last executing test programs:

7m37.650657105s ago: executing program 0 (id=16):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0x3, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0x800, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x3ff, 0x3ca3, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x1aa6f321, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000005, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x1032, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x82, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xf, 0x0, 0xfffffffa, 0x3, 0x8001, 0x80000001, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x1, 0x3, 0x6, 0x7ff, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x9, 0x8, 0xff2, 0xfffffffa, 0x0, 0x6, 0x2, 0x8, 0x1, 0x20003, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe4, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000001, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x81, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x77, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x9, 0x0, 0x1, 0xd, 0x3, 0x0, 0x9, 0x9, 0x37a, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x0, 0xd5be, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x6, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xa, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x104, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000005, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xfffffffe, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x5, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x3ff, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0x95, 0x1, 0x4, 0x5, 0xffffffff, 0x4b5f, 0x6, 0x80000001, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xc, 0xa, 0xfffffff7, 0x5, 0xb, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000004, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x80, 0x2, 0x8000, 0x0, 0xfffffffd, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0xd, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x6, 0x0, 0x80000001, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x3, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x74d9ef85, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382b, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x2005, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x8, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x4, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0xa, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x3, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0xffe, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0xf9, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0xfffd, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x2, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x495, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0x4000ff, 0xee, 0x12ee, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x800, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0x80000001, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x2, 0x2, 0xa, 0x9b, 0x6, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x80, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x5, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0x11, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf1, 0xffffff00, 0x8, 0xc, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xff7ffff9, 0x9, 0x800005, 0x53, 0x2, 0x1, 0xfffffffe, 0x2, 0x3, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x80007, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x3, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x3, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]}) (async)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0x3, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0x800, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x3ff, 0x3ca3, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x1aa6f321, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000005, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x1032, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x82, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xf, 0x0, 0xfffffffa, 0x3, 0x8001, 0x80000001, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x1, 0x3, 0x6, 0x7ff, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x9, 0x8, 0xff2, 0xfffffffa, 0x0, 0x6, 0x2, 0x8, 0x1, 0x20003, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe4, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000001, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x81, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x77, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x9, 0x0, 0x1, 0xd, 0x3, 0x0, 0x9, 0x9, 0x37a, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x0, 0xd5be, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x6, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xa, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x104, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000005, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xfffffffe, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x5, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x3ff, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0x95, 0x1, 0x4, 0x5, 0xffffffff, 0x4b5f, 0x6, 0x80000001, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xc, 0xa, 0xfffffff7, 0x5, 0xb, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000004, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x80, 0x2, 0x8000, 0x0, 0xfffffffd, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0xd, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x6, 0x0, 0x80000001, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x3, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x74d9ef85, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382b, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x2005, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x8, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x4, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0xa, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x3, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0xffe, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0xf9, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0xfffd, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x2, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x495, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0x4000ff, 0xee, 0x12ee, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x800, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0x80000001, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x2, 0x2, 0xa, 0x9b, 0x6, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x80, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x5, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0x11, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf1, 0xffffff00, 0x8, 0xc, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xff7ffff9, 0x9, 0x800005, 0x53, 0x2, 0x1, 0xfffffffe, 0x2, 0x3, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x80007, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x3, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x3, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
pipe(&(0x7f0000000340)) (async)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route(r1, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="7c000000680000032cbd7000ffdbdf250a0000002400000004000b00140002000200000003000000000000000300000034000200000000008100009ede8ee8030001000000730000000200000000000000020000004000000002000000050000000100000002000000100008800c0001000000000000000008082005002006d6d08315f2fbaab7cff29b", @ANYRES32=r6, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x54}, 0x4000001)
splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r2, 0x407, 0x100004) (async)
fcntl$setpipe(r2, 0x407, 0x100004)
write$eventfd(r2, &(0x7f0000000240), 0xffffff14)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10) (async)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)

7m36.841695317s ago: executing program 3 (id=21):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000019000100000000000000000080200000001100050000000014000f"], 0x30}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYBLOB="0b9eb65087d1a481c9209e1e630376ca949e", @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006003b"], 0x30}}, 0x768cd7b3cf556d07)
sendmsg$inet(r4, &(0x7f0000000cc0)={&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}], 0x10}, 0x0)

7m36.791527883s ago: executing program 3 (id=22):
set_mempolicy(0x4005, &(0x7f0000000080)=0x1, 0xa)
r0 = getpid()
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101002, 0x0)
sendfile(r1, r1, 0x0, 0x401)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b00010024be3db450b0339912"], 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000)
io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x0, 0x2})
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48)
r5 = fsmount(r3, 0x1, 0xe)
fchdir(r5)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18)
r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @sdr={0x34362947, 0x1}})
r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0xa)
fchdir(r8)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r9, 0x40100, 0x0)
getdents64(r9, 0x0, 0x0)
r10 = syz_pidfd_open(r0, 0x0)
setns(r10, 0x24020000)
socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x6c2f2, 0xffffffffffffffff, 0x0)

7m36.722253783s ago: executing program 0 (id=23):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x7c, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)

7m36.72197211s ago: executing program 3 (id=24):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r1)
write(r0, &(0x7f0000000040)='sessname=s+ device_p/ram0 path=ip:027.0.0.1\x00\x00\x00\x00\x00\x00\x00\x00', 0x33)
r3 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000340), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r3)
recvfrom$unix(r0, &(0x7f0000000200)=""/9, 0x9, 0x2000, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
timer_create(0x2, &(0x7f0000000540)={0x0, 0x15, 0x4, @thr={&(0x7f00000003c0)="c920909958134b6242e49c8817c0db10df592b0a81384103eb2ee2dd0f8a8fc15841804e220bd2c6f0a3b4ad5d596295f678f3b275bd71e6b24fc421b290f121120a0ed57430fdb52ddbf08d2bfbb2be3728b39d3f69d43281f982ee4913a395", &(0x7f0000000440)="9b3bfe606c9cf4be06db77dfa2f06821c92c435b90b8f354d6f72a1c490493c27403b33fe8bf9b949855df4d855009ced9fa57af734b2d584dadcf478cea743cf8afed59645ab33dc69947dc7afcf30c487c903262cac9d4f600e5bf19b5e818fda2a9e6738ecb1a9448aa29432a58d2ed49f4ef80f93634cbba3eed23f2af61de58fa95b3c54c51e09bec80915fa3a049f4f659d9d599581e"}}, &(0x7f0000000580))
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
fcntl$setstatus(r7, 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000740)={{0x3, 0x2, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1)
sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000140)={0x10201, 0x2, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x198a9b84, r0})
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
shutdown(r5, 0x1)
recvmmsg(r5, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4, 0x0)
unlink(&(0x7f00000002c0)='./sys\x00')
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa)
ioctl$XFS_IOC_BULKSTAT(r6, 0x8040587f, &(0x7f00000007c0)={{0x5, 0x4, 0x72d22205, 0x5, 0x1}, &(0x7f0000000680)=[{}]})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)

7m36.721900337s ago: executing program 0 (id=25):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x171)
close(r0) (async)
close(r0)
r1 = inotify_init1(0x800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x160}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00) (async)
fcntl$setstatus(r0, 0x4, 0x2c00)
gettid() (async)
r3 = gettid()
fcntl$setown(r0, 0x8, r3)
fcntl$setsig(r0, 0xa, 0x22) (async)
fcntl$setsig(r0, 0xa, 0x22)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

7m36.651591068s ago: executing program 0 (id=26):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xf000)

7m36.651273678s ago: executing program 0 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
syz_usb_connect$rtl8150(0xbc6d34b4910dfbac, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x304382, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)

7m36.651051518s ago: executing program 3 (id=28):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='1', 0x1)
symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='dummy_udc.0', 0xb)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x3, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x892}, 0x40000)
syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1')
mprotect(&(0x7f000030b000/0x1000)=nil, 0x1000, 0x1000006)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)

7m36.511064143s ago: executing program 3 (id=29):
r0 = socket$rds(0x15, 0x5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="621b1c5ad48eca0f3ced3d2299", 0xd}, {&(0x7f00000000c0)="645e07c1221ccafe964c4e42d8d12709c272e821f9ef70bd7cecf29f5fc87f6dda3a21d83f6cd0bf7d9c184cd0558f61e6e96c57", 0x34}], 0x2, &(0x7f0000000600)}, 0x8095)
bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)

7m36.126275907s ago: executing program 0 (id=30):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)

7m35.652064332s ago: executing program 3 (id=34):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)
socket$unix(0x1, 0x5, 0x0)

7m35.628061371s ago: executing program 32 (id=34):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)
socket$unix(0x1, 0x5, 0x0)

7m21.061645565s ago: executing program 33 (id=30):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f38356e030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

7m9.861611919s ago: executing program 2 (id=313):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e006400022b475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14)

7m9.741854545s ago: executing program 2 (id=315):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)})
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x21, 0x0, 0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x97ff)

7m9.739047425s ago: executing program 2 (id=316):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffec0, 0x240007bd, &(0x7f0000000400)={0x2, 0x4e23, @empty=0xfffffffe}, 0x10)

7m9.661676727s ago: executing program 2 (id=317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x19, r0, 0xd, 0xf)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x24)

7m9.571306016s ago: executing program 2 (id=318):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141)
setsockopt(r1, 0xf3f8, 0x5, &(0x7f0000001340)="d0c1ea4cbd2366c7347db904142ad82456c4f8e1c32a5cf7b9b22a6c9bb76245eecf9054c90fd0fed5661af957046807705308129af7fa14c8a342c5f34083ad3ee7789e34caa490830d3fb12ce810a0c09204dc59a9a13404a174139eb67580219eaa9e781626e08ab08ca110993f65864c0d907fbc947a49d710f0c8e0625b4b260dec1812f0a4ca3f4ac7834761a1152a4b95e2f1a6b28cb7cf5d7601c591", 0xa0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdea}], 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

7m9.501919085s ago: executing program 2 (id=319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x79, 0x12, 0x3ff, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x1, 0x2, 0x879, 0x401, 0x9})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m9.444152904s ago: executing program 34 (id=319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x79, 0x12, 0x3ff, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x1, 0x2, 0x879, 0x401, 0x9})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m45.661817677s ago: executing program 6 (id=639):
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0xf4, [0x1, 0x6, 0x4, 0x44e4, 0x2, 0x7], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000001c0)=""/244}, &(0x7f0000000340)=0x78)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0xffffffffffffff2f)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000380)="d0531b2e9eba3293ab848a28e0fa02bfce29f8f6ce42e525d6bebf74ecea100e2ac181dc192de30d0c407a5cc7fd74bcb45dd52da684dd4ff390f2902b73800c011b9bd8e86f1e20d78c21f693eb7a171ebca8a3ebf37b1a956457f3809f0b66307e5f28699efae180a17aef4e68bf5b6b9cea5ac18b436c27248816ef0f46d70de848e8c9139bfffaf8e02e83320585e7afbbd93006272a05508ad5026a002e34ae4e721a0a2bed117a4171", 0xac)
r0 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

6m45.601758015s ago: executing program 6 (id=640):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141)
setsockopt(r1, 0xf3f8, 0x5, &(0x7f0000001340)="d0c1ea4cbd2366c7347db904142ad82456c4f8e1c32a5cf7b9b22a6c9bb76245eecf9054c90fd0fed5661af957046807705308129af7fa14c8a342c5f34083ad3ee7789e34caa490830d3fb12ce810a0c09204dc59a9a13404a174139eb67580219eaa9e781626e08ab08ca110993f65864c0d907fbc947a49d710f0c8e0625b4b260dec1812f0a4ca3f4ac7834761a1152a4b95e2f1a6b28cb7cf5d7601c591", 0xa0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd", 0xb5}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

6m45.380561532s ago: executing program 6 (id=641):
r0 = epoll_create1(0x80000)
r1 = socket$unix(0x1, 0x5, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x300, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000004}, @TCA_RATE={0x6, 0x5, {0x5, 0xfd}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x10048094)
syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x800)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000140)=0x8001, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@in={0x2, 0xffff, @multicast1}, 0x80, 0x0}}], 0x1, 0x4008011)
syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000201800000030909022000010000000000000000", @ANYRESOCT=r1], 0x0)
io_uring_setup(0x40004c0, &(0x7f0000000040)={0x0, 0x3cb1, 0x40, 0xa, 0x356})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450)
ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1")
r6 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x4c01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x8a000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
capset(&(0x7f0000000040)={0x20080522}, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f00000002c0))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x1fe, 0x4)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000002480)={[0x8200000000000000, 0xb, 0x798, 0x85, 0x2, 0x0, 0x1000, 0x1007, 0x45c5, 0x9, 0x14000000000, 0x1, 0x5, 0x8000000000000000, 0x8001, 0x80000000000004], 0x80a0000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

6m42.321404741s ago: executing program 6 (id=662):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990311000015000500fe803f00000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x3, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x892}, 0x40000)

6m42.228394522s ago: executing program 6 (id=664):
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000800)=0x5)
ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000500)=@lsk={0x6, 0x2, "ca00"})
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x9, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000135000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0xbd7849227728f3a8)
r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100000, 0x2bc})
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x182, 0xfffffffffffffffd)
io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002040)={0x0, 0x6, 0x98, 0x1})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="880097cd", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000058000880540000802c00098028000080060001000a00000014000200ff010000000000000000000000000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000008000500010000001400020077673200"/130], 0x88}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x2, 0x2}, 0x30, 0x0)
landlock_restrict_self(r5, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000280)={0x4, 0x0, [{0x40000000, 0x7ac674a5, 0x6, 0x0, 0x36d2}, {0xd, 0x7, 0xdd, 0xd, 0x4}, {0x80000019, 0x7, 0x8d, 0x807, 0x7}, {0x2, 0x11, 0x0, 0xa, 0x5}]})
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0)
write(r7, &(0x7f00000002c0)='tcp 2', 0x5)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xb82000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="30052abd7000ffdbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="9b46e3f60c000317b887e1d942cb97a03a9f96005a34089de515740099003e8c4571"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r8, r8, 0x2e}, 0x20)

