71
[  145.165387][ T4178] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  145.226563][ T3521] usbhid: probe of 3-1:0.0 failed with error -71
[  145.231359][ T4178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  145.249153][ T3521] usb 3-1: USB disconnect, device number 8
[  145.310120][ T4178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  145.466315][ T4178] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  145.506734][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  145.528496][ T4178] usb 5-1: Product: syz
[  145.543855][ T4178] usb 5-1: Manufacturer: syz
[  145.599524][ T4178] cdc_wdm 5-1:1.0: skipping garbage
[  145.613938][ T4178] cdc_wdm 5-1:1.0: skipping garbage
[  145.627897][ T4669] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  145.654748][ T4178] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  145.675294][ T4178] cdc_wdm 5-1:1.0: Unknown control protocol
[  145.874842][ T5295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  145.898603][ T4669] usb 2-1: Using ep0 maxpacket: 16
[  146.138203][ T4669] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.405724][    T7] usb 5-1: USB disconnect, device number 7
[  146.538363][ T4669] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.574217][ T4669] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  146.789704][ T4669] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  146.846651][ T4669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.867793][ T5280] Set syz1 is full, maxelem 65536 reached
[  146.882429][ T4669] usb 2-1: Product: syz
[  146.905362][ T4669] usb 2-1: Manufacturer: syz
[  146.924863][ T4669] usb 2-1: SerialNumber: syz
[  147.107364][ T5308] binder: 5307:5308 ioctl c0306201 0 returned -14
[  147.247281][ T4669] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  147.271725][ T4669] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  147.507914][ T4276] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  147.700118][ T4669] usb 2-1: USB disconnect, device number 8
[  147.778024][ T4276] usb 3-1: Using ep0 maxpacket: 16
[  147.898139][ T4276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.960364][ T4276] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.113086][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'.
[  148.168384][ T4276] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.187887][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.231954][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.281708][ T4276] usb 3-1: Product: syz
[  148.288388][ T4276] usb 3-1: Manufacturer: syz
[  148.340459][ T4276] usb 3-1: SerialNumber: syz
[  149.113791][ T5314] team0: Port device team_slave_0 removed
[  149.220315][ T4276] usb 3-1: 0:2 : does not exist
[  150.335288][ T4276] usb 3-1: USB disconnect, device number 9
[  152.309992][ T5355] binder: BINDER_SET_CONTEXT_MGR already set
[  152.316083][ T5355] binder: 5354:5355 ioctl 4018620d 200000004a80 returned -16
[  152.339483][ T5356] binder: 5353:5356 ioctl c0306201 0 returned -14
[  152.538799][ T4669] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  153.033933][ T4669] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  153.091863][ T4669] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  153.117851][ T4669] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  153.126889][ T4669] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  153.217864][ T4669] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  153.429793][ T5371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  153.521090][ T4669] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.243236][ T4669] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.298721][ T4669] usb 1-1: Product: syz
[  154.302975][ T4669] usb 1-1: Manufacturer: syz
[  154.371369][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[  154.418802][ T4669] cdc_wdm 1-1:1.0: skipping garbage
[  154.426503][ T4669] cdc_wdm 1-1:1.0: skipping garbage
[  154.539811][ T4669] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  154.545781][ T4669] cdc_wdm 1-1:1.0: Unknown control protocol
[  154.618316][ T4669] usb 1-1: USB disconnect, device number 7
[  155.946321][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  159.083141][ T5407] binder: 5406:5407 ioctl c0306201 0 returned -14
[  160.747953][ T4178] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  160.867061][ T5429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.335'.
[  160.927141][ T5434] tmpfs: Unknown parameter 'quota'
[  161.128467][ T4178] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  161.145531][ T4178] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  161.179976][ T4178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  161.207574][ T4178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  161.250111][ T4178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  161.598636][ T4178] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  162.298108][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  162.306748][ T4178] usb 2-1: Product: syz
[  162.311784][ T4178] usb 2-1: Manufacturer: syz
[  162.391581][ T4178] cdc_wdm 2-1:1.0: skipping garbage
[  162.432462][ T5451] binder: BINDER_SET_CONTEXT_MGR already set
[  162.455444][ T4178] cdc_wdm 2-1:1.0: skipping garbage
[  162.502887][ T5451] binder: 5450:5451 ioctl 4018620d 200000004a80 returned -16
[  162.581336][ T4178] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  162.639477][ T4178] cdc_wdm 2-1:1.0: Unknown control protocol
[  162.932307][ T4276] usb 2-1: USB disconnect, device number 9
[  163.045883][ T5338] Set syz1 is full, maxelem 65536 reached
[  163.246345][ T5468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'.
