last executing test programs:

9m47.157279018s ago: executing program 32 (id=1942):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r1, 0x0, 0x300)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xf, 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x4000000)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0xfffffff9, 0x0, {}, {}, 0x3, 0x8})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0)

8m14.774312326s ago: executing program 2 (id=2083):
syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102973c3408fd0b1100e6fa0102030109022c000108e730070904"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})

8m13.54460827s ago: executing program 2 (id=2085):

8m13.472937543s ago: executing program 2 (id=2086):
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = memfd_create(0x0, 0x7)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r1, 0x5608, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r0, 0x4000000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x4004000)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r3, 0x0, 0x0)

8m11.518842495s ago: executing program 2 (id=2088):
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="27000400060000000180"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000007d, 0x5, 0x0, 0x0, 0x9, 0x1c, "b06ad408469882e96c82a52af26f6ab29cb10c18c8680ec9819e24948ccf67391105f6ad3f0800000006df1edc5edf0f7c3f2effce8c8c49286ccb9a97687534", "d7538c84e53ad718e1fbfa736d08c33e7db02c8dc71290b8e777d465fb23a027a9e2f47e2e7dc23809f8dc87fdff086327c203680e00000000000d00", "ea20822f425abb6a1ce430080a933d1fbe60cfc89eba00", [0x4008, 0x2a97]}})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

8m3.744480564s ago: executing program 33 (id=2078):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc31, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0xffffffff, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x20}], 0x1}, 0x4)
sendmsg$nl_route_sched(r1, 0x0, 0x800)

8m0.953828038s ago: executing program 2 (id=2092):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m0.852388225s ago: executing program 2 (id=2093):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

7m45.729262959s ago: executing program 34 (id=2093):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

6m21.886846337s ago: executing program 1 (id=2240):
socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1)
close(r0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3)
connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa)
close(r2)

6m21.690358991s ago: executing program 1 (id=2241):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)

6m21.406764603s ago: executing program 6 (id=2091):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000002680)="76e69c0141b4", 0x6}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15829d9d419713d523ff60e494f69a880b0888b6b023dc9b5f6a05f99fe7cf5d148c5b", 0xd6}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e12f38ef18af765e", 0xc7}, {&(0x7f0000003340)="a5ca8683d601768d343ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0b86fe35e8871164b76e5f17461533959cb2e8516c119112bbf8e7262c0c832593c0f8b75d0bccf88b73429c4a3236455b3941e18378bc11a236b8f82a546e8eaaa6b9f9cbf743e11859eca79a9930c748551db30c8197ff8fdc17da89b97ef13d91daa0c4fb542341af6efb8ee4b44fb6d7601cbb5639b8954cabc5758973f5a66d5403d5944de6bca1498cf6f9ea1850d6423895684bb4a229b14e0801ac4d9fa018e9544c5003f066b4df45a7b01f00eaa6a1e77586209b0ccb9700c2a0eef8cca34f58808e58bc84bc2ed37f08ebb4488d93a53f16cddaa1f62a97a2418006c4350006ee43375a620abf70d01d420fb60d3fd221bbc91ea8c30f8c0420f8df10d59bf5fa342bf50c4d501285277e2b2775586772ec2cf9686bdcd48d4d91e8430e7034e1805d481a1bdaa51d877a9b8c1cb821a9b42525fb9aab6f9dfc4770af10ec8d0a1b03960a090b54f41322b58c6ac834f52f5513f091fe3eb077173b41660258b58b036693864845dfbfbd09267619d58d3e0c716e0b9c3cf4e789dea02122dc7e07bbe585d024c459616337c247f33ddce89e6226e992c7afe8ffdc7b521348199d058eb2fd741ca9a53fab5a83cb77c37702f07a3bc753c5662d1ff4e6c4b464fc97543c3e945d85a9c5a71be1ac8cdd696bca9234bd167becd020e12f8a7f2bbce0630b09f848e6aa7ed02af94fae14543b3f9ed91e19213b12a6ccbc68a9c00a7dec98b79d79e4cea0dcf32705a560201621e6ed976a07e26f12e7ff7b6de316530d306b76de70f1a24502b857f6d76f0bfc04c", 0x365}], 0x4}, 0x4005)

6m21.31534518s ago: executing program 1 (id=2244):
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000007d, 0x5, 0x0, 0x0, 0x9, 0x1c, "b06ad408469882e96c82a52af26f6ab29cb10c18c8680ec9819e24948ccf67391105f6ad3f0800000006df1edc5edf0f7c3f2effce8c8c49286ccb9a97687534", "d7538c84e53ad718e1fbfa736d08c33e7db02c8dc71290b8e777d465fb23a027a9e2f47e2e7dc23809f8dc87fdff086327c203680e00000000000d00", "ea20822f425abb6a1ce430080a933d1fbe60cfc89eba00", [0x4008, 0x2a97]}})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

6m21.075826045s ago: executing program 1 (id=2247):
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"61ffffff", 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a4380002d5c010", "b0af22b85f6c12180bff00", "0000efffffffffffbfff00"]})
syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0)

6m18.579080185s ago: executing program 1 (id=2254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

6m18.35409829s ago: executing program 1 (id=2255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x18, r4, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044094}, 0x4)

6m5.580221887s ago: executing program 35 (id=2091):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000002680)="76e69c0141b4", 0x6}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15829d9d419713d523ff60e494f69a880b0888b6b023dc9b5f6a05f99fe7cf5d148c5b", 0xd6}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e12f38ef18af765e", 0xc7}, {&(0x7f0000003340)="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", 0x365}], 0x4}, 0x4005)

6m3.05806054s ago: executing program 36 (id=2255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x18, r4, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044094}, 0x4)

3m48.378861443s ago: executing program 9 (id=2619):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100)
close(0xffffffffffffffff)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29)

3m46.041622162s ago: executing program 9 (id=2622):
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0)

3m44.770239362s ago: executing program 9 (id=2625):
gettid()
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

3m40.854305651s ago: executing program 9 (id=2637):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x80000001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x1, 0x0, 0x0)

3m39.359655581s ago: executing program 9 (id=2640):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x5e, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003200018bfff40"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3)