6m42.005290579s ago: executing program 6 (id=669):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b18, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

6m26.976434498s ago: executing program 35 (id=669):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b18, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

4.188345145s ago: executing program 7 (id=4662):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f000000e000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
fallocate(r3, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x101, 0x1, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0)
sendfile(r7, r7, 0x0, 0x3)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
gettid()

4.069400675s ago: executing program 5 (id=4664):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x9, @vbi={0x1, 0x4, 0xdf2, 0x30395056, [0x8, 0x7], [0x6, 0x5], 0x108}})
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
close_range(r0, 0xffffffffffffffff, 0x0)

3.489002809s ago: executing program 7 (id=4665):
io_getevents(0x0, 0x2e5, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

2.629423924s ago: executing program 7 (id=4670):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(0xffffffffffffffff, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r1 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1)
setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40)

2.358765701s ago: executing program 1 (id=4672):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500"], 0x84}}, 0x20008040)

2.358164522s ago: executing program 1 (id=4673):
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))

2.335549491s ago: executing program 4 (id=4674):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)

2.335292622s ago: executing program 1 (id=4675):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080))
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x4, 0x7f, 0x8, 0x9, 0x2, 0x7, 0x0, 0x96a7, 0x8, 0x6, 0x27, 0xfa, 0x3, '\x00', 0x8, 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.264882178s ago: executing program 4 (id=4676):
r0 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x4)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

2.179479083s ago: executing program 4 (id=4677):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406e05e60000000000000109022400010000f80b0904000001030002000921fd7f000122e301090581038936050e72881ffcb3009caafe9c8644346bdd1740a09e64befcc872b76509e0b12a6c5b8a686abc14b3561bba4d02e0439e58499ab0de30410fefc3951af278b901b43ab930a9f97e637101e548fcc6937637f9b5"], 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6(0xa, 0x80000, 0x880001)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
getpgrp(0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="068a61d9b4b11fd6e42c2ad6b4a648106035494bde9d8df20fec29315fc8a8d5401ff7d0541e39a97fbdb0cd0596a875ca29bd6764e7eabbb6a1139531a48dc397ce4ab229e1c785f1fa605cf7a8fd60eddcd9844ba7cd9ead2d78d64b984cd062b035620bdcb8941227b8f79f55137e2af79816d883df781b559b65af58680d878fd0f5188253a5d3", 0x89}, {0x0}, {&(0x7f0000000a00)="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", 0x199}, {&(0x7f0000000440)="c2b0b42802519bb1ba7cfba9b5020768245ee4f92c810fb17007724e335e3696b2ab190e2c7a5c0f3abe57985449e4b3eed41cbc96959c400b50b9d3acc6", 0x3e}, {&(0x7f0000000900)="8bf7f307acd35bb1679e934e41ee850447bef844a9147520ecc01d7b2855597b3da3de28c1aacf968f3957ea0f4a51c2be0897e4c47827957e811e68cebe6dd6e8", 0x41}], 0x5}}], 0x1, 0x4000840)
sendmmsg$inet(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f880", 0xa5}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c8442", 0x18}], 0x3}}], 0x40000000000014b, 0x4000900)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0xba, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000d00)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x2, 0xfbfffffd, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc6a}, 0x94)

2.069726116s ago: executing program 1 (id=4678):
syz_open_dev$loop(0x0, 0x4, 0x12bb41)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.069415192s ago: executing program 1 (id=4679):
io_getevents(0x0, 0x2e5, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

1.739061562s ago: executing program 7 (id=4680):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket(0x6, 0x2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="320000001400090528bd7080faffffff0218ef00", @ANYRES32=r2, @ANYBLOB="08000100ac14141d0800040064000100080002007f00000108000400ffffffff08000a000400000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000001, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

1.189578323s ago: executing program 1 (id=4681):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x8430}, {r1, 0x5303}], 0x2, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

1.120060906s ago: executing program 7 (id=4682):
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000806)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000000)={&(0x7f00008cc000/0x4000)=nil})
landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80108906, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x4040000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

1.04936308s ago: executing program 5 (id=4683):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500"], 0x84}}, 0x20008040)

1.048797346s ago: executing program 4 (id=4684):
fsopen(&(0x7f0000000000)='romfs\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x800, 0x1, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0}, 0x1}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

1.04863426s ago: executing program 7 (id=4685):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000340)=""/251)

997.998426ms ago: executing program 4 (id=4686):
r0 = socket$packet(0x11, 0xa, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000280)=""/92}, {&(0x7f0000000500)=""/139}, {&(0x7f0000000840)=""/234}, {&(0x7f0000000940)=""/4096}], 0x0, &(0x7f0000001ac0)=""/212}, 0x2}], 0x3fffffffffffffd, 0x10162, 0x0)

997.1347ms ago: executing program 5 (id=4687):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x4}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000d0600010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b503b)
syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000001000/0x1000)=nil, 0x1000}, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0xfcffe4229af6bdf3}, [{0x8, 0x0, r5}, {0x8, 0x4, r5}, {0x8, 0x0, r5}, {0x8, 0x2, r5}, {0x8, 0x1}, {0x8, 0x1, r5}, {0x8, 0x4, 0xee01}, {0x8, 0x5}, {0x8, 0x0, r5}, {0x8, 0x1}], {0x10, 0x3}, {0x20, 0x2}}, 0x74, 0x0)
fadvise64(r1, 0xecd, 0x1, 0x0)

127.665426ms ago: executing program 5 (id=4688):
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0)

127.36224ms ago: executing program 5 (id=4689):
io_getevents(0x0, 0x2e5, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

69.434325ms ago: executing program 4 (id=4690):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0))

0s ago: executing program 5 (id=4691):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$9p(r4, &(0x7f0000001480), 0x0)
splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x34000)

kernel console output (not intermixed with test programs):