[  163.657974][ T1108] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  163.848005][ T4669] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  163.867888][ T4276] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  164.028191][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.041046][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.051377][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  164.064878][ T1108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  164.075698][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.097958][ T4669] usb 4-1: Using ep0 maxpacket: 16
[  164.116141][ T1108] usb 1-1: config 0 descriptor??
[  164.308382][ T4669] usb 4-1: unable to get BOS descriptor or descriptor too short
[  164.408416][ T4669] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.428111][ T4276] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  164.431206][ T4669] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.448119][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  164.458266][ T1108] usbhid 1-1:0.0: can't add hid device: -71
[  164.464290][ T1108] usbhid: probe of 1-1:0.0 failed with error -71
[  164.477915][ T4276] usb 5-1: Product: syz
[  164.487232][ T4276] usb 5-1: Manufacturer: syz
[  164.502986][ T1108] usb 1-1: USB disconnect, device number 8
[  164.527899][ T4276] usb 5-1: SerialNumber: syz
[  164.608493][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[  164.620394][ T4276] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  164.692917][ T4669] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  164.702521][ T4669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.728025][ T4669] usb 4-1: Product: syz
[  164.738090][ T4669] usb 4-1: Manufacturer: syz
[  164.754757][ T4669] usb 4-1: SerialNumber: syz
[  164.988277][ T4276] vp7045: USB control message 'out' went wrong.
[  164.995114][ T4276] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  165.030913][ T4669] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  165.038902][ T4276] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  165.048980][ T4669] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  165.088032][ T4276] usb 5-1: USB disconnect, device number 8
[  166.059294][ T4669] usb 4-1: USB disconnect, device number 8
[  166.181723][ T5321] udevd[5321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.269452][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  168.548046][ T1108] usb 4-1: Using ep0 maxpacket: 16
[  168.678209][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.733097][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  168.764011][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'.
[  168.771229][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  168.831705][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  168.978188][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  168.992555][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  169.016155][ T1108] usb 4-1: SerialNumber: syz
[  169.069701][ T5525] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  169.078231][ T5525] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  169.114342][ T1108] hub 4-1:1.0: bad descriptor, ignoring hub
[  169.121869][ T1108] hub: probe of 4-1:1.0 failed with error -5
[  169.337316][ T5525] udc-core: couldn't find an available UDC or it's busy
[  169.359962][ T5525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.588709][ T5525] udc-core: couldn't find an available UDC or it's busy
[  169.632775][ T5525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.648468][ T5557] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[  169.801894][ T5525] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  169.816332][ T5525] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  170.391027][ T1108] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  170.708715][ T4669] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  171.182492][ T5492] Set syz1 is full, maxelem 65536 reached
[  171.297842][    C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68!
[  171.464600][ T4669] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  171.480958][ T4669] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  171.489288][ T4669] usb 1-1: Product: syz
[  171.493981][ T4669] usb 1-1: Manufacturer: syz
[  171.498774][ T4669] usb 1-1: SerialNumber: syz
[  171.548019][    C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03!
[  171.660054][ T4669] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  172.280514][   T21] usb 4-1: USB disconnect, device number 9
[  172.336997][   T21] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  172.547970][ T4669] vp7045: USB control message 'out' went wrong.
[  172.554438][ T4669] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  172.573908][ T4669] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  172.628199][ T4669] usb 1-1: USB disconnect, device number 9
[  173.027953][ T4276] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  173.207928][   T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  173.277881][ T4276] usb 5-1: Using ep0 maxpacket: 8
[  173.398048][ T4276] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  173.416664][ T4276] usb 5-1: config 179 has no interface number 0
[  173.437006][ T4276] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  173.469016][ T4276] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  173.493611][   T21] usb 4-1: Using ep0 maxpacket: 16
[  173.526720][ T4276] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  173.572482][ T4276] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  173.613896][ T4276] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  173.628547][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.676278][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.679143][ T4276] usb 5-1: config 179 interface 65 has no altsetting 0
[  173.725978][ T4276] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  173.758468][ T4276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.887210][ T4276] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8
[  173.938192][   T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  173.960339][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.987846][   T21] usb 4-1: Product: syz
[  173.998040][   T21] usb 4-1: Manufacturer: syz
[  174.013044][   T21] usb 4-1: SerialNumber: syz
[  174.079165][ T4276] usb 5-1: USB disconnect, device number 9
[  174.102723][ T4276] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  174.398003][   T21] usb 4-1: 0:2 : does not exist
[  174.495532][   T21] usb 4-1: USB disconnect, device number 10
[  174.716668][ T5667] netlink: 'syz.4.398': attribute type 1 has an invalid length.