3m34.623493247s ago: executing program 9 (id=2658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048805}, 0x0)

3m19.137887154s ago: executing program 37 (id=2658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048805}, 0x0)

3m5.790517246s ago: executing program 8 (id=2743):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
umount2(&(0x7f0000000040)='.\x00', 0x2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

3m4.646076178s ago: executing program 8 (id=2746):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0)

3m2.235323444s ago: executing program 8 (id=2754):
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = memfd_create(0x0, 0x7)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r1, 0x5608, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r0, 0x4000000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB=' r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x4004000)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r3, 0x0, 0x0)

2m59.972677331s ago: executing program 8 (id=2765):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc)

2m59.353091061s ago: executing program 8 (id=2766):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

2m59.043086044s ago: executing program 8 (id=2770):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0)

2m43.048611994s ago: executing program 38 (id=2770):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0)

24.717872854s ago: executing program 7 (id=3484):
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x29, 0x5, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0xf0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xfff, r2, 0x0, 0x0, 0xfffffffffffffc00}])
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$inet6(0xa, 0x2, 0x3a)

23.526720526s ago: executing program 0 (id=3487):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000000000000000000000000000e40a3850c0efdc0ea814cb8e73445409406608bd6dedd132d6b8f3a3b525bdce380de9484d479b1cb870c046a9a9cd1dde85754f71b3833de61897c82de364aa0db8274d3110cc8bb21d2e983e881e32393a0fb24aeef0b0bba7537c10a489eff663ddf1a73a57e25ea0080b8f3a3f684564bbdfadd8f514b6fdf29df258acc79d080c08556f0a6998511e44f20a25f03ab366bf9c2f2d84e5d5a818f1fc9a4426f6673cbdbaa019698070e271cd467f0ab51fe11ae1"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x8000, 0x400048}, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000006c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300)
pipe2$watch_queue(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
close_range(r8, r9, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)

19.409806929s ago: executing program 7 (id=3501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
fallocate(r5, 0x10, 0x0, 0x1062200)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}})
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000004000000040000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f6ff000000000000000000"], 0x50)
shutdown(r3, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, &(0x7f00007d0000))
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040efe05200c06095f86f3b16dac68be49625fc61b74b9c0166f84a86cd9f46cd44b70f0280ecd626abb217303007055a12a540beee0fde73dc3995de5138eaa4bb40fe6a1cc6b9ed5947ec9bd5c669a3f72e1691535173b62a8e54c0b211574f30e84e1b82a1548677921c491047cd99b25b7d7e04174c9bde0c7afbdd3632632fca3c7ae3d5a09b8d94b"], 0x7)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9)
r7 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x20602)
ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000100)={0x1, 0x2, @start={0x401, 0x1}})
r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x138, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x4, 0x2, 0x4, 0x7, 0x1], 0x6, 0x4}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x1, 0x4, [0xa, 0x15, 0x37, 0x2e, 0x1c, 0x15, 0x17, 0xf, 0x1d, 0xb, 0x18, 0x13, 0x1, 0x2e, 0x15, 0x1f], 0x0, 0xffffffff, 0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x7, 0x3, 0x2]}, {0x4, [0x1, 0x5, 0x4, 0x0, 0x4, 0x1], 0x1, 0x3}}}}, {{@ip={@private=0xa010102, @empty, 0xff, 0xffffffff, 'sit0\x00', 'gretap0\x00', {}, {0xff}, 0x89, 0x2, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6}, {0x1, 0x0, 0x4}, {0x4, 0x0, 0x2}, 0x3, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)

18.979200813s ago: executing program 4 (id=3503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000000000000000000000000000e40a3850c0efdc0ea814cb8e73445409406608bd6dedd132d6b8f3a3b525bdce380de9484d479b1cb870c046a9a9cd1dde85754f71b3833de61897c82de364aa0db8274d3110cc8bb21d2e983e881e32393a0fb24aeef0b0bba7537c10a489eff663ddf1a73a57e25ea0080b8f3a3f684564bbdfadd8f514b6fdf29df258acc79d080c08556f0a6998511e44f20a25f03ab366bf9c2f2d84e5d5a818f1fc9a4426f6673cbdbaa019698070e271cd467f0ab51fe11ae1"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsmount(r3, 0x1, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x8000, 0x400048}, &(0x7f0000000300)=<r4=>0x0, &(0x7f00000006c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r8}})
io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
ioprio_set$pid(0x2, 0x0, 0x6000)

18.348704168s ago: executing program 0 (id=3504):
socket$l2tp6(0xa, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ptrace$getregset(0x4204, r1, 0x202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xf48ac948cddb6ce6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{0x0}], 0x1)

16.333619453s ago: executing program 0 (id=3506):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f0000000100)=""/11, 0xb}], 0x3, 0x1, 0x4)

15.272231042s ago: executing program 7 (id=3508):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x1, 0x0, 0x0)

13.464315009s ago: executing program 7 (id=3510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2a140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x9, 0x803, 0xb57)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r5 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40012103)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYRESHEX=r5, @ANYRES8, @ANYRES8=r0, @ANYRESHEX=r6], 0x34}, 0x1, 0x0, 0x0, 0x2000090d}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)

13.421661145s ago: executing program 4 (id=3512):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.797028734s ago: executing program 4 (id=3516):
socket$l2tp6(0xa, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ptrace$getregset(0x4204, r1, 0x202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xf48ac948cddb6ce6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{0x0}], 0x1)

11.251410503s ago: executing program 4 (id=3517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000)

9.180720034s ago: executing program 7 (id=3527):
syz_usb_connect(0x6, 0x446, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0)

8.192010789s ago: executing program 3 (id=3530):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x144, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x124, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x144}}, 0x0)

8.090284709s ago: executing program 3 (id=3531):
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}})
ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0)
read$msr(r0, 0x0, 0x0)
r3 = getpid()
sched_getparam(r3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

7.923457979s ago: executing program 3 (id=3533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x80000001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x1, 0x0, 0x0)

7.781454372s ago: executing program 0 (id=3535):
gettid()
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