udit(1788865214.449:7817): avc:  denied  { bind } for  pid=17510 comm="syz.7.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  444.670442][T17524] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  444.670557][T17524] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  444.670919][T17524] bond0: (slave wlan0): Enslaving as an active interface with an up link
[  444.801293][T17538] fuse: Unknown parameter '0x0000000000000003'
[  444.818139][T17540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4087'.
[  444.842656][T17542] syzkaller0: entered promiscuous mode
[  444.842727][T17542] syzkaller0: entered allmulticast mode
[  445.101325][T17559] fuse: Unknown parameter '0x0000000000000003'
[  445.294093][T17580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.295441][T17580] tipc: Resetting bearer <eth:syzkaller0>
[  445.301083][T17578] tipc: Disabling bearer <eth:syzkaller0>
[  445.358112][T17587] Cannot find del_set index 0 as target
[  445.363552][   T44] audit: type=1326 audit(1788865215.329:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.363617][   T44] audit: type=1326 audit(1788865215.329:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.380185][   T44] audit: type=1326 audit(1788865215.349:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.391103][   T44] audit: type=1326 audit(1788865215.349:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.391170][   T44] audit: type=1326 audit(1788865215.349:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.391217][   T44] audit: type=1326 audit(1788865215.349:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.391258][   T44] audit: type=1326 audit(1788865215.349:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.391280][   T44] audit: type=1326 audit(1788865215.349:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1179e159 code=0x7ffc0000
[  445.391300][   T44] audit: type=1326 audit(1788865215.349:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17586 comm="syz.7.4109" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba1179f9c7 code=0x7ffc0000
[  445.395265][T17587] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4109'.
[  445.396313][    C2] Unknown status report in ack skb
[  445.420137][ T9271] usb 9-1: new high-speed USB device number 96 using dummy_hcd
[  445.600039][T17604] syzkaller0: entered promiscuous mode
[  445.602478][T17604] syzkaller0: entered allmulticast mode
[  445.660930][ T9271] usb 9-1: unable to get BOS descriptor or descriptor too short
[  445.660989][ T9271] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  445.662216][ T9271] usb 9-1: unable to read config index 0 descriptor/start: -71
[  445.662233][ T9271] usb 9-1: can't read configurations, error -71
[  445.779407][T17616] syzkaller0: entered promiscuous mode
[  445.779458][T17616] syzkaller0: entered allmulticast mode
[  445.781581][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.082029][T17641] syzkaller0: entered promiscuous mode
[  446.082073][T17641] syzkaller0: entered allmulticast mode
[  446.248950][    T9] usb 10-1: new high-speed USB device number 99 using dummy_hcd
[  446.398947][    T9] usb 10-1: Using ep0 maxpacket: 8
[  446.399682][    T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  446.400186][    T9] usb 10-1: config 0 has no interfaces?
[  446.400214][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.402366][    T9] usb 10-1: config 0 descriptor??
[  446.509045][ T7021] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[  446.607705][T17620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.607983][T17620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.612971][ T6074] usb 10-1: USB disconnect, device number 99
[  446.678898][ T7021] usb 6-1: Using ep0 maxpacket: 16
[  446.683245][ T7021] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  446.686849][ T7021] usb 6-1: config 0 interface 0 has no altsetting 0
[  446.686894][ T7021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.689849][ T7021] usb 6-1: config 0 descriptor??
[  446.938402][T17659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.944067][T17659] tipc: Resetting bearer <eth:syzkaller0>
[  446.952023][T17658] tipc: Disabling bearer <eth:syzkaller0>
[  446.972784][ T7021] usbhid 6-1:0.0: can't add hid device: -71
[  446.972873][ T7021] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  446.975339][ T7021] usb 6-1: USB disconnect, device number 118
[  447.741345][T17687] SET target dimension over the limit!
[  447.754411][T17687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4148'.
[  447.755636][    C3] Unknown status report in ack skb
[  448.027235][T17693] syzkaller0: entered promiscuous mode
[  448.030306][T17693] syzkaller0: entered allmulticast mode
[  448.088911][ T5810] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  448.252094][ T5818] hid_parser_main: 6 callbacks suppressed
[  448.254073][ T5818] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  448.263051][ T5810] usb 6-1: Using ep0 maxpacket: 32
[  448.265770][ T5818] hid-generic 0000:0000:0000.000A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  448.265962][ T5810] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  448.267938][ T5810] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  448.267970][ T5810] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  448.268003][ T5810] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  448.268027][ T5810] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  448.268052][ T5810] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  448.268078][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0
[  448.271185][ T5810] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  448.271199][ T5810] usb 6-1: Product: syz
[  448.271207][ T5810] usb 6-1: Manufacturer: syz
[  448.271215][ T5810] usb 6-1: SerialNumber: syz
[  448.301462][ T5810] usb 6-1: config 0 descriptor??
[  448.304207][T17691] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  448.305499][ T5810] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  448.316133][ T5810] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  448.410335][T17705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4156'.
[  448.468316][T17709] SET target dimension over the limit!
[  448.481192][T17709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4158'.
[  448.523663][ T7021] usb 6-1: USB disconnect, device number 119
[  448.530338][ T7021] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  448.574926][T17713] syzkaller0: entered promiscuous mode
[  448.574977][T17713] syzkaller0: entered allmulticast mode
[  448.626095][T17717] syzkaller0: entered promiscuous mode
[  448.626165][T17717] syzkaller0: entered allmulticast mode
[  448.928964][   T25] usb 12-1: new high-speed USB device number 103 using dummy_hcd
[  449.059039][   T25] usb 12-1: device descriptor read/64, error -71
[  449.298891][   T25] usb 12-1: new high-speed USB device number 104 using dummy_hcd
[  449.318944][ T6074] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  449.428906][   T25] usb 12-1: device descriptor read/64, error -71
[  449.479353][ T6074] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  449.483601][ T6074] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.487533][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.491915][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  449.491930][ T6074] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  449.491954][ T6074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.503893][ T6074] usb 6-1: config 0 descriptor??
[  449.539654][   T25] usb usb12-port1: attempt power cycle
[  449.808349][T17739] syzkaller0: entered promiscuous mode
[  449.808389][T17739] syzkaller0: entered allmulticast mode
[  449.879001][   T25] usb 12-1: new high-speed USB device number 105 using dummy_hcd
[  449.901647][   T25] usb 12-1: device descriptor read/8, error -71
[  449.917563][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.919908][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.922228][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.923822][T17744] syzkaller0: entered promiscuous mode
[  449.923840][T17744] syzkaller0: entered allmulticast mode
[  449.928052][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.930914][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.933345][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.935770][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.938406][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.938422][ T6074] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  449.954650][ T6074] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  450.138984][   T25] usb 12-1: new high-speed USB device number 106 using dummy_hcd
[  450.159701][   T25] usb 12-1: device descriptor read/8, error -71
[  450.183163][    T9] usb 6-1: USB disconnect, device number 120
[  450.269300][   T25] usb usb12-port1: unable to enumerate USB device
[  450.319128][ T6074] usb 9-1: new high-speed USB device number 98 using dummy_hcd
[  450.478868][ T6074] usb 9-1: Using ep0 maxpacket: 32
[  450.481898][ T6074] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  450.485765][ T6074] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  450.488424][ T6074] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  450.492225][ T6074] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  450.492243][ T6074] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  450.492256][ T6074] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  450.492270][ T6074] usb 9-1: config 0 interface 0 has no altsetting 0
[  450.507912][ T6074] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  450.510701][ T6074] usb 9-1: Product: syz
[  450.512299][ T6074] usb 9-1: Manufacturer: syz
[  450.514202][ T6074] usb 9-1: SerialNumber: syz
[  450.516885][ T6074] usb 9-1: config 0 descriptor??
[  450.519735][T17750] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  450.523482][ T6074] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  450.527677][ T6074] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  450.724854][ T6074] usb 9-1: USB disconnect, device number 98
[  450.729009][ T6074] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  450.966690][T17763] SET target dimension over the limit!
[  450.969757][   T44] kauditd_printk_skb: 142 callbacks suppressed
[  450.969804][   T44] audit: type=1326 audit(1788865220.939:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.969844][   T44] audit: type=1326 audit(1788865220.939:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.979684][   T44] audit: type=1326 audit(1788865220.949:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.979730][   T44] audit: type=1326 audit(1788865220.949:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.987240][T17763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4179'.
[  450.988092][    C2] Unknown status report in ack skb
[  450.988681][   T44] audit: type=1326 audit(1788865220.949:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.988727][   T44] audit: type=1326 audit(1788865220.949:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.999022][   T44] audit: type=1326 audit(1788865220.949:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8399e159 code=0x7ffc0000
[  450.999075][   T44] audit: type=1326 audit(1788865220.949:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8399f9c7 code=0x7ffc0000
[  450.999120][   T44] audit: type=1326 audit(1788865220.949:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fda8395e98e code=0x7ffc0000
[  450.999157][   T44] audit: type=1326 audit(1788865220.949:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.1.4179" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda8395e98e code=0x7ffc0000
[  451.100527][T17769] syzkaller0: entered promiscuous mode
[  451.102304][T17769] syzkaller0: entered allmulticast mode
[  451.105225][T17769] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  451.209646][T17771] syzkaller0: entered promiscuous mode
[  451.209704][T17771] syzkaller0: entered allmulticast mode
[  451.261204][ T6074] usb 10-1: new high-speed USB device number 100 using dummy_hcd
[  451.408945][ T6074] usb 10-1: Using ep0 maxpacket: 8
[  451.409735][ T6074] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  451.410705][ T6074] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.410739][ T6074] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  451.410821][ T6074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  451.412747][ T6074] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  451.412768][ T6074] usb 10-1: Product: syz
[  451.412782][ T6074] usb 10-1: Manufacturer: syz
[  451.412796][ T6074] usb 10-1: SerialNumber: syz
[  451.420454][ T6074] usb 10-1: config 0 descriptor??
[  451.478961][ T6074] rc_core: IR keymap rc-imon-rsc not found
[  451.479019][ T6074] Registered IR keymap rc-empty
[  451.479901][ T6074] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0
[  451.482514][ T6074] input: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input66
[  451.625593][ T6074] usb 10-1: USB disconnect, device number 100
[  451.702320][T17790] syzkaller0: entered promiscuous mode
[  451.704827][T17790] syzkaller0: entered allmulticast mode
[  451.710163][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.857235][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.857539][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.857797][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.858289][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.863008][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.863281][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.863534][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.863795][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.864048][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  451.864298][T17794] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  452.041789][   T25] usb 9-1: new high-speed USB device number 99 using dummy_hcd
[  452.190504][   T25] usb 9-1: Using ep0 maxpacket: 32
[  452.191359][   T25] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  452.193071][   T25] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  452.193121][   T25] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  452.193172][   T25] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  452.193208][   T25] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  452.193243][   T25] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  452.193280][   T25] usb 9-1: config 0 interface 0 has no altsetting 0
[  452.196855][   T25] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  452.196890][   T25] usb 9-1: Product: syz
[  452.196928][   T25] usb 9-1: Manufacturer: syz
[  452.196957][   T25] usb 9-1: SerialNumber: syz
[  452.201561][   T25] usb 9-1: config 0 descriptor??
[  452.209190][   T25] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  452.210532][   T25] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  452.251485][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4198'.
[  452.257234][T17811] hsr_slave_0: left promiscuous mode
[  452.259981][T17811] hsr_slave_1: left promiscuous mode
[  452.291079][T17813] syzkaller0: entered promiscuous mode
[  452.291149][T17813] syzkaller0: entered allmulticast mode
[  452.363805][T17819] Cannot find del_set index 0 as target
[  452.382669][T17819] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4202'.
[  452.385539][    C3] Unknown status report in ack skb
[  452.406050][T17796] ldusb 9-1:0.0: Couldn't submit interrupt_in_urb -90
[  452.412956][ T5810] usb 9-1: USB disconnect, device number 99
[  452.414290][ T5810] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  452.455370][T17824] syzkaller0: entered promiscuous mode
[  452.709426][   T25] usb 12-1: new full-speed USB device number 107 using dummy_hcd
[  452.835730][ T5817] hid-generic 0000:0000:0000.000C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  452.859868][   T25] usb 12-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  452.861766][   T25] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  452.861814][   T25] usb 12-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  452.861849][   T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.999269][T17844] syzkaller0: entered promiscuous mode
[  452.999383][T17844] syzkaller0: entered allmulticast mode
[  453.002299][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.125446][T17849] SET target dimension over the limit!
[  453.141672][T17849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'.
[  453.143386][    C3] Unknown status report in ack skb
[  453.214249][T17851] netlink: 'syz.4.4214': attribute type 12 has an invalid length.
[  453.282816][   T25] dvb_ttusb_budget: ttusb_init_controller: error
[  453.282863][   T25] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  453.350678][ T6074] usb 10-1: new high-speed USB device number 101 using dummy_hcd
[  453.361138][   T25] DVB: Unable to find symbol stv0299_attach()
[  453.382526][   T25] DVB: Unable to find symbol tda8083_attach()
[  453.382574][   T25] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  453.509645][ T6074] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  453.513813][ T6074] usb 10-1: config 65 has an invalid interface number: 3 but max is 0
[  453.516710][ T6074] usb 10-1: config 65 has no interface number 0
[  453.521374][ T6074] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.525405][ T6074] usb 10-1: Product: syz
[  453.526826][ T6074] usb 10-1: Manufacturer: syz
[  453.528381][ T6074] usb 10-1: SerialNumber: syz
[  453.535281][ T6074] usb 10-1: 3:1 : does not exist
[  453.537348][ T6074] usb 10-1: 3:2 : does not exist
[  453.614140][T17868] syzkaller0: entered promiscuous mode
[  453.614189][T17868] syzkaller0: entered allmulticast mode
[  453.616261][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.658895][   T25] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  453.734867][T17871] syzkaller0: entered promiscuous mode
[  453.734908][T17871] syzkaller0: entered allmulticast mode
[  453.792111][ T9271] usb 10-1: USB disconnect, device number 101
[  453.819740][   T25] usb 6-1: Using ep0 maxpacket: 32
[  453.823540][   T25] usb 6-1: unable to get BOS descriptor or descriptor too short
[  453.823618][   T25] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  453.824445][   T25] usb 6-1: config 14 has an invalid interface number: 228 but max is 0
[  453.824459][   T25] usb 6-1: config 14 has no interface number 0