[  174.729428][ T5321] udevd[5321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.766170][ T5667] netlink: 'syz.4.398': attribute type 2 has an invalid length.
[  175.112373][ T5648] Set syz1 is full, maxelem 65536 reached
[  175.283803][ T4276] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  177.367869][ T4276] usb 3-1: Using ep0 maxpacket: 16
[  177.488144][ T4276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.519817][ T4276] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  177.555443][ T4276] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  177.606490][ T4276] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  177.738198][ T4276] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  177.798216][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  178.322330][ T5703] 9pnet: Insufficient options for proto=fd
[  178.823758][   T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  179.057778][    C0] sched: RT throttling activated
[  179.060337][ T4276] usb 3-1: SerialNumber: syz
[  179.097954][   T21] usb 5-1: Using ep0 maxpacket: 16
[  179.238365][   T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.276400][   T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.528294][   T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.537397][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.555780][ T4276] usb 3-1: can't set config #1, error -71
[  179.564574][ T4276] usb 3-1: USB disconnect, device number 10
[  179.634266][   T21] usb 5-1: Product: syz
[  179.644588][   T21] usb 5-1: Manufacturer: syz
[  179.694204][   T21] usb 5-1: SerialNumber: syz
[  179.878422][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'.
[  180.068951][   T21] usb 5-1: 0:2 : does not exist
[  180.601057][   T21] usb 5-1: USB disconnect, device number 10
[  181.220287][ T5731] Set syz1 is full, maxelem 65536 reached
[  181.318049][   T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  181.677968][   T21] usb 5-1: Using ep0 maxpacket: 16
[  181.908081][   T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.963246][   T21] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  181.988506][ T5787] TCP: TCP_TX_DELAY enabled
[  182.849062][   T21] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  182.859253][   T21] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  182.970393][   T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  182.987807][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  183.006120][   T21] usb 5-1: SerialNumber: syz
[  183.038311][ T5765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.045423][ T5765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.091883][   T21] hub 5-1:1.0: bad descriptor, ignoring hub
[  183.112378][   T21] hub: probe of 5-1:1.0 failed with error -5
[  183.297939][ T5751] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  183.337198][ T5765] udc-core: couldn't find an available UDC or it's busy
[  183.354664][ T5765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  183.417918][ T3521] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  183.574677][ T5765] udc-core: couldn't find an available UDC or it's busy
[  183.581892][ T5751] usb 4-1: Using ep0 maxpacket: 16
[  183.591999][ T5765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  183.620521][ T5765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.641023][ T5765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.708181][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.729189][ T5751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.928438][ T5751] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.941683][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.967804][ T5751] usb 4-1: Product: syz
[  183.973696][ T5751] usb 4-1: Manufacturer: syz
[  183.994360][ T5751] usb 4-1: SerialNumber: syz
[  184.024012][ T3521] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  184.043472][ T3521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.071689][ T3521] usb 1-1: Product: syz
[  184.088579][ T3521] usb 1-1: Manufacturer: syz
[  184.093248][ T3521] usb 1-1: SerialNumber: syz
[  184.104798][   T21] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  184.192271][ T5321] udevd[5321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.328175][ T5751] usb 4-1: 0:2 : does not exist
[  184.387599][ T5751] usb 4-1: USB disconnect, device number 11
[  184.638067][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  184.681944][ T5321] udevd[5321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.618010][   T21] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  185.978258][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  186.028248][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32
[  186.078387][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71
[  186.108353][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71
[  186.138549][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[  186.168216][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[  186.198248][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[  186.238031][ T4276] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  186.238566][   T21] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  186.255210][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[  186.267201][   T21] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  186.275595][   T21] usb 2-1: Product: syz
[  186.280059][   T21] usb 2-1: Manufacturer: syz
[  186.284795][   T21] usb 2-1: SerialNumber: syz
[  186.289654][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71
[  186.318454][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71
[  186.331484][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  186.343512][   T21] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  186.354253][ T3521] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  186.364791][ T3521] lan78xx: probe of 1-1:1.0 failed with error -71
[  186.378089][ T3521] usb 1-1: USB disconnect, device number 10
[  186.608080][ T4276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  186.628041][   T21] vp7045: USB control message 'out' went wrong.