6.691046514s ago: executing program 3 (id=3536):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000000000000000000000000000e40a3850c0efdc0ea814cb8e73445409406608bd6dedd132d6b8f3a3b525bdce380de9484d479b1cb870c046a9a9cd1dde85754f71b3833de61897c82de364aa0db8274d3110cc8bb21d2e983e881e32393a0fb24aeef0b0bba7537c10a489eff663ddf1a73a57e25ea0080b8f3a3f684564bbdfadd8f514b6fdf29df258acc79d080c08556f0a6998511e44f20a25f03ab366bf9c2f2d84e5d5a818f1fc9a4426f6673cbdbaa019698070e271cd467f0ab51fe11ae1"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x8000, 0x400048}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000006c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300)
pipe2$watch_queue(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1)
close_range(r3, r4, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)

6.395098516s ago: executing program 0 (id=3539):
socket$l2tp6(0xa, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ptrace$getregset(0x4204, r1, 0x202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xf48ac948cddb6ce6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1)

4.873309042s ago: executing program 0 (id=3541):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x144, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x124, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x144}}, 0x0)

4.374477752s ago: executing program 7 (id=3545):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000))
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f0000000100)=""/11, 0xb}], 0x3, 0x1, 0x4)

3.596734789s ago: executing program 4 (id=3548):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000000000000000000000000000e40a3850c0efdc0ea814cb8e73445409406608bd6dedd132d6b8f3a3b525bdce380de9484d479b1cb870c046a9a9cd1dde85754f71b3833de61897c82de364aa0db8274d3110cc8bb21d2e983e881e32393a0fb24aeef0b0bba7537c10a489eff663ddf1a73a57e25ea0080b8f3a3f684564bbdfadd8f514b6fdf29df258acc79d080c08556f0a6998511e44f20a25f03ab366bf9c2f2d84e5d5a818f1fc9a4426f6673cbdbaa019698070e271cd467f0ab51fe11ae1"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x8000, 0x400048}, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000006c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300)
pipe2$watch_queue(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
close_range(r8, r9, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)

3.230621117s ago: executing program 5 (id=3550):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fff7ffc}]})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1e, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044)
close_range(r3, 0xffffffffffffffff, 0x0)

2.568402315s ago: executing program 3 (id=3551):
socket$l2tp6(0xa, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ptrace$getregset(0x4204, r1, 0x202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xf48ac948cddb6ce6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1)

2.373902244s ago: executing program 5 (id=3552):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x54)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ff, 0x1f480, 0x1, 0x399, 0x0, r1})
io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sigaltstack(0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
write$P9_RREAD(r5, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x20, 0xffffffffffff, 0x20, 0x9}, 0x59)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c)

2.235344789s ago: executing program 5 (id=3553):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x84, 0x70, 0x0, 0x0, @time={0xe, 0x425}, {0x81}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x5c, 0x5, 0x83, @tick=0xa8, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @tick=0x7, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}], 0x54)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4)
sendmmsg$inet(r2, &(0x7f0000000f40), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = open(0x0, 0x167842, 0x19)
pwritev2(r4, &(0x7f0000000880), 0x0, 0x1400, 0x9, 0x1)
getuid()
msgctl$IPC_RMID(0x0, 0x0)
msgget$private(0x0, 0x58d)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000440)={0xc, 0x4, 0x4, {0x2, @sliced={0x101, [0x6e, 0x6, 0x7, 0x5, 0x1, 0x0, 0xff, 0x4, 0x5, 0x4, 0x60f5, 0x7, 0x2, 0x3ff, 0x2, 0x2, 0x862, 0x5, 0x7, 0x9, 0x3, 0x9, 0x9, 0x81, 0x3044, 0x7, 0x7ffc, 0x9, 0x7, 0x6, 0x401, 0x6, 0xc, 0x8, 0x0, 0x4, 0x6, 0xa390, 0x9, 0x74, 0x1, 0x8, 0x5, 0x8, 0xff, 0x5, 0x6b, 0xfffb], 0x7}}, 0x7})

2.185004515s ago: executing program 5 (id=3554):
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}})
ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0)
read$msr(r0, 0x0, 0x0)
r3 = getpid()
sched_getparam(r3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

2.079537637s ago: executing program 5 (id=3555):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1f}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
close(0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1.968624502s ago: executing program 5 (id=3556):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc)

1.012206ms ago: executing program 3 (id=3557):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x80000001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setitimer(0x1, 0x0, 0x0)

0s ago: executing program 4 (id=3558):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