[  453.824478][   T25] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  453.824493][   T25] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  453.824507][   T25] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  453.824521][   T25] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  453.824535][   T25] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  453.824549][   T25] usb 6-1: config 14 interface 228 has no altsetting 0
[  453.826898][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.826912][   T25] usb 6-1: Product: syz
[  453.826921][   T25] usb 6-1: Manufacturer: syz
[  453.826929][   T25] usb 6-1: SerialNumber: syz
[  454.239769][   T25] legousbtower 6-1:14.228: interrupt endpoints not found
[  454.328158][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4224'.
[  454.410474][T17881] ipt_REJECT: TCP_RESET invalid for non-tcp
[  454.708449][T17892] SET target dimension over the limit!
[  454.716113][T17892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4231'.
[  454.716805][    C2] Unknown status report in ack skb
[  454.933551][T17904] syzkaller0: entered promiscuous mode
[  454.935422][T17904] syzkaller0: entered allmulticast mode
[  454.945731][T17904] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  454.978884][   T25] usb 9-1: new high-speed USB device number 100 using dummy_hcd
[  455.129297][   T25] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  455.130150][   T25] usb 9-1: config 65 has an invalid interface number: 3 but max is 0
[  455.130163][   T25] usb 9-1: config 65 has no interface number 0
[  455.131653][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.131665][   T25] usb 9-1: Product: syz
[  455.131672][   T25] usb 9-1: Manufacturer: syz
[  455.131680][   T25] usb 9-1: SerialNumber: syz
[  455.137395][   T25] usb 9-1: 3:1 : does not exist
[  455.137405][   T25] usb 9-1: 3:2 : does not exist
[  455.387497][ T5817] usb 9-1: USB disconnect, device number 100
[  455.478608][   T25] usb 12-1: USB disconnect, device number 107
[  455.818888][   T25] usb 12-1: new high-speed USB device number 108 using dummy_hcd
[  455.930787][T17918] syzkaller0: entered promiscuous mode
[  455.932664][T17918] syzkaller0: entered allmulticast mode
[  455.968949][   T25] usb 12-1: Using ep0 maxpacket: 32
[  455.969456][   T25] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  455.970244][   T25] usb 12-1: config index 0 descriptor too short (expected 156, got 27)
[  455.970262][   T25] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  455.970280][   T25] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  455.970293][   T25] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  455.970304][   T25] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  455.970318][   T25] usb 12-1: config 0 interface 0 has no altsetting 0
[  455.971834][   T25] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  455.971846][   T25] usb 12-1: Product: syz
[  455.971854][   T25] usb 12-1: Manufacturer: syz
[  455.971861][   T25] usb 12-1: SerialNumber: syz
[  455.973378][   T25] usb 12-1: config 0 descriptor??
[  455.977238][   T25] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  455.980170][   T25] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  456.039105][   T44] kauditd_printk_skb: 144 callbacks suppressed
[  456.039183][   T44] audit: type=1400 audit(1788865226.009:8123): avc:  denied  { create } for  pid=17919 comm="syz.5.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  456.078567][T17920] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4242'.
[  456.088277][T17920] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4242'.
[  456.093844][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4242'.
[  456.100318][T17920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.176284][T17915] ldusb 12-1:0.0: Couldn't submit interrupt_in_urb -90
[  456.177517][    T9] usb 12-1: USB disconnect, device number 108
[  456.185953][    T9] ldusb 12-1:0.0: LD USB Device #0 now disconnected
[  456.206840][T17929] netlink: 'syz.4.4245': attribute type 1 has an invalid length.
[  456.522857][   T25] usb 6-1: USB disconnect, device number 121
[  456.559988][T17935] syzkaller0: entered promiscuous mode
[  456.560070][T17935] syzkaller0: entered allmulticast mode
[  456.565057][T17935] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  456.733440][T17941] syzkaller0: entered promiscuous mode
[  456.733495][T17941] syzkaller0: entered allmulticast mode
[  456.735298][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.757184][T17944] sctp: [Deprecated]: syz.5.4248 (pid 17944) Use of int in max_burst socket option deprecated.
[  456.757184][T17944] Use struct sctp_assoc_value instead
[  457.087560][T17962] syzkaller0: entered promiscuous mode
[  457.089721][T17962] syzkaller0: entered allmulticast mode
[  457.107516][T17962] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  457.155442][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4257'.
[  457.155543][T17964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.164413][T17964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.285821][T17968] syzkaller0: entered promiscuous mode
[  457.285867][T17968] syzkaller0: entered allmulticast mode
[  457.286994][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.432186][T17970] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4260'.
[  457.458859][    T9] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  457.609216][    T9] usb 6-1: Using ep0 maxpacket: 32
[  457.609858][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  457.611048][    T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  457.611072][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  457.611103][    T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  457.611125][    T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  457.611149][    T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  457.611171][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  457.613088][    T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  457.613108][    T9] usb 6-1: Product: syz
[  457.613121][    T9] usb 6-1: Manufacturer: syz
[  457.613135][    T9] usb 6-1: SerialNumber: syz
[  457.618400][    T9] usb 6-1: config 0 descriptor??
[  457.619964][T17966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  457.621486][    T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  457.624723][    T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  457.668572][T17979] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4264'.
[  457.718878][   T25] usb 9-1: new high-speed USB device number 101 using dummy_hcd
[  457.824484][    T9] usb 6-1: USB disconnect, device number 122
[  457.824594][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  457.828046][    T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  457.879367][   T25] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  457.880282][   T25] usb 9-1: config 65 has an invalid interface number: 3 but max is 0
[  457.880295][   T25] usb 9-1: config 65 has no interface number 0
[  457.882334][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.882347][   T25] usb 9-1: Product: syz
[  457.882355][   T25] usb 9-1: Manufacturer: syz
[  457.882363][   T25] usb 9-1: SerialNumber: syz
[  457.886933][   T25] usb 9-1: 3:1 : does not exist
[  457.886944][   T25] usb 9-1: 3:2 : does not exist
[  458.865436][T15492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  458.873594][T15492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  458.878213][T15492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  458.881499][T15492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  458.882864][T15492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  459.218179][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4274'.
[  459.444121][   T13] macsec0 (unregistering): left allmulticast mode
[  459.444203][   T13] macsec0 (unregistering): left promiscuous mode
[  459.448422][   T13] bridge0: port 4(macsec0) entered disabled state
[  459.501245][ T6445] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  459.649198][ T6445] usb 6-1: Using ep0 maxpacket: 32
[  459.655231][ T6445] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  459.660444][ T6445] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  459.660499][ T6445] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  459.660548][ T6445] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  459.660588][ T6445] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  459.660628][ T6445] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  459.660669][ T6445] usb 6-1: config 0 interface 0 has no altsetting 0
[  459.685786][ T6445] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  459.685821][ T6445] usb 6-1: Product: syz
[  459.685850][ T6445] usb 6-1: Manufacturer: syz
[  459.685871][ T6445] usb 6-1: SerialNumber: syz
[  459.694333][ T6445] usb 6-1: config 0 descriptor??
[  459.696393][T18013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.700277][ T6445] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  459.713035][ T6445] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  459.792350][   T13] bond0: left promiscuous mode
[  459.793919][   T13] bond_slave_0: left promiscuous mode
[  459.795944][   T13] bond_slave_1: left promiscuous mode
[  459.797870][   T13] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  459.798408][   T44] audit: type=1400 audit(1788865229.759:8124): avc:  denied  { write } for  pid=18022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  459.812230][   T13] bridge0: port 3(bond0) entered disabled state
[  459.823693][   T13] bridge_slave_1: left allmulticast mode
[  459.825665][   T13] bridge_slave_1: left promiscuous mode
[  459.827635][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.838032][   T13] bridge_slave_0: left allmulticast mode
[  459.840130][   T13] bridge_slave_0: left promiscuous mode
[  459.842133][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.904143][ T9271] usb 6-1: USB disconnect, device number 123
[  459.904158][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  459.905296][   T44] audit: type=1400 audit(1788865229.869:8125): avc:  denied  { write } for  pid=18025 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  459.918604][ T9271] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  460.027430][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.032118][   T13] bond_slave_0: left allmulticast mode
[  460.035280][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.040624][   T13] bond_slave_1: left allmulticast mode
[  460.046599][   T13] bond0 (unregistering): (slave wlan0): Releasing backup interface
[  460.050114][   T13] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  460.056392][   T13] bond0 (unregistering): Released all slaves
[  460.062153][T17993] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.062248][T17993] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.062352][T17993] bridge_slave_0: entered allmulticast mode
[  460.063521][T17993] bridge_slave_0: entered promiscuous mode
[  460.067197][T17993] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.067236][T17993] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.067293][T17993] bridge_slave_1: entered allmulticast mode
[  460.068422][T17993] bridge_slave_1: entered promiscuous mode
[  460.115110][ T5441] 8021q: adding VLAN 0 to HW filter on device eth18
[  460.122590][   T13] tipc: Left network mode
[  460.132238][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.134690][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.162077][T17993] team0: Port device team_slave_0 added
[  460.163412][T17993] team0: Port device team_slave_1 added
[  460.175502][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.175544][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.175749][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.176558][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.176566][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.176579][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.202831][T17993] hsr_slave_0: entered promiscuous mode
[  460.203376][T17993] hsr_slave_1: entered promiscuous mode
[  460.203710][T17993] debugfs: 'hsr0' already exists in 'hsr'
[  460.203733][T17993] Cannot create hsr debugfs directory
[  460.283291][   T44] audit: type=1400 audit(1788865230.249:8126): avc:  denied  { write } for  pid=18028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.386700][   T44] audit: type=1400 audit(1788865230.349:8127): avc:  denied  { write } for  pid=18031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.445116][ T5441] 8021q: adding VLAN 0 to HW filter on device eth19
[  460.543816][   T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  460.552239][   T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  460.554983][   T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  460.566115][   T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  460.573415][   T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  460.593044][   T44] audit: type=1400 audit(1788865230.559:8128): avc:  denied  { write } for  pid=18037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.684789][   T44] audit: type=1400 audit(1788865230.649:8129): avc:  denied  { write } for  pid=18045 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.749169][ T6445] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  460.860427][   T44] audit: type=1400 audit(1788865230.829:8130): avc:  denied  { write } for  pid=18052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.922109][ T6445] usb 6-1: Using ep0 maxpacket: 16
[  460.924819][ T6445] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  460.926135][ T6445] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.926162][ T6445] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  460.927076][ T6445] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  460.927094][ T6445] usb 6-1: Manufacturer: syz
[  460.932116][ T6445] usb 6-1: config 0 descriptor??
[  460.957728][   T44] audit: type=1400 audit(1788865230.919:8131): avc:  denied  { write } for  pid=18057 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.989590][T15492] Bluetooth: hci2: command tx timeout
[  461.069767][   T44] audit: type=1400 audit(1788865231.039:8132): avc:  denied  { write } for  pid=18060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.126285][T17993] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  461.131756][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  461.132230][T17993] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  461.146217][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  461.181916][T17993] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  461.187943][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  461.188672][T17993] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  461.194219][   T44] audit: type=1400 audit(1788865231.159:8133): avc:  denied  { write } for  pid=18063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.199114][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  461.333795][   T44] audit: type=1400 audit(1788865231.299:8134): avc:  denied  { write } for  pid=18074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.338397][T17993] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.347361][T17993] 8021q: adding VLAN 0 to HW filter on device team0
[  461.351898][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.351981][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.356221][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.356265][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.380566][ T6445] usb 6-1: USB disconnect, device number 124
[  461.478822][   T44] audit: type=1400 audit(1788865231.439:8135): avc:  denied  { write } for  pid=18081 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.574328][T18041] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.574517][T18041] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.574619][T18041] bridge_slave_0: entered allmulticast mode
[  461.576003][T18041] bridge_slave_0: entered promiscuous mode
[  461.578629][T18041] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.578743][T18041] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.579493][T18041] bridge_slave_1: entered allmulticast mode
[  461.580851][T18041] bridge_slave_1: entered promiscuous mode
[  461.588921][   T44] audit: type=1400 audit(1788865231.539:8136): avc:  denied  { write } for  pid=18088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.605588][T18041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.616146][   T44] audit: type=1400 audit(1788865231.579:8137): avc:  denied  { write } for  pid=18092 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.616187][T18041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.694124][T18041] team0: Port device team_slave_0 added
[  461.704048][T18041] team0: Port device team_slave_1 added
[  461.721594][T18041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.721642][T18041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.721675][T18041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  461.722469][T18041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.722476][T18041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.722489][T18041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.747974][T18041] hsr_slave_0: entered promiscuous mode
[  461.748405][T18041] hsr_slave_1: entered promiscuous mode
[  461.748728][T18041] debugfs: 'hsr0' already exists in 'hsr'
[  461.748745][T18041] Cannot create hsr debugfs directory
[  461.907842][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.959926][T18041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.081674][T18041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.093885][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.195285][   T13] team0 (unregistering): Port device team_slave_1 removed
[  462.214804][   T13] team0 (unregistering): Port device team_slave_0 removed
[  462.365294][T18041] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.458514][T18041] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.501587][T17993] veth0_vlan: entered promiscuous mode
[  462.521740][T17993] veth1_vlan: entered promiscuous mode
[  462.588065][T17993] veth0_macvtap: entered promiscuous mode
[  462.590962][T17993] veth1_macvtap: entered promiscuous mode
[  462.605694][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.622728][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.626058][ T5600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.626172][ T5600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.626202][ T5600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.626228][ T5600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.671573][T15492] Bluetooth: hci1: command tx timeout
[  462.685271][   T13] IPVS: stop unused estimator thread 0...