[  186.636139][   T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  186.669722][   T21] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  186.686705][   T21] usb 2-1: USB disconnect, device number 10
[  186.788007][ T4276] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  186.797261][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.501964][ T4276] usb 4-1: Product: syz
[  187.508104][ T4276] usb 4-1: Manufacturer: syz
[  187.512752][ T4276] usb 4-1: SerialNumber: syz
[  187.526792][ T4276] usb 4-1: config 0 descriptor??
[  187.588637][ T4276] hub 4-1:0.0: bad descriptor, ignoring hub
[  187.597847][ T4276] hub: probe of 4-1:0.0 failed with error -5
[  187.779021][ T4276] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9
[  187.794002][ T4276] usb 4-1: USB disconnect, device number 12
[  188.808081][ T4276] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  189.087864][ T4276] usb 4-1: Using ep0 maxpacket: 16
[  189.238529][ T4276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.249242][ T4276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  189.418084][ T4276] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  189.427252][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.436451][ T4276] usb 4-1: Product: syz
[  189.440847][ T4276] usb 4-1: Manufacturer: syz
[  189.445481][ T4276] usb 4-1: SerialNumber: syz
[  189.681279][ T5751] usb 5-1: USB disconnect, device number 11
[  189.707155][ T5751] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  189.721674][ T5857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.768050][ T4276] usb 4-1: 0:2 : does not exist
[  189.839718][ T4276] usb 4-1: USB disconnect, device number 13
[  190.194677][ T5321] udevd[5321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.287993][ T4248] Bluetooth: hci2: command 0x0406 tx timeout
[  191.296732][ T4248] Bluetooth: hci4: command 0x0406 tx timeout
[  191.723542][ T4276] Bluetooth: hci3: command 0x0406 tx timeout
[  191.738895][ T4276] Bluetooth: hci1: command 0x0406 tx timeout
[  191.782144][ T4276] Bluetooth: hci0: command 0x0406 tx timeout
[  194.326892][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.333323][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.573614][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  194.803622][ T4276] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  194.917825][   T23] usb 4-1: Using ep0 maxpacket: 16
[  195.057910][ T4276] usb 3-1: Using ep0 maxpacket: 32
[  195.088073][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.128869][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.179144][ T4276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  195.228516][ T4276] usb 3-1: config 0 has no interface number 0
[  195.418132][   T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.435024][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.448163][ T4276] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  195.454265][   T23] usb 4-1: Product: syz
[  195.469326][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.477735][   T23] usb 4-1: Manufacturer: syz
[  195.493535][   T23] usb 4-1: SerialNumber: syz
[  195.504788][ T4276] usb 3-1: Product: syz
[  195.531749][ T4276] usb 3-1: Manufacturer: syz
[  195.536422][ T4276] usb 3-1: SerialNumber: syz
[  195.601759][ T4276] usb 3-1: config 0 descriptor??
[  195.650626][ T4276] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  195.680806][ T4276] usb 3-1: selecting invalid altsetting 1
[  195.686593][ T4276] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  195.773184][ T4276] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  195.824927][ T4276] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  195.859308][ T4276] usb 3-1: media controller created
[  195.861365][   T23] usb 4-1: 0:2 : does not exist
[  195.935796][ T4276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.948137][   T23] usb 4-1: USB disconnect, device number 14
[  196.835444][ T4248] Bluetooth: hci5: command 0x1003 tx timeout
[  197.128201][ T4276] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  197.268910][ T4202] Bluetooth: hci5: sending frame failed (-49)
[  197.282449][ T4276] zl10353_read_register: readreg error (reg=127, ret==-110)
[  197.487178][ T5921] Set syz1 is full, maxelem 65536 reached
[  200.035790][   T23] Bluetooth: hci5: command 0x1001 tx timeout
[  200.042904][ T4202] Bluetooth: hci5: sending frame failed (-49)
[  202.039429][ T6058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.471'.
[  202.078085][ T5751] Bluetooth: hci5: command 0x1009 tx timeout
[  202.670013][ T6055] syz.4.475 (6055) used greatest stack depth: 20016 bytes left
[  204.806395][   T21] usb 3-1: USB disconnect, device number 11
[  205.992509][ T6061] ODEBUG: Out of memory. ODEBUG disabled
[  206.372954][ T4178] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  207.832654][    T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  208.018221][ T4178] usb 1-1: Using ep0 maxpacket: 16
[  208.897843][    T7] usb 5-1: Using ep0 maxpacket: 8
[  208.967951][ T4178] usb 1-1: device descriptor read/all, error -71
[  209.018155][    T7] usb 5-1: config 0 interface 0 has no altsetting 0
[  209.027372][    T7] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  209.067665][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.112891][    T7] usb 5-1: config 0 descriptor??