face: batadv_slave_1
[  978.482768][ T5887] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  978.487289][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.487340][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.487356][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.488377][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.488434][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.488454][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.491751][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.491802][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.491826][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.495964][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.496014][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.496039][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.497731][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.497779][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.497804][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.499378][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.499425][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.499459][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.500472][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.500519][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.500544][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.501715][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  978.501761][ T5887] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  978.501786][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0
[  978.504688][ T5887] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  978.504713][ T5887] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  978.504731][ T5887] usb 8-1: Product: syz
[  978.504741][ T5887] usb 8-1: Manufacturer: syz
[  978.504749][ T5887] usb 8-1: SerialNumber: syz
[  978.512122][ T5887] usb 8-1: config 0 descriptor??
[  978.765267][ T1509] veth1_macvtap: left promiscuous mode
[  978.765368][ T1509] veth0_macvtap: left promiscuous mode
[  978.765615][ T1509] veth1_vlan: left promiscuous mode
[  978.765785][ T1509] veth0_vlan: left promiscuous mode
[  978.767110][ T5887] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  978.814620][ T5887] usb 8-1: USB disconnect, device number 3
[  978.850070][ T5887] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  979.289504][T13660] ptrace attach of "./syz-executor exec"[12545] was attempted by ""[13660]
[  983.070292][ T1509] team0 (unregistering): Port device team_slave_1 removed
[  983.180252][ T1509] team0 (unregistering): Port device team_slave_0 removed
[  984.649752][T13666] syzkaller0: entered promiscuous mode
[  984.649779][T13666] syzkaller0: entered allmulticast mode
[  984.907804][T13706] ptrace attach of "./syz-executor exec"[12463] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[  985.936948][T13332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  986.079585][ T5804] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  986.339397][ T5804] usb 6-1: Using ep0 maxpacket: 8
[  986.389703][ T5804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  986.389737][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  986.389763][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  986.389785][ T5804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  986.389828][ T5804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  986.389849][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.417754][T13329] veth0_vlan: entered promiscuous mode
[  986.598447][T13329] veth1_vlan: entered promiscuous mode
[  986.664499][ T5804] usb 6-1: GET_CAPABILITIES returned 0
[  986.664527][ T5804] usbtmc 6-1:16.0: can't read capabilities
[  986.851206][T13329] veth0_macvtap: entered promiscuous mode
[  986.876766][ T5804] usb 6-1: USB disconnect, device number 6
[  986.905459][T13329] veth1_macvtap: entered promiscuous mode
[  987.178114][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  987.265800][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  987.352204][   T73] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  987.383392][ T1492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  987.400848][ T1492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  987.401098][ T1492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  989.695154][T13332] veth0_vlan: entered promiscuous mode
[  989.704114][ T1509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  989.704131][ T1509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  989.866481][T13332] veth1_vlan: entered promiscuous mode
[  989.960649][  T809] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  990.111511][  T809] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  990.115911][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.115966][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.115993][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.117669][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.117718][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.117743][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.120497][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.120549][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.120575][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.121759][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.121807][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.121832][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.124770][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.124819][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.124845][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.126760][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.126809][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.126834][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.129869][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.129919][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.129945][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.132262][  T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  990.132312][  T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  990.132337][  T809] usb 5-1: config 0 interface 0 has no altsetting 0
[  990.163621][  T809] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  990.163651][  T809] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  990.163680][  T809] usb 5-1: Product: syz
[  990.163695][  T809] usb 5-1: Manufacturer: syz
[  990.163708][  T809] usb 5-1: SerialNumber: syz
[  990.407408][  T809] usb 5-1: config 0 descriptor??
[  990.444330][ T1543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  990.444353][ T1543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  990.478238][  T809] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  990.620242][ T5886] usb 5-1: USB disconnect, device number 19
[  990.625900][ T5886] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  990.743912][T13332] veth0_macvtap: entered promiscuous mode
[  990.784473][T13332] veth1_macvtap: entered promiscuous mode
[  990.885061][T13332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  990.929206][T13332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  990.975132][ T1286] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  990.975380][ T1286] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  990.975415][ T1286] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  990.975448][ T1286] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  992.248667][T13778] ptrace attach of "./syz-executor exec"[12468] was attempted by ""[13778]
[  993.320991][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  993.321012][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.449531][ T9732] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  996.543688][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  996.547704][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  996.572531][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  996.576505][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  996.578520][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  996.629539][ T9732] usb 8-1: Using ep0 maxpacket: 16
[  996.631542][ T9732] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  996.631585][ T9732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  996.631610][ T9732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  996.631631][ T9732] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  996.631652][ T9732] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  996.634374][ T9732] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  996.634402][ T9732] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  996.634422][ T9732] usb 8-1: Manufacturer: syz
[  996.745219][ T9732] usb 8-1: config 0 descriptor??
[  997.239803][ T9732] rc_core: IR keymap rc-hauppauge not found
[  997.239824][ T9732] Registered IR keymap rc-empty
[  997.240396][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.259844][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.281083][ T9732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  997.282746][ T9732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input10
[  997.328122][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.356620][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.379645][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.402133][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.426022][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.449930][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.469654][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.499540][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.519505][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.539454][ T9732] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  997.568101][ T9732] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  997.568128][ T9732] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  997.603076][ T9732] usb 8-1: USB disconnect, device number 4