[  462.807670][T18041] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  462.815703][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  462.816288][T18041] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  462.821223][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  462.825869][T18041] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  462.833673][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  462.836715][   T13] bridge_slave_1: left allmulticast mode
[  462.837106][   T13] bridge_slave_1: left promiscuous mode
[  462.837276][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.845206][   T13] bridge_slave_0: left allmulticast mode
[  462.845271][   T13] bridge_slave_0: left promiscuous mode
[  462.845738][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.939818][T18114] loop5: detected capacity change from 0 to 7
[  462.943283][T18114]  loop5: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2
[  462.943370][T18114] loop5: partition table partially beyond EOD, truncated
[  462.943834][T18114] loop5: p1 size 512 extends beyond EOD, truncated
[  462.982990][T18114] loop5: p5 size 512 extends beyond EOD, truncated
[  462.991828][T18114] loop5: p7 size 512 extends beyond EOD, truncated
[  462.999731][T18114] loop5: p9 size 512 extends beyond EOD, truncated
[  463.005376][T18114] loop5: p11 size 512 extends beyond EOD, truncated
[  463.009970][T18114] loop5: p13 size 512 extends beyond EOD, truncated
[  463.012377][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.016445][T18114] loop5: p15 size 512 extends beyond EOD, truncated
[  463.025119][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.025980][T18114] loop5: p17 size 512 extends beyond EOD, truncated
[  463.028757][T18114] loop5: p19 size 512 extends beyond EOD, truncated
[  463.032586][T18114] loop5: p21 size 512 extends beyond EOD, truncated
[  463.034869][T18114] loop5: p23 size 512 extends beyond EOD, truncated
[  463.036622][T18114] loop5: p25 size 512 extends beyond EOD, truncated
[  463.038939][T18114] loop5: p27 size 512 extends beyond EOD, truncated
[  463.040720][T18114] loop5: p29 size 512 extends beyond EOD, truncated
[  463.042745][T18114] loop5: p31 size 512 extends beyond EOD, truncated
[  463.046130][T18114] loop5: p33 size 512 extends beyond EOD, truncated
[  463.049100][   T13] bond0 (unregistering): Released all slaves
[  463.049637][T18114] loop5: p35 size 512 extends beyond EOD, truncated
[  463.056879][T18114] loop5: p37 size 512 extends beyond EOD, truncated
[  463.057697][T18041] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  463.062681][T18114] loop5: p39 size 512 extends beyond EOD, truncated
[  463.065617][T18114] loop5: p41 size 512 extends beyond EOD, truncated
[  463.068580][T18114] loop5: p43 size 512 extends beyond EOD, truncated
[  463.072011][T18114] loop5: p45 size 512 extends beyond EOD, truncated
[  463.074148][T18114] loop5: p47 size 512 extends beyond EOD, truncated
[  463.075681][T18114] loop5: p49 size 512 extends beyond EOD, truncated
[  463.077190][T18114] loop5: p51 size 512 extends beyond EOD, truncated
[  463.078686][T18114] loop5: p53 size 512 extends beyond EOD, truncated
[  463.079143][T15492] Bluetooth: hci2: command tx timeout
[  463.082656][T18114] loop5: p55 size 512 extends beyond EOD, truncated
[  463.084114][T18114] loop5: p57 size 512 extends beyond EOD, truncated
[  463.085743][T18114] loop5: p59 size 512 extends beyond EOD, truncated
[  463.088918][T18114] loop5: p61 size 512 extends beyond EOD, truncated
[  463.090686][T18114] loop5: p63 size 512 extends beyond EOD, truncated
[  463.092066][T18114] loop5: p65 size 512 extends beyond EOD, truncated
[  463.094555][T18114] loop5: p67 size 512 extends beyond EOD, truncated
[  463.097309][T18114] loop5: p69 size 512 extends beyond EOD, truncated
[  463.100941][T18114] loop5: p71 size 512 extends beyond EOD, truncated
[  463.103004][T18114] loop5: p73 size 512 extends beyond EOD, truncated
[  463.105091][T18114] loop5: p75 size 512 extends beyond EOD, truncated
[  463.106517][T18114] loop5: p77 size 512 extends beyond EOD, truncated
[  463.107927][T18114] loop5: p79 size 512 extends beyond EOD, truncated
[  463.109926][T18114] loop5: p81 size 512 extends beyond EOD, truncated
[  463.112229][T18114] loop5: p83 size 512 extends beyond EOD, truncated
[  463.114335][T18114] loop5: p85 size 512 extends beyond EOD, truncated
[  463.115907][T18114] loop5: p87 size 512 extends beyond EOD, truncated
[  463.117879][T18114] loop5: p89 size 512 extends beyond EOD, truncated
[  463.120254][T18114] loop5: p91 size 512 extends beyond EOD, truncated
[  463.121916][T18114] loop5: p93 size 512 extends beyond EOD, truncated
[  463.123517][T18114] loop5: p95 size 512 extends beyond EOD, truncated
[  463.125831][T18114] loop5: p97 size 512 extends beyond EOD, truncated
[  463.128335][T18114] loop5: p99 size 512 extends beyond EOD, truncated
[  463.131547][T18114] loop5: p101 size 512 extends beyond EOD, truncated
[  463.133316][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.134129][T18114] loop5: p103 size 512 extends beyond EOD, truncated
[  463.144255][T18114] loop5: p105 size 512 extends beyond EOD, truncated
[  463.153446][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.153465][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.154281][T18114] loop5: p107 size 512 extends beyond EOD, truncated
[  463.157813][T18114] loop5: p109 size 512 extends beyond EOD, truncated
[  463.164622][T18114] loop5: p111 size 512 extends beyond EOD, truncated
[  463.167260][T18114] loop5: p113 size 512 extends beyond EOD, truncated
[  463.176429][T18114] loop5: p115 size 512 extends beyond EOD, truncated
[  463.179894][T18114] loop5: p117 size 512 extends beyond EOD, truncated
[  463.183153][T18114] loop5: p119 size 512 extends beyond EOD, truncated
[  463.186142][T18114] loop5: p121 size 512 extends beyond EOD, truncated
[  463.188458][   T13] tipc: Left network mode
[  463.202539][ T1362] usb 9-1: USB disconnect, device number 101
[  463.239522][T18114] loop5: p123 size 512 extends beyond EOD, truncated
[  463.243238][T18114] loop5: p125 size 512 extends beyond EOD, truncated
[  463.269635][T18114] loop5: p127 size 512 extends beyond EOD, truncated
[  463.286023][T18114] loop5: p129 size 512 extends beyond EOD, truncated
[  463.292502][T18114] loop5: p131 size 512 extends beyond EOD, truncated
[  463.300076][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.300136][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.314170][T18114] loop5: p133 size 512 extends beyond EOD, truncated
[  463.354250][T18114] loop5: p135 size 512 extends beyond EOD, truncated
[  463.369593][T18114] loop5: p137 size 512 extends beyond EOD, truncated
[  463.393356][T18114] loop5: p139 size 512 extends beyond EOD, truncated
[  463.398580][T18114] loop5: p141 size 512 extends beyond EOD, truncated
[  463.402629][T18114] loop5: p143 size 512 extends beyond EOD, truncated
[  463.405139][T18114] loop5: p145 size 512 extends beyond EOD, truncated
[  463.405715][T18041] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.408405][T18114] loop5: p147 size 512 extends beyond EOD, truncated
[  463.411352][T18114] loop5: p149 size 512 extends beyond EOD, truncated
[  463.413481][T18114] loop5: p151 size 512 extends beyond EOD, truncated
[  463.415668][T18114] loop5: p153 size 512 extends beyond EOD, truncated
[  463.420135][T18114] loop5: p155 size 512 extends beyond EOD, truncated
[  463.422714][T18114] loop5: p157 size 512 extends beyond EOD, truncated
[  463.424117][T18041] 8021q: adding VLAN 0 to HW filter on device team0
[  463.426853][T18114] loop5: p159 size 512 extends beyond EOD, truncated
[  463.427132][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.427176][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.431093][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.431140][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.431923][T18114] loop5: p161 size 512 extends beyond EOD, truncated
[  463.433904][T18114] loop5: p163 size 512 extends beyond EOD, truncated
[  463.437581][T18114] loop5: p165 size 512 extends beyond EOD, truncated
[  463.443855][T18114] loop5: p167 size 512 extends beyond EOD, truncated
[  463.446443][T18114] loop5: p169 size 512 extends beyond EOD, truncated
[  463.448710][T18114] loop5: p171 size 512 extends beyond EOD, truncated
[  463.450802][T18114] loop5: p173 size 512 extends beyond EOD, truncated
[  463.452953][T18114] loop5: p175 size 512 extends beyond EOD, truncated
[  463.456032][T18114] loop5: p177 size 512 extends beyond EOD, truncated
[  463.458610][T18114] loop5: p179 size 512 extends beyond EOD, truncated
[  463.461736][T18114] loop5: p181 size 512 extends beyond EOD, truncated
[  463.464592][T18114] loop5: p183 size 512 extends beyond EOD, truncated
[  463.470455][T18114] loop5: p185 size 512 extends beyond EOD, truncated
[  463.473871][T18114] loop5: p187 size 512 extends beyond EOD, truncated
[  463.509499][T18114] loop5: p189 size 512 extends beyond EOD, truncated
[  463.520194][T18114] loop5: p191 size 512 extends beyond EOD, truncated
[  463.525026][T18114] loop5: p193 size 512 extends beyond EOD, truncated
[  463.530824][T18114] loop5: p195 size 512 extends beyond EOD, truncated
[  463.535759][T18114] loop5: p197 size 512 extends beyond EOD, truncated
[  463.541052][T18114] loop5: p199 size 512 extends beyond EOD, truncated
[  463.547297][T18114] loop5: p201 size 512 extends beyond EOD, truncated
[  463.552865][T18114] loop5: p203 size 512 extends beyond EOD, truncated
[  463.558335][T18114] loop5: p205 size 512 extends beyond EOD, truncated
[  463.565343][T18114] loop5: p207 size 512 extends beyond EOD, truncated
[  463.594856][T18114] loop5: p209 size 512 extends beyond EOD, truncated
[  463.610071][T18114] loop5: p211 size 512 extends beyond EOD, truncated
[  463.648479][T18114] loop5: p213 size 512 extends beyond EOD, truncated
[  463.655634][T18114] loop5: p215 size 512 extends beyond EOD, truncated
[  463.658190][T18114] loop5: p217 size 512 extends beyond EOD, truncated
[  463.663591][T18114] loop5: p219 size 512 extends beyond EOD, truncated
[  463.666337][T18114] loop5: p221 size 512 extends beyond EOD, truncated
[  463.669016][T18114] loop5: p223 size 512 extends beyond EOD, truncated
[  463.671875][T18114] loop5: p225 size 512 extends beyond EOD, truncated
[  463.676488][T18114] loop5: p227 size 512 extends beyond EOD, truncated
[  463.679808][T18114] loop5: p229 size 512 extends beyond EOD, truncated
[  463.682137][T18114] loop5: p231 size 512 extends beyond EOD, truncated
[  463.684863][T18114] loop5: p233 size 512 extends beyond EOD, truncated
[  463.688387][T18114] loop5: p235 size 512 extends beyond EOD, truncated
[  463.693719][T18114] loop5: p237 size 512 extends beyond EOD, truncated
[  463.695892][T18114] loop5: p239 size 512 extends beyond EOD, truncated
[  463.698081][T18114] loop5: p241 size 512 extends beyond EOD, truncated
[  463.708109][T18114] loop5: p243 size 512 extends beyond EOD, truncated
[  463.714060][T18114] loop5: p245 size 512 extends beyond EOD, truncated
[  463.720486][T18114] loop5: p247 size 512 extends beyond EOD, truncated
[  463.738948][T18114] loop5: p249 size 512 extends beyond EOD, truncated
[  463.741549][T18114] loop5: p251 size 512 extends beyond EOD, truncated
[  463.743630][T18114] loop5: p253 size 512 extends beyond EOD, truncated
[  463.745634][T18114] loop5: p255 size 512 extends beyond EOD, truncated
[  464.082909][T18041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.299510][ T1349] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  464.376361][T18159] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.377126][T18159] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.406753][T18041] veth0_vlan: entered promiscuous mode
[  464.420214][T18159] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.420293][T18159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.420456][T18159] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.420516][T18159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.421612][T18159] bridge0: entered promiscuous mode
[  464.421632][T18159] bridge0: entered allmulticast mode
[  464.433836][T18041] veth1_vlan: entered promiscuous mode
[  464.455686][T18041] veth0_macvtap: entered promiscuous mode
[  464.457798][T18041] veth1_macvtap: entered promiscuous mode
[  464.459958][ T1349] usb 6-1: Using ep0 maxpacket: 16
[  464.462705][ T1349] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  464.464392][T18041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.470648][ T1349] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  464.470693][ T1349] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  464.476753][T18041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.480185][ T1349] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  464.480238][ T1349] usb 6-1: Manufacturer: syz
[  464.487100][ T1349] usb 6-1: config 0 descriptor??
[  464.522337][ T5600] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.693304][T18167] Cannot find del_set index 0 as target
[  464.717591][ T5724] udevd[5724]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  464.722093][T11548] udevd[11548]: inotify_add_watch(7, /dev/loop5p13, 10) failed: No such file or directory
[  464.732939][ T6519] udevd[6519]: inotify_add_watch(7, /dev/loop5p15, 10) failed: No such file or directory
[  464.741590][T11542] udevd[11542]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  464.750992][T11543] udevd[11543]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  464.752352][ T6516] udevd[6516]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  464.753064][ T6430] udevd[6430]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory
[  464.758434][T11547] udevd[11547]: inotify_add_watch(7, /dev/loop5p12, 10) failed: No such file or directory
[  464.759048][T15492] Bluetooth: hci1: command tx timeout
[  464.759563][ T6512] udevd[6512]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory
[  464.760531][T11545] udevd[11545]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory
[  464.768521][   T44] audit: type=1326 audit(1788865234.729:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.5.4288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  464.769986][   T44] audit: type=1326 audit(1788865234.739:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.5.4288" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  464.770089][   T44] audit: type=1326 audit(1788865234.739:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.5.4288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  464.770189][   T44] audit: type=1326 audit(1788865234.739:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.5.4288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  464.793651][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.793671][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.880100][   T13] hsr_slave_0: left promiscuous mode
[  464.885303][   T13] hsr_slave_1: left promiscuous mode
[  464.888286][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.891767][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.909656][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.909690][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.925175][ T6445] usb 6-1: USB disconnect, device number 125
[  464.927051][   T13] veth1_macvtap: left promiscuous mode
[  464.927072][   T13] veth0_macvtap: left promiscuous mode
[  464.927132][   T13] veth1_vlan: left promiscuous mode
[  464.927162][   T13] veth0_vlan: left promiscuous mode
[  464.947790][T18177] netlink: 'syz.5.4294': attribute type 1 has an invalid length.
[  465.149148][T15492] Bluetooth: hci2: command tx timeout
[  465.178966][ T6074] usb 9-1: new high-speed USB device number 102 using dummy_hcd
[  465.340507][ T6074] usb 9-1: Using ep0 maxpacket: 32
[  465.343760][ T6074] usb 9-1: unable to get BOS descriptor or descriptor too short
[  465.348834][ T6074] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  465.354022][ T6074] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  465.354053][ T6074] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  465.354084][ T6074] usb 9-1: config 14 has no interface number 0
[  465.354107][ T6074] usb 9-1: config 14 has no interface number 1
[  465.354144][ T6074] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  465.354172][ T6074] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  465.354199][ T6074] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  465.354226][ T6074] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  465.354253][ T6074] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  465.354280][ T6074] usb 9-1: config 14 interface 57 has no altsetting 0
[  465.354303][ T6074] usb 9-1: config 14 interface 228 has no altsetting 0
[  465.397116][ T6074] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.397151][ T6074] usb 9-1: Product: syz
[  465.397179][ T6074] usb 9-1: Manufacturer: syz
[  465.397200][ T6074] usb 9-1: SerialNumber: syz
[  465.574079][   T13] team0 (unregistering): Port device team_slave_1 removed
[  465.595538][   T13] team0 (unregistering): Port device team_slave_0 removed
[  465.803629][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.803801][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.804630][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.804655][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.819693][ T6074] legousbtower 9-1:14.57: interrupt endpoints not found
[  465.829270][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.975284][T18192] sctp: [Deprecated]: syz.7.4277 (pid 18192) Use of int in max_burst socket option deprecated.
[  465.975284][T18192] Use struct sctp_assoc_value instead
[  466.020365][ T6074] legousbtower 9-1:14.228: interrupt endpoints not found
[  466.088380][   T44] kauditd_printk_skb: 38 callbacks suppressed
[  466.091337][   T44] audit: type=1326 audit(1788865236.049:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.7.4300" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  466.100027][   T44] audit: type=1326 audit(1788865236.069:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.7.4300" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  466.170865][T18205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  466.295224][T18218] netlink: 'syz.7.4306': attribute type 1 has an invalid length.
[  466.550408][T18232] syzkaller0: entered promiscuous mode
[  466.550475][T18232] syzkaller0: entered allmulticast mode
[  466.680248][T18235] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4311'.
[  466.829268][T15492] Bluetooth: hci1: command tx timeout
[  466.978873][   T42] usb 10-1: new high-speed USB device number 102 using dummy_hcd
[  467.105249][T18243] syzkaller0: entered promiscuous mode