[  209.148246][    T7] usb 5-1: can't set config #0, error -71
[  209.172451][    T7] usb 5-1: USB disconnect, device number 12
[  209.256450][ T6120] comedi comedi3: mpc624: I/O port conflict (0x100,16)
[  215.897918][ T4178] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  216.278572][ T4178] usb 3-1: Using ep0 maxpacket: 8
[  216.337487][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'.
[  216.346904][ T6170] tipc: Enabling of bearer <Vdp:s> rejected, media not registered
[  216.602666][ T6171] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  217.397936][ T4178] usb 3-1: config 0 interface 0 has no altsetting 0
[  217.404629][ T4178] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  217.459044][ T4178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.487070][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[  217.494119][ T4178] usb 3-1: config 0 descriptor??
[  217.533900][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[  217.559801][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  217.677180][ T6179] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  217.697483][ T6179] team0: Port device team_slave_0 removed
[  218.009981][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x3
[  218.016761][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  218.519120][ T6061] Set syz1 is full, maxelem 65536 reached
[  218.807584][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  218.835904][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  218.915232][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  218.947867][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  218.970273][ T6191] binder: BINDER_SET_CONTEXT_MGR already set
[  218.987967][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  218.997472][ T6191] binder: 6190:6191 ioctl 4018620d 200000004a80 returned -16
[  219.010103][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0xe
[  219.032555][ T4178] lua 0003:1E7D:2C2E.0003: unknown main item tag 0xe
[  219.077617][ T4178] lua 0003:1E7D:2C2E.0003: item fetching failed at offset 27/40
[  219.115410][ T4178] lua 0003:1E7D:2C2E.0003: parse failed
[  219.135682][ T4178] lua: probe of 0003:1E7D:2C2E.0003 failed with error -22
[  219.152567][ T4178] usb 3-1: USB disconnect, device number 12
[  220.041599][ T5751] Bluetooth: hci5: command 0x0409 tx timeout
[  220.091820][ T6183] chnl_net:caif_netlink_parms(): no params data found
[  220.887379][ T6219] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  221.011952][ T6220] netlink: 11 bytes leftover after parsing attributes in process `syz.3.518'.
[  221.359914][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.450897][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.531975][ T6183] device bridge_slave_0 entered promiscuous mode
[  221.591561][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.631552][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.687020][ T6183] device bridge_slave_1 entered promiscuous mode
[  221.812368][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'.
[  222.204685][ T4235] Bluetooth: hci5: command 0x041b tx timeout
[  222.392897][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.825783][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.989431][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'.
[  223.208444][ T4235] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  223.497967][ T4235] usb 1-1: Using ep0 maxpacket: 16
[  223.822915][ T6183] team0: Port device team_slave_0 added
[  223.848377][ T4235] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  223.879306][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.936040][ T6183] team0: Port device team_slave_1 added
[  223.953120][ T4235] usb 1-1: Product: syz
[  223.979863][ T4235] usb 1-1: Manufacturer: syz
[  224.021737][ T4235] usb 1-1: SerialNumber: syz
[  224.127699][ T4235] usb 1-1: config 0 descriptor??
[  224.257517][ T4235] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  224.343535][ T3521] Bluetooth: hci5: command 0x040f tx timeout
[  224.426431][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.501271][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.948040][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'.
[  225.248001][ T4235] ssu100: probe of 1-1:0.0 failed with error -110
[  225.273274][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.458353][ T1108] usb 1-1: USB disconnect, device number 13
[  225.537118][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'.
[  225.567998][ T4235] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  225.627974][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'.
[  225.652878][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.664064][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.693892][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.810651][ T6183] device hsr_slave_0 entered promiscuous mode
[  225.823508][ T4235] usb 4-1: Using ep0 maxpacket: 8
[  225.835036][ T6183] device hsr_slave_1 entered promiscuous mode
[  225.861660][ T6183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.891008][ T6183] Cannot create hsr debugfs directory
[  225.981823][  T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.108049][ T4235] usb 4-1: config 0 interface 0 has no altsetting 0
[  226.124932][ T4235] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  226.134149][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.146767][ T4235] usb 4-1: config 0 descriptor??