[  998.436837][T13822] random: crng reseeded on system resumption
[  998.799464][ T5805] Bluetooth: hci2: command tx timeout
[  999.614778][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  999.614846][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.361309][T13839] ptrace attach of "./syz-executor exec"[12463] was attempted by ""[13839]
[ 1000.849544][ T5805] Bluetooth: hci2: command tx timeout
[ 1003.219589][ T5805] Bluetooth: hci2: command tx timeout
[ 1003.459462][ T5805] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[ 1004.455828][T13876] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1005.290589][ T5805] Bluetooth: hci2: command tx timeout
[ 1005.328146][ T5999] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.815023][ T5805] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[ 1006.037624][ T5999] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.212790][T13805] chnl_net:caif_netlink_parms(): no params data found
[ 1006.655405][ T5999] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.582446][ T5999] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.219419][T13805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.219537][T13805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.219848][T13805] bridge_slave_0: entered allmulticast mode
[ 1008.226539][T13805] bridge_slave_0: entered promiscuous mode
[ 1008.263203][T13805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1008.265744][T13805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.265984][T13805] bridge_slave_1: entered allmulticast mode
[ 1008.268578][T13805] bridge_slave_1: entered promiscuous mode
[ 1008.423312][T13805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1008.427567][T13805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1008.607524][ T5999] bridge_slave_1: left allmulticast mode
[ 1008.607553][ T5999] bridge_slave_1: left promiscuous mode
[ 1008.618330][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.152740][ T5999] bridge_slave_0: left allmulticast mode
[ 1009.152770][ T5999] bridge_slave_0: left promiscuous mode
[ 1009.153015][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.753940][ T5886] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1010.960366][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1011.013634][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1011.034240][ T5999] bond0 (unregistering): Released all slaves
[ 1011.626243][T13956] binder: 13955:13956 ioctl c0306201 2000000003c0 returned -14
[ 1012.327026][T13805] team0: Port device team_slave_0 added
[ 1012.482726][T13805] team0: Port device team_slave_1 added
[ 1013.703968][T13805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1013.703984][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.704007][T13805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.929588][ T5999] hsr_slave_0: left promiscuous mode
[ 1014.013441][ T5999] hsr_slave_1: left promiscuous mode
[ 1014.015344][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.015369][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.068523][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.068551][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1014.151420][ T5999] veth1_macvtap: left promiscuous mode
[ 1014.151522][ T5999] veth0_macvtap: left promiscuous mode
[ 1014.151773][ T5999] veth1_vlan: left promiscuous mode
[ 1014.151944][ T5999] veth0_vlan: left promiscuous mode
[ 1015.045904][T14001] binder: BINDER_SET_CONTEXT_MGR already set
[ 1015.045914][T14001] binder: 14000:14001 ioctl 4018620d 200000000040 returned -16
[ 1015.046249][T14001] binder: 14000:14001 ioctl c0306201 2000000003c0 returned -14
[ 1015.739498][ T5804] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1016.323229][ T5804] usb 9-1: device descriptor read/64, error -71
[ 1016.671314][ T5804] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1016.860237][ T5804] usb 9-1: device descriptor read/64, error -71
[ 1017.053436][ T5804] usb usb9-port1: attempt power cycle
[ 1017.409601][ T5804] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1017.440014][ T5804] usb 9-1: device descriptor read/8, error -71
[ 1017.689514][ T5804] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1017.716047][ T5804] usb 9-1: device descriptor read/8, error -71
[ 1017.819978][ T5804] usb usb9-port1: unable to enumerate USB device
[ 1017.900023][ T5999] team0 (unregistering): Port device team_slave_1 removed
[ 1017.984061][ T5999] team0 (unregistering): Port device team_slave_0 removed
[ 1019.355290][T14031] binder: BINDER_SET_CONTEXT_MGR already set
[ 1019.355305][T14031] binder: 14030:14031 ioctl 4018620d 200000000040 returned -16
[ 1019.355656][T14031] binder: 14030:14031 ioctl c0306201 2000000003c0 returned -14
[ 1019.432678][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2453'.
[ 1019.546947][T13805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1019.546964][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.546990][T13805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1019.873322][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2460'.
[ 1019.876165][T13805] hsr_slave_0: entered promiscuous mode
[ 1019.877513][T13805] hsr_slave_1: entered promiscuous mode
[ 1020.506581][T12848] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1020.699243][T12848] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1020.700262][T12848] usb 9-1: not running at top speed; connect to a high speed hub
[ 1020.701246][T12848] usb 9-1: config 5 has an invalid interface number: 206 but max is 0
[ 1020.701261][T12848] usb 9-1: config 5 has no interface number 0
[ 1020.701278][T12848] usb 9-1: config 5 interface 206 has no altsetting 0
[ 1020.703241][T12848] usb 9-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4
[ 1020.703257][T12848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.703267][T12848] usb 9-1: Product: syz
[ 1020.703275][T12848] usb 9-1: Manufacturer: syz
[ 1020.703282][T12848] usb 9-1: SerialNumber: syz
[ 1021.114426][T12848] rtsx_usb 9-1:5.206: probe with driver rtsx_usb failed with error -22
[ 1021.139808][T12848] usb 9-1: USB disconnect, device number 6
[ 1024.449698][T14132] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1025.579496][  T809] usb 9-1: new low-speed USB device number 7 using dummy_hcd
[ 1025.743782][  T809] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 190, changing to 4
[ 1025.743813][  T809] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0
[ 1025.743860][  T809] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0
[ 1025.748864][  T809] usb 9-1: string descriptor 0 read error: -22
[ 1025.749006][  T809] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40
[ 1025.749024][  T809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.773167][T14176] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1028.878991][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1028.879056][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1028.879085][ T5805] Tainted: [L]=SOFTLOCKUP
[ 1028.879092][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1028.879106][ T5805] Workqueue: hci5 hci_rx_work
[ 1028.879215][ T5805] Call Trace:
[ 1028.879226][ T5805]  <TASK>
[ 1028.879235][ T5805]  dump_stack_lvl+0xe8/0x150
[ 1028.879304][ T5805]  sysfs_create_dir_ns+0x271/0x2a0
[ 1028.879381][ T5805]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1028.879457][ T5805]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1028.879483][ T5805]  ? rt_spin_unlock+0x160/0x200
[ 1028.879508][ T5805]  kobject_add_internal+0x631/0xd10
[ 1028.879570][ T5805]  kobject_add+0x163/0x240
[ 1028.879631][ T5805]  ? __pfx_kobject_add+0x10/0x10
[ 1028.879669][ T5805]  ? get_device_parent+0x370/0x3a0
[ 1028.879772][ T5805]  device_add+0x408/0xb80
[ 1028.879807][ T5805]  hci_conn_add_sysfs+0xd5/0x210
[ 1028.879886][ T5805]  le_conn_complete_evt+0xf1d/0x1430
[ 1028.879971][ T5805]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1028.880011][ T5805]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1028.880040][ T5805]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1028.880097][ T5805]  ? skb_pull_data+0xfb/0x200
[ 1028.880196][ T5805]  hci_le_conn_complete_evt+0x187/0x470
[ 1028.880233][ T5805]  hci_event_packet+0x7af/0x12c0
[ 1028.880294][ T5805]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1028.880324][ T5805]  ? __pfx_hci_event_packet+0x10/0x10
[ 1028.880347][ T5805]  ? rt_spin_unlock+0x14f/0x200
[ 1028.880376][ T5805]  ? hci_send_to_monitor+0xe2/0x590
[ 1028.880401][ T5805]  hci_rx_work+0x3ee/0x1030
[ 1028.880434][ T5805]  ? process_scheduled_works+0xa25/0x1830
[ 1028.880490][ T5805]  process_scheduled_works+0xb02/0x1830
[ 1028.880547][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1028.880581][ T5805]  ? assign_work+0x3d5/0x5e0
[ 1028.880614][ T5805]  worker_thread+0xa50/0xfc0
[ 1028.880670][ T5805]  kthread+0x388/0x470
[ 1028.880692][ T5805]  ? __pfx_worker_thread+0x10/0x10
[ 1028.880717][ T5805]  ? __pfx_kthread+0x10/0x10
[ 1028.880740][ T5805]  ret_from_fork+0x51e/0xb90
[ 1028.880785][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[ 1028.880810][ T5805]  ? __switch_to+0xc7d/0x1450
[ 1028.880848][ T5805]  ? __pfx_kthread+0x10/0x10
[ 1028.880870][ T5805]  ret_from_fork_asm+0x1a/0x30
[ 1028.880907][ T5805]  </TASK>
[ 1028.889702][ T5805] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1028.889762][ T5805] Bluetooth: hci5: failed to register connection device
[ 1029.495373][  T809] usb 9-1: USB disconnect, device number 7