[  467.106286][T18243] syzkaller0: entered allmulticast mode
[  467.131209][   T42] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  467.132086][   T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  467.132108][   T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.135197][   T42] usb 10-1: config 0 descriptor??
[  467.135959][T18240] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  467.215000][T18245] Cannot find del_set index 0 as target
[  467.217136][   T44] audit: type=1326 audit(1788865237.179:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  467.217190][   T44] audit: type=1326 audit(1788865237.179:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  467.222757][    C2] Unknown status report in ack skb
[  467.226170][   T44] audit: type=1326 audit(1788865237.179:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  467.226195][   T44] audit: type=1326 audit(1788865237.179:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  467.226216][   T44] audit: type=1326 audit(1788865237.179:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  467.226238][   T44] audit: type=1326 audit(1788865237.179:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  467.226259][   T44] audit: type=1326 audit(1788865237.179:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e5c99f9c7 code=0x7ffc0000
[  467.226327][   T44] audit: type=1326 audit(1788865237.179:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.7.4315" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5e5c95e98e code=0x7ffc0000
[  467.239334][T15492] Bluetooth: hci2: command tx timeout
[  467.368515][   T42] usbhid 10-1:0.0: can't add hid device: -71
[  467.368747][   T42] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  467.372935][   T42] usb 10-1: USB disconnect, device number 102
[  467.954079][ T1349] usb 9-1: USB disconnect, device number 102
[  467.992258][T18260] syzkaller0: entered promiscuous mode
[  467.992310][T18260] syzkaller0: entered allmulticast mode
[  468.164781][T18265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4323'.
[  468.202201][T18270] syzkaller0: entered promiscuous mode
[  468.202247][T18270] syzkaller0: entered allmulticast mode
[  468.210865][T18271] netlink: 'syz.5.4324': attribute type 1 has an invalid length.
[  468.366413][T18278] Cannot find del_set index 0 as target
[  468.384460][    C3] Unknown status report in ack skb
[  468.495388][T18286] syzkaller0: entered promiscuous mode
[  468.495427][T18286] syzkaller0: entered allmulticast mode
[  468.501369][T18286] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  468.909018][T15492] Bluetooth: hci1: command tx timeout
[  469.458928][ T6074] usb 10-1: new high-speed USB device number 103 using dummy_hcd
[  469.608855][ T6074] usb 10-1: Using ep0 maxpacket: 16
[  469.609454][ T6074] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  469.610266][ T6074] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  469.610292][ T6074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  469.610304][ T6074] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  469.611070][ T6074] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  469.611082][ T6074] usb 10-1: Manufacturer: syz
[  469.615097][ T6074] usb 10-1: config 0 descriptor??
[  469.678129][T18322] syzkaller0: entered promiscuous mode
[  469.678185][T18322] syzkaller0: entered allmulticast mode
[  469.684915][T18322] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  469.824410][T18332] netlink: 'syz.7.4345': attribute type 1 has an invalid length.
[  470.000717][   T25] usb 10-1: USB disconnect, device number 103
[  470.158105][T18354] syzkaller0: entered promiscuous mode
[  470.158170][T18354] syzkaller0: entered allmulticast mode
[  470.161468][T18354] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  470.518940][    T9] usb 9-1: new high-speed USB device number 103 using dummy_hcd
[  470.568854][ T1349] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  470.669496][    T9] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  470.670634][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  470.670671][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.675300][    T9] usb 9-1: config 0 descriptor??
[  470.676976][T18356] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  470.713786][T18366] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  470.720253][ T1349] usb 6-1: Using ep0 maxpacket: 32
[  470.724222][ T1349] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  470.725417][ T1349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  470.725441][ T1349] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.725462][ T1349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  470.725482][ T1349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  470.745240][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.745298][ T1349] usb 6-1: Product: syz
[  470.745343][ T1349] usb 6-1: Manufacturer: syz
[  470.745357][ T1349] usb 6-1: SerialNumber: syz
[  470.749904][ T1349] usb 6-1: config 0 descriptor??
[  470.757335][T18357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  470.762982][ T1349] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input67
[  470.851969][    C2] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  470.952911][    T9] usbhid 9-1:0.0: can't add hid device: -71
[  470.953052][    T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  470.957276][    T9] usb 9-1: USB disconnect, device number 103
[  471.017389][T18377] syzkaller0: entered promiscuous mode
[  471.017454][T18377] syzkaller0: entered allmulticast mode
[  471.028296][T18377] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  471.076729][   T25] usb 6-1: USB disconnect, device number 126
[  471.076788][    C2] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  471.378945][ T5817] usb 10-1: new high-speed USB device number 104 using dummy_hcd
[  471.539098][ T5817] usb 10-1: Using ep0 maxpacket: 16
[  471.540160][ T5817] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  471.541243][ T5817] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.541281][ T5817] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  471.541300][ T5817] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  471.542402][ T5817] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  471.542422][ T5817] usb 10-1: Manufacturer: syz
[  471.547723][ T5817] usb 10-1: config 0 descriptor??
[  471.906875][T18393] netlink: 'syz.1.4368': attribute type 1 has an invalid length.
[  471.929882][    T9] usb 10-1: USB disconnect, device number 104
[  472.143793][T18397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  472.323454][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4372'.
[  472.326256][T18406] gretap0: entered promiscuous mode
[  472.326352][T18406] macvlan2: entered allmulticast mode
[  472.326361][T18406] gretap0: entered allmulticast mode
[  472.793438][T18422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4377'.
[  472.809804][T18424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  473.038964][   T25] usb 10-1: new high-speed USB device number 105 using dummy_hcd
[  473.181386][   T44] kauditd_printk_skb: 60 callbacks suppressed
[  473.181471][   T44] audit: type=1400 audit(1788865243.149:8250): avc:  denied  { read } for  pid=18439 comm="syz.4.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  473.198865][   T25] usb 10-1: Using ep0 maxpacket: 32
[  473.201116][   T25] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  473.205037][   T25] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  473.207767][   T25] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  473.212034][   T25] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  473.212405][   T25] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  473.212452][   T25] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  473.212480][   T25] usb 10-1: config 0 interface 0 has no altsetting 0
[  473.228477][   T25] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  473.231828][   T25] usb 10-1: Product: syz
[  473.233246][   T25] usb 10-1: Manufacturer: syz
[  473.234809][   T25] usb 10-1: SerialNumber: syz
[  473.238175][   T25] usb 10-1: config 0 descriptor??
[  473.243654][   T25] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  473.247282][   T25] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  473.368998][ T5817] usb 12-1: new high-speed USB device number 109 using dummy_hcd
[  473.449181][T18427] ldusb 10-1:0.0: Couldn't submit interrupt_in_urb -90
[  473.451341][   T25] usb 10-1: USB disconnect, device number 105
[  473.452975][   T25] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  473.518891][ T5817] usb 12-1: Using ep0 maxpacket: 32
[  473.525967][ T5817] usb 12-1: unable to get BOS descriptor or descriptor too short
[  473.528476][ T5817] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  473.532059][ T5817] usb 12-1: unable to read config index 0 descriptor/start: -71
[  473.534579][ T5817] usb 12-1: can't read configurations, error -71
[  474.067660][T18450] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4388'.
[  474.129327][T18455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  474.476057][T18477] Cannot find del_set index 0 as target
[  474.481799][   T44] audit: type=1326 audit(1788865244.449:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  474.481897][   T44] audit: type=1326 audit(1788865244.449:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  474.482204][   T44] audit: type=1326 audit(1788865244.449:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  474.484798][   T44] audit: type=1326 audit(1788865244.449:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26b19e159 code=0x7ffc0000
[  474.484839][   T44] audit: type=1326 audit(1788865244.449:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb26b19f9c7 code=0x7ffc0000
[  474.484875][   T44] audit: type=1326 audit(1788865244.449:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb26b15e98e code=0x7ffc0000
[  474.484984][   T44] audit: type=1326 audit(1788865244.449:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb26b15e98e code=0x7ffc0000
[  474.485023][   T44] audit: type=1326 audit(1788865244.449:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb26b15e98e code=0x7ffc0000
[  474.485057][   T44] audit: type=1326 audit(1788865244.449:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.4397" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb26b15e98e code=0x7ffc0000
[  474.486623][    C0] Unknown status report in ack skb
[  474.658918][    T9] usb 9-1: new high-speed USB device number 104 using dummy_hcd
[  474.798968][   T25] usb 10-1: new high-speed USB device number 106 using dummy_hcd
[  474.828934][    T9] usb 9-1: Using ep0 maxpacket: 16
[  474.829454][    T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  474.830331][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  474.830353][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  474.830366][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  474.831358][    T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  474.831378][    T9] usb 9-1: Manufacturer: syz
[  474.833563][    T9] usb 9-1: config 0 descriptor??
[  474.969227][   T25] usb 10-1: Using ep0 maxpacket: 32
[  474.978736][   T25] usb 10-1: unable to get BOS descriptor or descriptor too short
[  474.978925][   T25] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  474.981429][   T25] usb 10-1: unable to read config index 0 descriptor/start: -71
[  474.981458][   T25] usb 10-1: can't read configurations, error -71
[  475.204428][    T9] usb 9-1: USB disconnect, device number 104
[  475.249713][ T1362] usb 12-1: new high-speed USB device number 111 using dummy_hcd
[  475.399407][ T1362] usb 12-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  475.400377][ T1362] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  475.400400][ T1362] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.401891][ T1362] usb 12-1: config 0 descriptor??
[  475.402371][T18481] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  475.501320][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4400'.
[  475.507488][T18484] macvlan3: entered allmulticast mode
[  475.631184][ T1362] usbhid 12-1:0.0: can't add hid device: -71
[  475.631293][ T1362] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[  475.637306][ T1362] usb 12-1: USB disconnect, device number 111
[  476.082744][T18507] netlink: 'syz.1.4408': attribute type 1 has an invalid length.
[  476.095779][T18507] 8021q: adding VLAN 0 to HW filter on device bond1
[  476.112288][T18507] 8021q: adding VLAN 0 to HW filter on device bond1
[  476.115410][T18507] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  476.119848][T18507] bond1: (slave gre1): Error -95 calling set_mac_address
[  476.161351][T18513] gretap1: entered promiscuous mode
[  476.163656][T18513] bond1: (slave gretap1): making interface the new active one
[  476.164278][T18513] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  476.234311][T18522] SET target dimension over the limit!
[  476.237339][    C3] Unknown status report in ack skb
[  476.240322][T18518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4414'.
[  476.439439][   T42] usb 12-1: new high-speed USB device number 112 using dummy_hcd
[  476.598896][   T42] usb 12-1: Using ep0 maxpacket: 16
[  476.599423][   T42] usb 12-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  476.600241][   T42] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  476.600262][   T42] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  476.600276][   T42] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  476.601217][   T42] usb 12-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  476.601235][   T42] usb 12-1: Manufacturer: syz
[  476.603469][   T42] usb 12-1: config 0 descriptor??
[  476.614255][T18541] syzkaller0: entered promiscuous mode
[  476.614268][T18541] syzkaller0: entered allmulticast mode
[  476.629468][ T5817] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[  476.789795][ T5817] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  476.793370][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  476.793436][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.794784][ T5817] usb 6-1: config 0 descriptor??
[  476.795260][T18536] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  476.980367][   T42] usb 12-1: USB disconnect, device number 112
[  477.009738][ T5817] usbhid 6-1:0.0: can't add hid device: -71
[  477.009828][ T5817] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  477.013522][ T5817] usb 6-1: USB disconnect, device number 127
[  477.633650][T18558] Cannot find del_set index 0 as target
[  477.807799][T18569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4435'.
[  477.930004][ T5817] usb 10-1: new high-speed USB device number 108 using dummy_hcd
[  477.971072][ T1349] usb 12-1: new high-speed USB device number 113 using dummy_hcd
[  478.098906][ T5817] usb 10-1: Using ep0 maxpacket: 16
[  478.099814][ T5817] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  478.102175][ T5817] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  478.102209][ T5817] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  478.102230][ T5817] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  478.104759][ T5817] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  478.104778][ T5817] usb 10-1: Manufacturer: syz
[  478.110081][ T5817] usb 10-1: config 0 descriptor??
[  478.130064][ T1349] usb 12-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  478.130875][ T1349] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  478.130897][ T1349] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.133307][ T1349] usb 12-1: config 0 descriptor??
[  478.136393][T18566] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  478.316701][T18583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4439'.
[  478.349144][ T1349] usbhid 12-1:0.0: can't add hid device: -71
[  478.349225][ T1349] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[  478.359847][ T1349] usb 12-1: USB disconnect, device number 113
[  478.485613][ T1362] usb 10-1: USB disconnect, device number 108
[  478.686128][T18593] SET target dimension over the limit!
[  478.808953][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'.
[  478.813080][T18597] gretap0: entered promiscuous mode
[  478.813563][T18597] macvlan2: entered allmulticast mode
[  478.813582][T18597] gretap0: entered allmulticast mode
[  478.894457][   T44] kauditd_printk_skb: 36 callbacks suppressed
[  478.894574][   T44] audit: type=1326 audit(1788865248.859:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.894775][   T44] audit: type=1326 audit(1788865248.859:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.895558][   T44] audit: type=1326 audit(1788865248.859:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.895649][   T44] audit: type=1326 audit(1788865248.859:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.895685][   T44] audit: type=1326 audit(1788865248.859:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.895911][   T44] audit: type=1326 audit(1788865248.859:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.896237][   T44] audit: type=1326 audit(1788865248.859:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.896412][   T44] audit: type=1326 audit(1788865248.859:8303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.896688][   T44] audit: type=1326 audit(1788865248.859:8304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  478.897276][   T44] audit: type=1326 audit(1788865248.859:8305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18600 comm="syz.7.4446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5c99e159 code=0x7ffc0000
[  479.056445][T18607] netlink: 'syz.1.4447': attribute type 1 has an invalid length.
[  479.223701][T18620] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4453'.
[  479.339165][ T6445] usb 10-1: new high-speed USB device number 109 using dummy_hcd
[  479.500000][ T6445] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  479.501485][ T6445] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 255, changing to 11
[  479.501502][ T6445] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 59391, setting to 1024
[  479.501515][ T6445] usb 10-1: config 0 interface 0 has no altsetting 0
[  479.503107][ T6445] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  479.503119][ T6445] usb 10-1: Product: syz
[  479.503127][ T6445] usb 10-1: Manufacturer: syz
[  479.503134][ T6445] usb 10-1: SerialNumber: syz
[  479.507113][ T6445] usb 10-1: config 0 descriptor??
[  479.507777][T18610] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  479.512200][ T6445] usb 10-1: selecting invalid altsetting 0