[  226.152362][  T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.213602][  T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.270241][  T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.404371][ T3521] Bluetooth: hci5: command 0x0419 tx timeout
[  226.463061][ T6183] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  226.506631][ T6183] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  226.532127][ T6183] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  226.617156][ T6183] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  226.736915][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x3
[  226.749024][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  226.756950][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  226.764609][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  226.776707][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  226.784212][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  226.805766][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  226.814892][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0xe
[  226.822138][ T4235] lua 0003:1E7D:2C2E.0004: unknown main item tag 0xe
[  226.829202][ T4235] lua 0003:1E7D:2C2E.0004: item fetching failed at offset 27/40
[  226.837232][ T4235] lua 0003:1E7D:2C2E.0004: parse failed
[  226.847477][ T4235] lua: probe of 0003:1E7D:2C2E.0004 failed with error -22
[  227.070553][ T4235] usb 4-1: USB disconnect, device number 15
[  227.141863][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.222146][ T6293] ==================================================================
[  227.230685][ T6293] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360
[  227.237974][ T6293] Read of size 8 at addr ffff888029c24c18 by task syz.2.531/6293
[  227.245742][ T6293] 
[  227.248106][ T6293] CPU: 0 PID: 6293 Comm: syz.2.531 Not tainted syzkaller #0
[  227.255432][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  227.265541][ T6293] Call Trace:
[  227.268868][ T6293]  <TASK>
[  227.271837][ T6293]  dump_stack_lvl+0x188/0x250
[  227.276577][ T6293]  ? show_regs_print_info+0x20/0x20
[  227.281827][ T6293]  ? _printk+0xda/0x130
[  227.286025][ T6293]  ? dvb_device_open+0xc5/0x360
[  227.290961][ T6293]  ? load_image+0x410/0x410
[  227.295523][ T6293]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  227.301044][ T6293]  print_address_description+0x60/0x2d0
[  227.306644][ T6293]  ? dvb_device_open+0xc5/0x360
[  227.311545][ T6293]  kasan_report+0xdf/0x130
[  227.316018][ T6293]  ? dvb_device_open+0xc5/0x360
[  227.320933][ T6293]  dvb_device_open+0xc5/0x360
[  227.325673][ T6293]  chrdev_open+0x585/0x5f0
[  227.330153][ T6293]  ? cd_forget+0x160/0x160
[  227.334640][ T6293]  ? fsnotify_perm+0x3a7/0x560
[  227.339454][ T6293]  ? cd_forget+0x160/0x160
[  227.343922][ T6293]  do_dentry_open+0x7f7/0xf90
[  227.348711][ T6293]  ? vfs_open+0x2b/0x80
[  227.352917][ T6293]  path_openat+0x2718/0x2fb0
[  227.357590][ T6293]  ? __kasan_slab_alloc+0xa9/0xc0
[  227.362681][ T6293]  ? do_filp_open+0x400/0x400
[  227.367436][ T6293]  do_filp_open+0x1df/0x400
[  227.372002][ T6293]  ? vfs_tmpfile+0x300/0x300
[  227.376668][ T6293]  ? _raw_spin_unlock+0x24/0x40
[  227.381575][ T6293]  ? alloc_fd+0x59e/0x650
[  227.385967][ T6293]  do_sys_openat2+0x14b/0x500
[  227.390708][ T6293]  ? __lock_acquire+0x7b50/0x7b50
[  227.395790][ T6293]  ? do_sys_open+0xe0/0xe0
[  227.400258][ T6293]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  227.406292][ T6293]  ? lock_chain_count+0x20/0x20
[  227.411204][ T6293]  __x64_sys_openat+0x135/0x160
[  227.416110][ T6293]  do_syscall_64+0x4c/0xa0
[  227.420604][ T6293]  ? clear_bhb_loop+0x30/0x80
[  227.425325][ T6293]  ? clear_bhb_loop+0x30/0x80
[  227.430051][ T6293]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.436008][ T6293] RIP: 0033:0x7fcf702c568e