[ 1030.075690][T13805] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1030.480719][T13805] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1030.564833][T13805] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1030.712577][T13805] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1031.229842][ T5805] Bluetooth: hci5: command 0x0406 tx timeout
[ 1031.631524][T13805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1031.714096][T13805] 8021q: adding VLAN 0 to HW filter on device team0
[ 1031.746533][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.746665][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1031.773120][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.773198][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.119333][T14237] ptrace attach of "./syz-executor exec"[12463] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1033.279471][ T5805] Bluetooth: hci5: command 0x0406 tx timeout
[ 1033.523674][T14254] syz_tun: entered allmulticast mode
[ 1033.659660][T14254] veth1_to_team: entered allmulticast mode
[ 1033.661627][T14253] syz_tun: left allmulticast mode
[ 1035.318155][T13805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1035.987567][T14292] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1037.419411][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1037.461201][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb38400: rx timeout, send abort
[ 1037.592887][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1037.592908][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1037.592928][ T5887] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1037.592939][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.597639][ T5887] usb 8-1: config 0 descriptor??
[ 1037.961307][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb39c00: rx timeout, send abort
[ 1037.963517][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb38400: abort rx timeout. Force session deactivation
[ 1038.068426][ T5887] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[ 1038.103338][T13805] veth0_vlan: entered promiscuous mode
[ 1038.126595][ T5887] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[ 1038.187195][T13805] veth1_vlan: entered promiscuous mode
[ 1038.259562][ T5887] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected
[ 1038.259990][ T5887] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted -  nothing to read
[ 1038.307692][T13805] veth0_macvtap: entered promiscuous mode
[ 1038.326410][T13805] veth1_macvtap: entered promiscuous mode
[ 1038.396336][ T5887] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[ 1038.415821][T13805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1038.452581][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb38800: rx timeout, send abort
[ 1038.453430][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bb38800: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session.
[ 1038.461383][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb39c00: abort rx timeout. Force session deactivation
[ 1038.481023][T13805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1038.569993][ T1509] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.588364][ T5999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.592490][ T5999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.593970][ T5999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.610293][ T5887] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[ 1038.671377][T14325] sctp: [Deprecated]: syz.8.2516 (pid 14325) Use of int in max_burst socket option.
[ 1038.671377][T14325] Use struct sctp_assoc_value instead
[ 1038.682720][ T5887] usb 8-1: USB disconnect, device number 6
[ 1038.792169][T14323] fido_id[14323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[ 1038.914190][ T5887] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected
[ 1039.266266][T14331] capability: warning: `syz.7.2518' uses 32-bit capabilities (legacy support in use)
[ 1039.300353][T14331] program syz.7.2518 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1039.309580][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1039.309598][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1040.118766][T14347] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1042.055316][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1042.055337][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1044.215172][T14373] program syz.7.2530 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1045.027478][T14391] ptrace attach of "./syz-executor exec"[12463] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1047.058632][T14413] sctp: [Deprecated]: syz.8.2526 (pid 14413) Use of int in max_burst socket option.
[ 1047.058632][T14413] Use struct sctp_assoc_value instead
[ 1049.580157][T14438] ptrace attach of "./syz-executor exec"[12545] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1052.429422][ T5804] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1052.740442][ T5804] usb 10-1: Using ep0 maxpacket: 8
[ 1052.945303][ T5804] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.945971][ T5804] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1052.946279][ T5804] usb 10-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1052.946540][ T5804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.360852][ T5804] usb 10-1: config 0 descriptor??
[ 1055.210382][ T5804] usb 10-1: USB disconnect, device number 2
[ 1057.786557][T14566] binder: 14555:14566 ioctl c0306201 2000000003c0 returned -14
[ 1058.119528][ T5805] Bluetooth: hci1: command 0x0406 tx timeout
[ 1060.450869][T14581] ptrace attach of "./syz-executor exec"[12463] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1060.608325][ T9732] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1060.909631][ T9732] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1061.009853][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1061.009927][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1061.263330][T14586] fido_id[14586]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1063.071913][T14620] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe
[ 1064.215158][T14637] ptrace attach of "./syz-executor exec"[13805] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1065.757747][ T5810] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[ 1069.778431][T14679] netlink: 'syz.4.2603': attribute type 6 has an invalid length.
[ 1070.884080][T14727] netlink: 'syz.8.2616': attribute type 6 has an invalid length.
[ 1070.901377][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'.
[ 1075.031459][T14757] ODEBUG: Out of memory. ODEBUG disabled
[ 1079.179542][   T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1079.511532][   T31] usb 8-1: too many configurations: 9, using maximum allowed: 8
[ 1079.514590][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.514615][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1079.514676][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.514702][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1079.522507][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.522529][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1079.522571][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.522596][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1079.529834][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.529858][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1079.529903][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.529928][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1079.539971][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.539995][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1079.540040][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.540065][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1079.549716][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.549739][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1079.549784][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.549808][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1079.812538][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.812633][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1079.813063][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.813111][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1080.347494][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.347519][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.347581][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1080.347605][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1080.380430][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.380456][   T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1080.380514][   T31] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1080.380540][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1080.433321][   T31] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1080.433352][   T31] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1080.433371][   T31] usb 8-1: Product: syz
[ 1080.433384][   T31] usb 8-1: Manufacturer: syz
[ 1080.433398][   T31] usb 8-1: SerialNumber: syz
[ 1080.445692][   T31] usb 8-1: config 0 descriptor??
[ 1080.524669][   T31] yurex 8-1:0.0: Could not find endpoints
[ 1080.640894][T14821] netlink: 'syz.4.2643': attribute type 4 has an invalid length.
[ 1080.647413][   T31] usb 8-1: USB disconnect, device number 7