[  479.711899][T18610] usb 10-1: BOGUS urb xfer, pipe 0 != type 1
[  479.762294][ T5817] usb 10-1: USB disconnect, device number 109
[  479.762390][    C0] usb 10-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs
[  479.762510][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  479.762684][T18610] usb 10-1: cannot submit urb 0, error -19: no device
[  479.762832][T18610] usb 10-1: cannot submit urb 0, error -19: no device
[  480.048925][    T9] usb 9-1: new high-speed USB device number 105 using dummy_hcd
[  480.105934][T18640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  480.244472][    T9] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  480.248034][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.250335][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.250348][    T9] usb 9-1: Product: syz
[  480.250356][    T9] usb 9-1: Manufacturer: syz
[  480.250363][    T9] usb 9-1: SerialNumber: syz
[  480.251723][    T9] usb 9-1: config 0 descriptor??
[  480.255037][    T9] usb 9-1: ucan: probing device on interface #0
[  480.255048][    T9] usb 9-1: ucan: invalid EP count (0)
[  480.255056][    T9] usb 9-1: ucan: probe failed; try to update the device firmware
[  480.369431][T18647] Cannot find del_set index 0 as target
[  480.450604][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4465'.
[  480.486380][    T9] usb 9-1: USB disconnect, device number 105
[  480.700171][   T25] usb 10-1: new high-speed USB device number 110 using dummy_hcd
[  480.858961][   T25] usb 10-1: Using ep0 maxpacket: 32
[  480.862921][   T25] usb 10-1: unable to get BOS descriptor or descriptor too short
[  480.863000][   T25] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  480.871373][   T25] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  480.874833][   T25] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  480.878424][   T25] usb 10-1: config 14 has no interface number 0
[  480.880477][   T25] usb 10-1: config 14 has no interface number 1
[  480.882741][   T25] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  480.886459][   T25] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  480.886482][   T25] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  480.886504][   T25] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  480.886526][   T25] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  480.886547][   T25] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  480.886569][   T25] usb 10-1: config 14 interface 57 has no altsetting 0
[  480.886585][   T25] usb 10-1: config 14 interface 228 has no altsetting 0
[  480.917204][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.917269][   T25] usb 10-1: Product: syz
[  480.917314][   T25] usb 10-1: Manufacturer: syz
[  480.917328][   T25] usb 10-1: SerialNumber: syz
[  481.064515][T18673] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  481.148982][ T5817] usb 12-1: new high-speed USB device number 114 using dummy_hcd
[  481.299954][ T5817] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  481.302255][ T5817] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.302268][ T5817] usb 12-1: Product: syz
[  481.302276][ T5817] usb 12-1: Manufacturer: syz
[  481.302283][ T5817] usb 12-1: SerialNumber: syz
[  481.340187][   T25] legousbtower 10-1:14.57: interrupt endpoints not found
[  481.488945][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  481.510586][ T5817] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  481.510648][ T5817] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  481.511047][ T5817] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  481.518510][ T5817] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71
[  481.527485][ T5817] usb 12-1: USB disconnect, device number 114
[  481.542989][    C2] raw-gadget.1 gadget.5: ignoring, device is not running
[  481.545683][   T25] legousbtower 10-1:14.228: get version request failed: -71
[  481.545781][   T25] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71
[  481.553980][   T25] usb 10-1: USB disconnect, device number 110
[  481.648955][    T9] usb 6-1: Using ep0 maxpacket: 16
[  481.651511][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  481.655399][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.658730][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  481.662303][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  481.667256][    T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  481.669962][    T9] usb 6-1: Manufacturer: syz
[  481.673650][    T9] usb 6-1: config 0 descriptor??
[  481.719141][   T42] usb 9-1: new high-speed USB device number 106 using dummy_hcd
[  481.878900][   T42] usb 9-1: Using ep0 maxpacket: 16
[  481.879652][   T42] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  481.881221][   T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.881244][   T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.881262][   T42] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  481.881293][   T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.883171][   T42] usb 9-1: config 0 descriptor??
[  482.049990][   T25] usb 6-1: USB disconnect, device number 2
[  482.129816][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4482'.
[  482.309052][   T42] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.000D/input/input68
[  482.389696][   T42] microsoft 0003:045E:07DA.000D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  482.483768][T18706] SET target dimension over the limit!
[  482.485965][    C3] Unknown status report in ack skb
[  482.498625][T18703] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4487'.
[  482.500507][   T42] usb 9-1: USB disconnect, device number 106
[  482.605314][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'.
[  483.032030][T18729] Cannot find del_set index 0 as target
[  483.076962][T18731] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4499'.
[  483.115661][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4502'.
[  483.206187][T18740] netlink: 'syz.5.4503': attribute type 1 has an invalid length.
[  483.270500][T18740] 8021q: adding VLAN 0 to HW filter on device bond1
[  483.285704][T18744] 8021q: adding VLAN 0 to HW filter on device bond1
[  483.285898][T18744] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  483.286280][T18744] bond1: (slave gre1): Error -95 calling set_mac_address
[  483.329933][T18740] gretap1: entered promiscuous mode
[  483.669068][ T1362] usb 12-1: new high-speed USB device number 115 using dummy_hcd
[  483.831398][ T1362] usb 12-1: Using ep0 maxpacket: 32
[  483.832039][ T1362] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  483.833151][ T1362] usb 12-1: config index 0 descriptor too short (expected 156, got 27)
[  483.833181][ T1362] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  483.833208][ T1362] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  483.833223][ T1362] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  483.833236][ T1362] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  483.833250][ T1362] usb 12-1: config 0 interface 0 has no altsetting 0
[  483.835701][ T1362] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  483.835721][ T1362] usb 12-1: Product: syz
[  483.835735][ T1362] usb 12-1: Manufacturer: syz
[  483.835748][ T1362] usb 12-1: SerialNumber: syz
[  483.840275][ T1362] usb 12-1: config 0 descriptor??
[  483.841121][T18753] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  483.842248][ T1362] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  483.846342][ T1362] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  484.045209][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4515'.
[  484.055097][ T1362] usb 12-1: USB disconnect, device number 115
[  484.062796][ T1362] ldusb 12-1:0.0: LD USB Device #0 now disconnected
[  484.091869][T18772] netlink: 'syz.5.4516': attribute type 1 has an invalid length.
[  484.104579][T18772] 8021q: adding VLAN 0 to HW filter on device bond2
[  484.113978][T18772] 8021q: adding VLAN 0 to HW filter on device bond2
[  484.116303][T18772] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  484.120413][T18772] bond2: (slave gre1): Error -95 calling set_mac_address
[  484.234653][T18781] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  484.412246][T18796] netlink: 'syz.4.4527': attribute type 1 has an invalid length.
[  484.424765][T18796] 8021q: adding VLAN 0 to HW filter on device bond1
[  484.445160][T18796] 8021q: adding VLAN 0 to HW filter on device bond1
[  484.447651][T18796] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  484.450367][T18796] bond1: (slave gre1): Error -95 calling set_mac_address
[  484.488943][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4529'.
[  484.492588][T18796] gretap1: entered promiscuous mode
[  484.495579][T18796] bond1: (slave gretap1): making interface the new active one
[  484.498563][T18796] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  484.518087][T18801] team0: Port device team_slave_0 removed
[  484.676071][    C3] Unknown status report in ack skb
[  484.865353][   T44] kauditd_printk_skb: 16 callbacks suppressed
[  484.865565][   T44] audit: type=1326 audit(1788865254.829:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18835 comm="syz.4.4544" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f137459e159 code=0x0
[  484.878941][ T1362] usb 10-1: new high-speed USB device number 111 using dummy_hcd
[  484.919908][T18841] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4546'.
[  484.920416][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'.
[  484.920484][T18841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.929436][T18841] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.029110][ T1362] usb 10-1: Using ep0 maxpacket: 16
[  485.031174][ T1362] usb 10-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1d.90
[  485.031672][    T9] usb 12-1: new high-speed USB device number 116 using dummy_hcd
[  485.032232][ T1362] usb 10-1: config 69 has an invalid interface number: 142 but max is 16
[  485.032253][ T1362] usb 10-1: config 69 descriptor has 1 excess byte, ignoring
[  485.032268][ T1362] usb 10-1: config 69 has 1 interface, different from the descriptor's value: 17
[  485.032286][ T1362] usb 10-1: config 69 has no interface number 0
[  485.032316][ T1362] usb 10-1: config 69 interface 142 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64
[  485.032336][ T1362] usb 10-1: config 69 interface 142 has no altsetting 0
[  485.034163][ T1362] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.034181][ T1362] usb 10-1: Product: syz
[  485.034193][ T1362] usb 10-1: Manufacturer: syz
[  485.034205][ T1362] usb 10-1: SerialNumber: syz
[  485.037928][T18801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.209034][    T9] usb 12-1: Using ep0 maxpacket: 32
[  485.210406][    T9] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  485.211344][    T9] usb 12-1: config index 0 descriptor too short (expected 156, got 27)
[  485.211373][    T9] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  485.211405][    T9] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  485.211427][    T9] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  485.211448][    T9] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  485.211470][    T9] usb 12-1: config 0 interface 0 has no altsetting 0
[  485.213321][    T9] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  485.213340][    T9] usb 12-1: Product: syz
[  485.213353][    T9] usb 12-1: Manufacturer: syz
[  485.213365][    T9] usb 12-1: SerialNumber: syz
[  485.215591][    T9] usb 12-1: config 0 descriptor??
[  485.216344][T18829] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  485.218206][    T9] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  485.220289][    T9] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  485.422658][   T25] usb 12-1: USB disconnect, device number 116
[  485.427967][   T25] ldusb 12-1:0.0: LD USB Device #0 now disconnected
[  485.537924][    C2] Unknown status report in ack skb
[  485.760284][ T1362] aircable 10-1:69.142: aircable converter detected
[  485.767389][ T1362] usb 10-1: aircable converter now attached to ttyUSB0
[  485.771732][ T1362] usb 10-1: USB disconnect, device number 111
[  485.780173][ T1362] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  485.783395][ T1362] aircable 10-1:69.142: device disconnected
[  485.866834][T18857] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4551'.
[  485.874764][T18856] netlink: 'syz.4.4550': attribute type 13 has an invalid length.
[  486.187241][    T9] hid_parser_main: 7 callbacks suppressed
[  486.187318][    T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  486.197507][    T9] hid-generic 0000:0000:0000.000E: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  486.239384][T18871] fido_id[18871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  486.263886][T18873] netlink: 'syz.7.4557': attribute type 1 has an invalid length.
[  486.274146][T18873] 8021q: adding VLAN 0 to HW filter on device bond1
[  486.293496][T18873] 8021q: adding VLAN 0 to HW filter on device bond1
[  486.293702][T18873] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  486.294095][T18873] bond1: (slave gre1): Error -95 calling set_mac_address
[  486.778949][    T9] usb 12-1: new high-speed USB device number 117 using dummy_hcd
[  486.928950][    T9] usb 12-1: Using ep0 maxpacket: 16
[  486.929848][    T9] usb 12-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00
[  486.932825][    T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.932839][    T9] usb 12-1: Product: syz
[  486.932846][    T9] usb 12-1: Manufacturer: syz
[  486.932854][    T9] usb 12-1: SerialNumber: syz
[  486.940208][    T9] usb 12-1: config 0 descriptor??
[  486.942113][    T9] ftdi_sio 12-1:0.0: FTDI USB Serial Device converter detected
[  486.942632][    T9] usb 12-1: Detected FT2232H
[  487.424459][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  487.425240][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  487.433043][    T9] usb 12-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  487.442846][    T9] usb 12-1: USB disconnect, device number 117
[  487.449933][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  487.450451][    T9] ftdi_sio 12-1:0.0: device disconnected
[  487.469535][T18894] netlink: 'syz.5.4566': attribute type 1 has an invalid length.
[  487.549329][T18894] 8021q: adding VLAN 0 to HW filter on device bond3
[  487.570772][T18898] 8021q: adding VLAN 0 to HW filter on device bond3
[  487.574029][T18898] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[  487.579945][T18898] bond3: (slave gre1): Error -95 calling set_mac_address
[  487.791810][T18911] netlink: 'syz.5.4571': attribute type 1 has an invalid length.
[  488.461398][T18929] netlink: 'syz.7.4577': attribute type 1 has an invalid length.
[  488.478654][T18929] 8021q: adding VLAN 0 to HW filter on device bond2
[  488.494950][T18929] 8021q: adding VLAN 0 to HW filter on device bond2
[  488.495143][T18929] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  488.495534][T18929] bond2: (slave gre1): Error -95 calling set_mac_address
[  488.560794][T18934] gretap1: entered promiscuous mode
[  488.566884][T18934] bond2: (slave gretap1): making interface the new active one
[  488.569805][T18934] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  488.650544][    C2] Unknown status report in ack skb
[  488.919386][    C0] Unknown status report in ack skb
[  488.959051][T18963] netlink: 'syz.7.4587': attribute type 1 has an invalid length.
[  488.979167][T18964] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4588'.
[  489.034744][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4588'.
[  489.038879][ T1349] usb 10-1: new high-speed USB device number 112 using dummy_hcd
[  489.188975][    T9] usb 9-1: new high-speed USB device number 107 using dummy_hcd
[  489.209305][ T1349] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  489.213833][ T1349] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  489.217226][ T1349] usb 10-1: config 0 has no interface number 0
[  489.221852][ T1349] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.225223][ T1349] usb 10-1: Product: syz
[  489.227085][ T1349] usb 10-1: Manufacturer: syz
[  489.229201][ T1349] usb 10-1: SerialNumber: syz
[  489.233510][ T1349] usb 10-1: config 0 descriptor??
[  489.369543][    T9] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  489.370379][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  489.370401][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.371808][    T9] usb 9-1: config 0 descriptor??
[  489.372372][T18961] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  489.440683][T18941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4581'.
[  489.441917][ T1349] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  489.443270][ T1349] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  489.443400][ T1349] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  489.443419][ T1349] usb 10-1: media controller created
[  489.447921][ T1349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  489.592516][    T9] usbhid 9-1:0.0: can't add hid device: -71
[  489.592589][    T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  489.598646][    T9] usb 9-1: USB disconnect, device number 107
[  489.645051][ T1349] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  489.661693][ T1349] usb 10-1: USB disconnect, device number 112
[  490.051150][T18980] syzkaller0: entered promiscuous mode
[  490.053111][T18980] syzkaller0: entered allmulticast mode
[  490.076556][T18980] tipc: Started in network mode
[  490.076609][T18980] tipc: Node identity 82bc72712c13, cluster identity 4711
[  490.076799][T18980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.079003][T18979] tipc: Resetting bearer <eth:syzkaller0>
[  490.106171][T18979] tipc: Disabling bearer <eth:syzkaller0>
[  490.410578][T18998] netlink: 'syz.5.4600': attribute type 1 has an invalid length.
[  490.931658][T19015] syzkaller0: entered promiscuous mode
[  490.931714][T19015] syzkaller0: entered allmulticast mode
[  490.936266][T19015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.941290][T19013] tipc: Resetting bearer <eth:syzkaller0>
[  490.961377][T19013] tipc: Disabling bearer <eth:syzkaller0>
[  491.358866][ T1349] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  491.360734][T19044] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  491.508983][ T1349] usb 6-1: Using ep0 maxpacket: 32
[  491.515153][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short
[  491.518384][ T1349] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  491.523040][ T1349] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  491.523098][ T1349] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  491.523155][ T1349] usb 6-1: config 14 has no interface number 0