[  227.440469][ T6293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  227.460214][ T6293] RSP: 002b:00007fcf6e51bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  227.469145][ T6293] RAX: ffffffffffffffda RBX: 00007fcf6e51c6c0 RCX: 00007fcf702c568e
[  227.477160][ T6293] RDX: 0000000000000002 RSI: 00007fcf6e51bc00 RDI: ffffffffffffff9c
[  227.485175][ T6293] RBP: 00007fcf6e51bc00 R08: 0000000000000000 R09: 0000000000000000
[  227.493360][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  227.501373][ T6293] R13: 00007fcf7057e218 R14: 00007fcf7057e180 R15: 00007fff3fc8aed8
[  227.509406][ T6293]  </TASK>
[  227.512483][ T6293] 
[  227.514842][ T6293] Allocated by task 1:
[  227.518929][ T6293]  __kasan_kmalloc+0xaf/0xe0
[  227.523563][ T6293]  dvb_register_device+0x300/0x1dc0
[  227.528795][ T6293]  dvb_register_frontend+0x629/0x900
[  227.534144][ T6293]  vidtv_bridge_probe+0x9c1/0xf30
[  227.539202][ T6293]  platform_probe+0x137/0x1c0
[  227.543907][ T6293]  really_probe+0x276/0xc70
[  227.548443][ T6293]  __driver_probe_device+0x1f5/0x390
[  227.553778][ T6293]  driver_probe_device+0x4f/0x420
[  227.558840][ T6293]  __driver_attach+0x45d/0x660
[  227.563641][ T6293]  bus_for_each_dev+0x182/0x1f0
[  227.568559][ T6293]  bus_add_driver+0x324/0x5d0
[  227.573275][ T6293]  driver_register+0x32d/0x430
[  227.578070][ T6293]  vidtv_bridge_init+0x39/0x70
[  227.582872][ T6293]  do_one_initcall+0x272/0x730
[  227.587671][ T6293]  do_initcall_level+0x13d/0x1f0
[  227.592639][ T6293]  do_initcalls+0x4b/0x90
[  227.597001][ T6293]  kernel_init_freeable+0x3d5/0x560
[  227.602239][ T6293]  kernel_init+0x19/0x1b0
[  227.606690][ T6293]  ret_from_fork+0x1f/0x30
[  227.611139][ T6293] 
[  227.613491][ T6293] Freed by task 6219:
[  227.617490][ T6293]  kasan_set_track+0x4b/0x70
[  227.622113][ T6293]  kasan_set_free_info+0x1f/0x40
[  227.627086][ T6293]  ____kasan_slab_free+0xd5/0x110
[  227.632143][ T6293]  slab_free_freelist_hook+0xec/0x170
[  227.637549][ T6293]  kfree+0xef/0x2a0
[  227.641388][ T6293]  dvb_device_open+0x2d2/0x360
[  227.646188][ T6293]  chrdev_open+0x585/0x5f0
[  227.650635][ T6293]  do_dentry_open+0x7f7/0xf90
[  227.655347][ T6293]  path_openat+0x2718/0x2fb0
[  227.659967][ T6293]  do_filp_open+0x1df/0x400
[  227.664506][ T6293]  do_sys_openat2+0x14b/0x500
[  227.669643][ T6293]  __x64_sys_openat+0x135/0x160
[  227.674529][ T6293]  do_syscall_64+0x4c/0xa0
[  227.678982][ T6293]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.684917][ T6293] 
[  227.687269][ T6293] The buggy address belongs to the object at ffff888029c24c00
[  227.687269][ T6293]  which belongs to the cache kmalloc-256 of size 256
[  227.701504][ T6293] The buggy address is located 24 bytes inside of
[  227.701504][ T6293]  256-byte region [ffff888029c24c00, ffff888029c24d00)
[  227.714739][ T6293] The buggy address belongs to the page:
[  227.720428][ T6293] page:ffffea0000a70900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29c24
[  227.730626][ T6293] head:ffffea0000a70900 order:1 compound_mapcount:0
[  227.737257][ T6293] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  227.745292][ T6293] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41b40
[  227.753918][ T6293] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  227.762528][ T6293] page dumped because: kasan: bad access detected
[  227.768965][ T6293] page_owner tracks the page as allocated
[  227.774706][ T6293] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2837, ts 21149729290, free_ts 0
[  227.792998][ T6293]  get_page_from_freelist+0x24f6/0x2670
[  227.798597][ T6293]  __alloc_pages+0x1ee/0x480
[  227.803227][ T6293]  new_slab+0xc0/0x4b0
[  227.807333][ T6293]  ___slab_alloc+0x807/0xdd0
[  227.811963][ T6293]  kmem_cache_alloc_trace+0xf9/0x290
[  227.817289][ T6293]  kthread+0x10a/0x520
[  227.821398][ T6293]  ret_from_fork+0x1f/0x30