[ 1081.342762][T14832] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1083.716252][ T5886] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1083.895450][ T5886] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1083.896994][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.897017][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.897063][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.897089][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.898280][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.898301][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.898346][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.898370][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.906019][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.906043][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.906087][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.906112][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.908221][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.908243][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.908306][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.908330][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.911348][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.911372][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.911415][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.911441][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.913549][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.913570][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.913614][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.913638][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.918787][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.918809][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.918852][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.918876][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.922071][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.922092][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1083.922135][ T5886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1083.922159][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.942818][ T5886] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1083.942847][ T5886] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1083.942865][ T5886] usb 6-1: Product: syz
[ 1083.942879][ T5886] usb 6-1: Manufacturer: syz
[ 1083.942892][ T5886] usb 6-1: SerialNumber: syz
[ 1083.995133][ T5886] usb 6-1: config 0 descriptor??
[ 1084.185857][ T5886] yurex 6-1:0.0: Could not find endpoints
[ 1084.246346][T14886] ptrace attach of "./syz-executor exec"[12545] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1084.631052][ T5886] usb 6-1: USB disconnect, device number 7
[ 1085.059916][T14899] overlay: Unknown parameter '/'
[ 1090.912578][T14971] overlay: Unknown parameter '/'
[ 1093.712009][T14999] sctp: [Deprecated]: syz.8.2689 (pid 14999) Use of int in max_burst socket option.
[ 1093.712009][T14999] Use struct sctp_assoc_value instead
[ 1095.123560][T15012] netlink: 'syz.4.2693': attribute type 4 has an invalid length.
[ 1095.939397][ T9732] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1096.090375][ T9732] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1096.091423][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.091473][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.091495][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.092675][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.092724][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.092746][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.093924][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.093971][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.093993][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.095329][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.095375][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.095397][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.096579][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.096628][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.096648][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.097819][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.097865][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.097884][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.099229][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.099276][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.217798][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.292671][ T9732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1096.292727][ T9732] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1096.292748][ T9732] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1096.295064][ T9732] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1096.295091][ T9732] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1096.295111][ T9732] usb 6-1: Product: syz
[ 1096.295125][ T9732] usb 6-1: Manufacturer: syz
[ 1096.295138][ T9732] usb 6-1: SerialNumber: syz
[ 1096.359741][ T9732] usb 6-1: config 0 descriptor??
[ 1096.364163][ T9732] yurex 6-1:0.0: Could not find endpoints
[ 1096.567895][ T9797] usb 6-1: USB disconnect, device number 8
[ 1097.574739][T15046] ptrace attach of "./syz-executor exec"[12463] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1099.544184][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1099.563100][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1099.563788][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1099.564829][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1099.565527][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1100.809473][ T9731] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1100.959467][ T9731] usb 6-1: Using ep0 maxpacket: 8
[ 1100.961423][ T9731] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1100.961459][ T9731] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1100.961472][ T9731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.964577][ T9731] usb 6-1: config 0 descriptor??
[ 1101.013929][ T9731] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1101.659528][ T5810] Bluetooth: hci3: command tx timeout
[ 1103.598597][ T5804] usb 6-1: USB disconnect, device number 9
[ 1103.729453][ T5810] Bluetooth: hci3: command tx timeout
[ 1105.130878][T15090] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1105.371831][T15057] chnl_net:caif_netlink_parms(): no params data found
[ 1105.499425][ T5804] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1105.623391][T15057] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.623732][T15057] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.623915][T15057] bridge_slave_0: entered allmulticast mode
[ 1105.626401][T15057] bridge_slave_0: entered promiscuous mode
[ 1105.634653][T15057] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.634862][T15057] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.635091][T15057] bridge_slave_1: entered allmulticast mode
[ 1105.637628][T15057] bridge_slave_1: entered promiscuous mode
[ 1105.762000][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1105.762033][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1105.762054][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1105.762092][ T5804] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1105.762113][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.782115][ T5804] usb 5-1: config 0 descriptor??
[ 1105.812753][ T5810] Bluetooth: hci3: command tx timeout
[ 1106.023928][T15057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1106.059557][T15057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1106.420089][ T5804] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1107.514751][ T5804] usb 5-1: USB disconnect, device number 20
[ 1107.753481][T15129] tipc: Started in network mode
[ 1107.753518][T15129] tipc: Node identity 4635243da135, cluster identity 4711
[ 1107.783786][T15129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1107.799097][T15057] team0: Port device team_slave_0 added
[ 1107.886440][T15119] tipc: Disabling bearer <eth:syzkaller0>
[ 1107.889591][ T5810] Bluetooth: hci3: command tx timeout
[ 1108.044945][T15057] team0: Port device team_slave_1 added
[ 1109.515754][T15156] ubi31: attaching mtd0
[ 1109.798336][T15156] ubi31: scanning is finished
[ 1109.798357][T15156] ubi31: empty MTD device detected
[ 1109.941418][T15158] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1110.245465][T15057] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1110.245533][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1110.245559][T15057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1110.248694][T15151] slcan: can't register candev
[ 1110.252338][T15057] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1110.252567][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1110.252596][T15057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1110.883591][T15156] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1110.883618][T15156] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1110.883635][T15156] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1110.883651][T15156] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1110.883665][T15156] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1110.883681][T15156] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1110.883698][T15156] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 789006487
[ 1110.883715][T15156] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1110.886557][T15188] ubi31: background thread "ubi_bgt31d" started, PID 15188
[ 1111.206964][T15057] hsr_slave_0: entered promiscuous mode
[ 1111.208023][T15057] hsr_slave_1: entered promiscuous mode
[ 1111.208791][T15057] debugfs: 'hsr0' already exists in 'hsr'
[ 1111.208815][T15057] Cannot create hsr debugfs directory
[ 1113.726882][ T1543] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.219414][ T9732] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1114.410838][T15217] binder: 15212:15217 ioctl c0306201 2000000003c0 returned -14
[ 1115.130681][ T9732] usb 9-1: too many configurations: 9, using maximum allowed: 8