[  491.523171][ T1349] usb 6-1: config 14 has no interface number 1
[  491.523214][ T1349] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  491.523235][ T1349] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  491.523257][ T1349] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  491.523278][ T1349] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  491.523299][ T1349] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  491.523319][ T1349] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  491.523339][ T1349] usb 6-1: config 14 interface 57 has no altsetting 0
[  491.523354][ T1349] usb 6-1: config 14 interface 228 has no altsetting 0
[  491.525193][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.525212][ T1349] usb 6-1: Product: syz
[  491.525225][ T1349] usb 6-1: Manufacturer: syz
[  491.525237][ T1349] usb 6-1: SerialNumber: syz
[  491.541162][T19050] netlink: 'syz.5.4621': attribute type 1 has an invalid length.
[  491.936534][ T1349] legousbtower 6-1:14.57: interrupt endpoints not found
[  492.140136][ T1349] legousbtower 6-1:14.228: get version request failed: -71
[  492.140228][ T1349] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[  492.147417][ T1349] usb 6-1: USB disconnect, device number 3
[  492.588440][ T1349] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  492.591683][ T1349] hid-generic 0000:0000:0000.000F: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  492.640128][T19082] fido_id[19082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  492.752027][T19090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  492.958457][ T1349] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  492.963503][ T1349] hid-generic 0000:0000:0000.0010: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  493.017456][T19105] fido_id[19105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  493.139376][ T7021] usb 10-1: new high-speed USB device number 113 using dummy_hcd
[  493.179966][T19113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  493.288987][ T7021] usb 10-1: Using ep0 maxpacket: 32
[  493.296228][ T7021] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  493.300137][ T7021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  493.304351][ T7021] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.304404][ T7021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  493.304434][ T7021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  493.318927][ T6445] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  493.322360][ T7021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.325954][ T7021] usb 10-1: Product: syz
[  493.326041][ T7021] usb 10-1: Manufacturer: syz
[  493.326087][ T7021] usb 10-1: SerialNumber: syz
[  493.334259][ T7021] usb 10-1: config 0 descriptor??
[  493.337336][T19100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  493.351675][ T7021] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input69
[  493.481927][ T6445] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  493.484343][ T6445] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.484364][ T6445] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  493.484402][ T6445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.493728][ T6445] usb 6-1: config 0 descriptor??
[  493.496739][ T6445] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  493.501841][ T6445] dvb-usb: bulk message failed: -22 (3/0)
[  493.521845][ T6445] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  493.522338][ T6445] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  493.522362][ T6445] usb 6-1: media controller created
[  493.524639][ T6445] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  493.537147][ T6445] dvb-usb: bulk message failed: -22 (6/0)
[  493.537239][ T6445] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  493.540704][ T6445] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input70
[  493.556190][ T6445] dvb-usb: schedule remote query interval to 150 msecs.
[  493.556237][ T6445] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  493.612729][ T5817] usb 10-1: USB disconnect, device number 113
[  493.612867][    C3] xpad 10-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  493.698955][ T6445] usb 6-1: USB disconnect, device number 4
[  493.733659][ T6445] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  493.817984][   T42] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  493.821900][   T42] hid-generic 0000:0000:0000.0011: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  493.872296][T19134] fido_id[19134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  494.528991][ T7021] usb 9-1: new high-speed USB device number 108 using dummy_hcd
[  494.638913][ T1362] usb 10-1: new high-speed USB device number 114 using dummy_hcd
[  494.679622][ T7021] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  494.684427][ T7021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  494.688936][ T7021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.691137][ T7021] usb 9-1: config 0 descriptor??
[  494.691895][T19153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  494.768935][ T1362] usb 10-1: device descriptor read/64, error -71
[  494.915324][ T7021] usbhid 9-1:0.0: can't add hid device: -71
[  494.915416][ T7021] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  494.920284][ T7021] usb 9-1: USB disconnect, device number 108
[  495.012358][ T1362] usb 10-1: new high-speed USB device number 115 using dummy_hcd
[  495.139113][ T1362] usb 10-1: device descriptor read/64, error -71
[  495.249343][ T1362] usb usb10-port1: attempt power cycle
[  495.513757][T19173] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4669'.
[  495.565646][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'.
[  495.589006][ T1362] usb 10-1: new high-speed USB device number 116 using dummy_hcd
[  495.610260][ T1362] usb 10-1: device descriptor read/8, error -71
[  495.859018][ T1362] usb 10-1: new high-speed USB device number 117 using dummy_hcd
[  495.889652][ T1362] usb 10-1: device descriptor read/8, error -71
[  495.999371][ T1362] usb usb10-port1: unable to enumerate USB device
[  496.117062][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'.
[  496.164965][   T44] audit: type=1326 audit(1788865266.129:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.165046][   T44] audit: type=1326 audit(1788865266.129:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.166890][   T44] audit: type=1326 audit(1788865266.129:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.166994][   T44] audit: type=1326 audit(1788865266.129:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.167102][   T44] audit: type=1326 audit(1788865266.129:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.167448][   T44] audit: type=1326 audit(1788865266.129:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.168186][   T44] audit: type=1326 audit(1788865266.129:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.168285][   T44] audit: type=1326 audit(1788865266.129:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.171284][   T44] audit: type=1326 audit(1788865266.139:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.171310][   T44] audit: type=1326 audit(1788865266.139:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.4.4674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459e159 code=0x7ffc0000
[  496.250520][T19195] netlink: 'syz.4.4676': attribute type 1 has an invalid length.
[  496.284413][T19193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  496.518955][ T1362] usb 9-1: new high-speed USB device number 109 using dummy_hcd
[  496.679694][ T1362] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  496.680884][ T1362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  496.680920][ T1362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.683221][ T1362] usb 9-1: config 0 descriptor??
[  496.684657][T19198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  496.778406][T19205] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4680'.
[  496.781374][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4680'.
[  496.781569][T19205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.790643][T19205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.901771][ T1362] usbhid 9-1:0.0: can't add hid device: -71
[  496.901858][ T1362] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  496.905197][ T1362] usb 9-1: USB disconnect, device number 109
[  497.437632][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4683'.
[  497.551015][T19223] netlink: 'syz.5.4687': attribute type 1 has an invalid length.
[  497.728918][ T1362] usb 12-1: new high-speed USB device number 118 using dummy_hcd
[  497.878916][ T1362] usb 12-1: Using ep0 maxpacket: 16
[  497.879551][ T1362] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  497.880928][ T1362] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.880947][ T1362] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.880958][ T1362] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  497.880978][ T1362] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.888677][ T1362] usb 12-1: config 0 descriptor??
[  498.301814][ T1362] usbhid 12-1:0.0: can't add hid device: -71
[  498.301901][ T1362] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[  498.303070][ T1362] usb 12-1: USB disconnect, device number 118
[  498.530428][T19233] ------------[ cut here ]------------
[  498.530473][T19233] enable_ept && !allow_smaller_maxphyaddr
[  498.530507][T19233] WARNING: arch/x86/kvm/vmx/vmx.c:5398 at handle_exception_nmi+0xa73/0x1af0, CPU#3: syz.4.4690/19233
[  498.538799][T19233] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  498.540223][T19233] CPU: 3 UID: 0 PID: 19233 Comm: syz.4.4690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  498.544066][T19233] Tainted: [L]=SOFTLOCKUP
[  498.545725][T19233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  498.549434][T19233] RIP: 0010:handle_exception_nmi+0xa73/0x1af0
[  498.551668][T19233] Code: 08 84 d2 0f 85 39 10 00 00 44 0f b6 2d 39 4e a4 0f 31 ff 44 89 ee e8 9c 61 6b 00 45 84 ed 0f 85 bf 0d 00 00 e8 7e 67 6b 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e0 61 6b 00 45 85 e4 0f 85 b8 0a 00 00
[  498.559179][T19233] RSP: 0018:ffffc9000c97f918 EFLAGS: 00010287
[  498.561311][T19233] RAX: 0000000000021444 RBX: ffff888023200000 RCX: ffffc90006f21000
[  498.564284][T19233] RDX: 0000000000080000 RSI: ffffffff81a0a992 RDI: ffff8880298ca580
[  498.567202][T19233] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000
[  498.570065][T19233] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  498.572827][T19233] R13: 0000000000000000 R14: ffff8880360ed000 R15: ffff8880232000d0
[  498.575765][T19233] FS:  00007f137540a6c0(0000) GS:ffff8880d5e5d000(0000) knlGS:0000000000000000
[  498.578844][T19233] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  498.581357][T19233] CR2: 000000000f6632eb CR3: 0000000036675000 CR4: 0000000000352ef0
[  498.584522][T19233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000e1fdf
[  498.587385][T19233] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  498.590181][T19233] Call Trace:
[  498.591295][T19233]  <TASK>
[  498.592354][T19233]  ? __pfx_handle_exception_nmi+0x10/0x10
[  498.594734][T19233]  vmx_handle_exit+0x4c8/0x1d30
[  498.596857][T19233]  vcpu_run+0x34b8/0x5e80
[  498.598362][T19233]  ? __pfx_vcpu_run+0x10/0x10
[  498.600875][T19233]  ? lock_acquire+0x1d1/0x380
[  498.602606][T19233]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[  498.604670][T19233]  ? fpu_swap_kvm_fpstate+0x217/0x460
[  498.606558][T19233]  ? __local_bh_enable_ip+0xa5/0x120
[  498.608403][T19233]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[  498.610440][T19233]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[  498.612411][T19233]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  498.614988][T19233]  ? lock_acquire+0x1d1/0x380
[  498.617149][T19233]  ? do_raw_write_lock+0x11e/0x260
[  498.619046][T19233]  ? find_held_lock+0x2b/0x80
[  498.620863][T19233]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  498.623064][T19233]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  498.625033][T19233]  kvm_vcpu_ioctl+0x730/0x1700
[  498.627133][T19233]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  498.629583][T19233]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  498.632331][T19233]  ? do_vfs_ioctl+0x226/0x13e0
[  498.634594][T19233]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  498.636943][T19233]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  498.639850][T19233]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  498.643039][T19233]  ? __fget_files+0x34/0x3d0
[  498.645209][T19233]  ? selinux_file_ioctl+0x13b/0x290
[  498.647653][T19233]  ? selinux_file_ioctl+0xb6/0x290
[  498.650169][T19233]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  498.652472][T19233]  __x64_sys_ioctl+0x18e/0x210
[  498.654668][T19233]  do_syscall_64+0x123/0x790
[  498.656738][T19233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.658886][T19233] RIP: 0033:0x7f137459e159
[  498.660422][T19233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.667493][T19233] RSP: 002b:00007f137540a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  498.670692][T19233] RAX: ffffffffffffffda RBX: 00007f1374825fa0 RCX: 00007f137459e159
[  498.673375][T19233] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  498.676087][T19233] RBP: 00007f1374635024 R08: 0000000000000000 R09: 0000000000000000
[  498.678901][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.681519][T19233] R13: 00007f1374826038 R14: 00007f1374825fa0 R15: 00007ffd2e561f08
[  498.684441][T19233]  </TASK>
[  498.685568][T19233] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  498.688666][T19233] CPU: 3 UID: 0 PID: 19233 Comm: syz.4.4690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  498.692589][T19233] Tainted: [L]=SOFTLOCKUP
[  498.694122][T19233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  498.697559][T19233] Call Trace:
[  498.698727][T19233]  <TASK>
[  498.699742][T19233]  dump_stack_lvl+0x100/0x190
[  498.701378][T19233]  vpanic+0x553/0x970
[  498.702790][T19233]  ? __pfx_vpanic+0x10/0x10
[  498.704366][T19233]  panic+0xd1/0xe0
[  498.705910][T19233]  ? __pfx_panic+0x10/0x10
[  498.707448][T19233]  check_panic_on_warn.cold+0x19/0x34
[  498.709351][T19233]  ? handle_exception_nmi+0xa73/0x1af0
[  498.711182][T19233]  __warn.cold+0x191/0x318
[  498.712746][T19233]  __report_bug+0x30f/0x440
[  498.714676][T19233]  ? handle_exception_nmi+0xa73/0x1af0
[  498.716596][T19233]  ? __pfx___report_bug+0x10/0x10
[  498.718350][T19233]  ? kvm_pmu_trigger_event.isra.0+0x756/0xbc0
[  498.720457][T19233]  ? kvm_skip_emulated_instruction+0x63/0x1f0
[  498.722522][T19233]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  498.724865][T19233]  ? handle_exception_nmi+0xa73/0x1af0
[  498.726851][T19233]  report_bug+0xb3/0x220
[  498.728267][T19233]  ? handle_exception_nmi+0xa73/0x1af0
[  498.730195][T19233]  handle_bug+0x16a/0x2a0
[  498.732072][T19233]  exc_invalid_op+0x17/0x50
[  498.734158][T19233]  asm_exc_invalid_op+0x1a/0x20
[  498.736067][T19233] RIP: 0010:handle_exception_nmi+0xa73/0x1af0
[  498.738197][T19233] Code: 08 84 d2 0f 85 39 10 00 00 44 0f b6 2d 39 4e a4 0f 31 ff 44 89 ee e8 9c 61 6b 00 45 84 ed 0f 85 bf 0d 00 00 e8 7e 67 6b 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e0 61 6b 00 45 85 e4 0f 85 b8 0a 00 00
[  498.745308][T19233] RSP: 0018:ffffc9000c97f918 EFLAGS: 00010287
[  498.747436][T19233] RAX: 0000000000021444 RBX: ffff888023200000 RCX: ffffc90006f21000
[  498.750523][T19233] RDX: 0000000000080000 RSI: ffffffff81a0a992 RDI: ffff8880298ca580
[  498.753762][T19233] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000
[  498.757162][T19233] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  498.759882][T19233] R13: 0000000000000000 R14: ffff8880360ed000 R15: ffff8880232000d0
[  498.762494][T19233]  ? handle_exception_nmi+0xa72/0x1af0
[  498.764425][T19233]  ? handle_exception_nmi+0xa72/0x1af0
[  498.766376][T19233]  ? __pfx_handle_exception_nmi+0x10/0x10
[  498.768252][T19233]  vmx_handle_exit+0x4c8/0x1d30
[  498.769926][T19233]  vcpu_run+0x34b8/0x5e80
[  498.771426][T19233]  ? __pfx_vcpu_run+0x10/0x10
[  498.773188][T19233]  ? lock_acquire+0x1d1/0x380
[  498.774910][T19233]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[  498.776954][T19233]  ? fpu_swap_kvm_fpstate+0x217/0x460
[  498.779018][T19233]  ? __local_bh_enable_ip+0xa5/0x120
[  498.780741][T19233]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[  498.782759][T19233]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[  498.784916][T19233]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  498.787118][T19233]  ? lock_acquire+0x1d1/0x380
[  498.788949][T19233]  ? do_raw_write_lock+0x11e/0x260
[  498.790689][T19233]  ? find_held_lock+0x2b/0x80
[  498.792316][T19233]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  498.794518][T19233]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  498.796793][T19233]  kvm_vcpu_ioctl+0x730/0x1700
[  498.798650][T19233]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  498.800433][T19233]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  498.802417][T19233]  ? do_vfs_ioctl+0x226/0x13e0
[  498.804141][T19233]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  498.806000][T19233]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  498.808222][T19233]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  498.810804][T19233]  ? __fget_files+0x34/0x3d0
[  498.812822][T19233]  ? selinux_file_ioctl+0x13b/0x290
[  498.814837][T19233]  ? selinux_file_ioctl+0xb6/0x290
[  498.816629][T19233]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  498.818424][T19233]  __x64_sys_ioctl+0x18e/0x210
[  498.820461][T19233]  do_syscall_64+0x123/0x790
[  498.822223][T19233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.824783][T19233] RIP: 0033:0x7f137459e159
[  498.826470][T19233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.833729][T19233] RSP: 002b:00007f137540a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  498.837322][T19233] RAX: ffffffffffffffda RBX: 00007f1374825fa0 RCX: 00007f137459e159
[  498.840592][T19233] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  498.843793][T19233] RBP: 00007f1374635024 R08: 0000000000000000 R09: 0000000000000000
[  498.846497][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.849285][T19233] R13: 00007f1374826038 R14: 00007f1374825fa0 R15: 00007ffd2e561f08
[  498.852435][T19233]  </TASK>
[  498.854433][T19233] Kernel Offset: disabled
[  498.856131][T19233] Rebooting in 86400 seconds..