[  227.825854][ T6293] page_owner free stack trace missing
[  227.831485][ T6293] 
[  227.833843][ T6293] Memory state around the buggy address:
[  227.839506][ T6293]  ffff888029c24b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.847595][ T6293]  ffff888029c24b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.855690][ T6293] >ffff888029c24c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  227.863914][ T6293]                             ^
[  227.868811][ T6293]  ffff888029c24c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  227.876912][ T6293]  ffff888029c24d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.885113][ T6293] ==================================================================
[  227.893235][ T6293] Disabling lock debugging due to kernel taint
[  227.902086][ T6293] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  227.909336][ T6293] CPU: 0 PID: 6293 Comm: syz.2.531 Tainted: G    B             syzkaller #0
[  227.918040][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  227.928116][ T6293] Call Trace:
[  227.931424][ T6293]  <TASK>
[  227.934370][ T6293]  dump_stack_lvl+0x188/0x250
[  227.939081][ T6293]  ? show_regs_print_info+0x20/0x20
[  227.944311][ T6293]  ? load_image+0x410/0x410
[  227.948844][ T6293]  panic+0x2f8/0x850
[  227.952799][ T6293]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  227.958988][ T6293]  ? bpf_jit_dump+0xd0/0xd0
[  227.963529][ T6293]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  227.969532][ T6293]  ? _raw_spin_unlock+0x40/0x40
[  227.974438][ T6293]  ? dvb_device_open+0xc5/0x360
[  227.979310][ T6293]  check_panic_on_warn+0x80/0xa0
[  227.984276][ T6293]  ? dvb_device_open+0xc5/0x360
[  227.989158][ T6293]  end_report+0x6d/0xf0
[  227.993349][ T6293]  kasan_report+0x102/0x130
[  227.997909][ T6293]  ? dvb_device_open+0xc5/0x360
[  228.004240][ T6293]  dvb_device_open+0xc5/0x360
[  228.008964][ T6293]  chrdev_open+0x585/0x5f0
[  228.013434][ T6293]  ? cd_forget+0x160/0x160
[  228.017896][ T6293]  ? fsnotify_perm+0x3a7/0x560
[  228.022701][ T6293]  ? cd_forget+0x160/0x160
[  228.027151][ T6293]  do_dentry_open+0x7f7/0xf90
[  228.031864][ T6293]  ? vfs_open+0x2b/0x80
[  228.036044][ T6293]  path_openat+0x2718/0x2fb0
[  228.040672][ T6293]  ? __kasan_slab_alloc+0xa9/0xc0
[  228.045739][ T6293]  ? do_filp_open+0x400/0x400
[  228.050460][ T6293]  do_filp_open+0x1df/0x400
[  228.054993][ T6293]  ? vfs_tmpfile+0x300/0x300
[  228.059622][ T6293]  ? _raw_spin_unlock+0x24/0x40
[  228.064498][ T6293]  ? alloc_fd+0x59e/0x650
[  228.068868][ T6293]  do_sys_openat2+0x14b/0x500
[  228.073576][ T6293]  ? __lock_acquire+0x7b50/0x7b50
[  228.078631][ T6293]  ? do_sys_open+0xe0/0xe0
[  228.083078][ T6293]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  228.089088][ T6293]  ? lock_chain_count+0x20/0x20
[  228.094443][ T6293]  __x64_sys_openat+0x135/0x160
[  228.099320][ T6293]  do_syscall_64+0x4c/0xa0
[  228.103767][ T6293]  ? clear_bhb_loop+0x30/0x80
[  228.108490][ T6293]  ? clear_bhb_loop+0x30/0x80
[  228.113194][ T6293]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  228.119121][ T6293] RIP: 0033:0x7fcf702c568e
[  228.123568][ T6293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  228.143202][ T6293] RSP: 002b:00007fcf6e51bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  228.151647][ T6293] RAX: ffffffffffffffda RBX: 00007fcf6e51c6c0 RCX: 00007fcf702c568e
[  228.159640][ T6293] RDX: 0000000000000002 RSI: 00007fcf6e51bc00 RDI: ffffffffffffff9c
[  228.167660][ T6293] RBP: 00007fcf6e51bc00 R08: 0000000000000000 R09: 0000000000000000
[  228.175655][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  228.183656][ T6293] R13: 00007fcf7057e218 R14: 00007fcf7057e180 R15: 00007fff3fc8aed8
[  228.191675][ T6293]  </TASK>
[  228.195001][ T6293] Kernel Offset: disabled
[  228.199352][ T6293] Rebooting in 86400 seconds..