[ 1115.133440][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.133490][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.133515][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.133535][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.134877][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.134927][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.134951][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.134971][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.135971][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.136017][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.136041][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.136061][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.138967][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.139018][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.139044][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.139065][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.330240][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.330316][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.330342][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.330364][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.335642][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.335716][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.335740][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.335760][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.336809][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.336857][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.336882][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.336902][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.337937][ T9732] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1115.337985][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1115.338009][ T9732] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1115.338030][ T9732] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1115.351377][ T9732] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1115.351406][ T9732] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1115.351426][ T9732] usb 9-1: Product: syz
[ 1115.351439][ T9732] usb 9-1: Manufacturer: syz
[ 1115.351452][ T9732] usb 9-1: SerialNumber: syz
[ 1115.437956][ T9732] usb 9-1: config 0 descriptor??
[ 1115.457645][ T9732] yurex 9-1:0.0: Could not submitting URB
[ 1115.457839][ T9732] yurex 9-1:0.0: probe with driver yurex failed with error -5
[ 1115.562226][ T1543] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.600274][T15225] netlink: 'syz.5.2751': attribute type 4 has an invalid length.
[ 1115.646136][ T5887] usb 9-1: USB disconnect, device number 8
[ 1115.789447][ T9732] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1115.939559][ T9732] usb 5-1: Using ep0 maxpacket: 8
[ 1115.944001][ T9732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1115.944047][ T9732] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1115.944069][ T9732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.965570][ T9732] usb 5-1: config 0 descriptor??
[ 1115.995161][ T9732] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1116.124612][ T1543] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.412511][ T1543] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.559625][   T31] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1116.773370][   T31] usb 9-1: Using ep0 maxpacket: 32
[ 1116.775776][   T31] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1116.775804][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.791987][   T31] usb 9-1: config 0 descriptor??
[ 1117.139492][   T31] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1117.172158][   T31] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1117.172187][   T31] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1118.535956][ T5887] usb 5-1: USB disconnect, device number 21
[ 1119.675758][ T1543] bridge_slave_1: left allmulticast mode
[ 1119.675788][ T1543] bridge_slave_1: left promiscuous mode
[ 1119.676033][ T1543] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1119.760957][ T1543] bridge_slave_0: left allmulticast mode
[ 1119.760984][ T1543] bridge_slave_0: left promiscuous mode
[ 1119.761207][ T1543] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1119.800797][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'.
[ 1120.039414][   T36] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1120.189468][   T36] usb 8-1: Using ep0 maxpacket: 32
[ 1120.210332][   T36] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1120.210362][   T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.238761][   T36] usb 8-1: config 0 descriptor??
[ 1120.446978][   T36] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1120.451643][   T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1120.452593][   T36] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1120.452662][   T36] usb 8-1: media controller created
[ 1120.466923][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1120.550542][ T1543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1120.595287][ T1543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1120.612567][ T1543] bond0 (unregistering): Released all slaves
[ 1120.664733][T15297] ip6gretap0: entered promiscuous mode
[ 1120.664950][T15297] macsec1: entered promiscuous mode
[ 1120.665112][T15297] macsec1: entered allmulticast mode
[ 1120.665124][T15297] ip6gretap0: entered allmulticast mode
[ 1120.700242][   T36] az6027: usb out operation failed. (-71)
[ 1120.705154][   T36] az6027: usb out operation failed. (-71)
[ 1120.705170][   T36] stb0899_attach: Driver disabled by Kconfig
[ 1120.705179][   T36] az6027: no front-end attached
[ 1120.705179][   T36] 
[ 1120.709524][   T36] az6027: usb out operation failed. (-71)
[ 1120.709547][   T36] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1120.712492][   T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11
[ 1120.769241][   T36] dvb-usb: schedule remote query interval to 400 msecs.
[ 1120.769261][   T36] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1120.772316][   T36] usb 8-1: USB disconnect, device number 8
[ 1121.043629][T15308] fuse: Bad value for 'fd'
[ 1121.375061][T15314] netlink: 'syz.4.2779': attribute type 4 has an invalid length.
[ 1121.904920][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2782'.
[ 1121.967733][   T36] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1122.378289][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1122.378355][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1123.759544][ T9732] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1123.909463][ T9732] usb 5-1: Using ep0 maxpacket: 32
[ 1123.914756][ T9732] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1123.914776][ T9732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.989134][T15057] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1123.990388][ T9732] usb 5-1: config 0 descriptor??
[ 1124.206306][ T9732] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1124.223332][ T9732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1124.228013][ T9732] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1124.228056][ T9732] usb 5-1: media controller created
[ 1124.269061][ T9732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1124.381765][ T1543] hsr_slave_0: left promiscuous mode
[ 1124.399716][ T1543] hsr_slave_1: left promiscuous mode
[ 1124.402095][ T1543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1124.406000][ T1543] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1124.408331][ T9732] az6027: usb out operation failed. (-71)
[ 1124.415122][ T9732] az6027: usb out operation failed. (-71)
[ 1124.442096][ T9732] stb0899_attach: Driver disabled by Kconfig
[ 1124.442110][ T9732] az6027: no front-end attached
[ 1124.442110][ T9732] 
[ 1124.444871][ T9732] az6027: usb out operation failed. (-71)
[ 1124.444889][ T9732] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1124.477599][ T9732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[ 1124.493878][ T9732] dvb-usb: schedule remote query interval to 400 msecs.
[ 1124.493897][ T9732] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1124.514824][ T1543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1124.514852][ T1543] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1124.534845][ T9732] usb 5-1: USB disconnect, device number 22
[ 1124.661698][ T1543] veth1_macvtap: left promiscuous mode
[ 1124.661797][ T1543] veth0_macvtap: left promiscuous mode
[ 1124.662036][ T1543] veth1_vlan: left promiscuous mode
[ 1124.662191][ T1543] veth0_vlan: left promiscuous mode
[ 1124.711118][ T9732] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1125.540025][ T1543] team0 (unregistering): Port device team_slave_1 removed
[ 1125.593477][ T1543] team0 (unregistering): Port device team_slave_0 removed
[ 1125.719862][T15057] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1125.804837][T15057] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1125.807050][T15341] netlink: 'syz.4.2789': attribute type 4 has an invalid length.
[ 1126.943076][T15057] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1127.488325][T15057] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1127.547107][T15057] 8021q: adding VLAN 0 to HW filter on device team0
[ 1127.583463][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.583656][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1127.635213][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.635360][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1128.111958][ T5886] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1128.252661][T15057] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1128.259716][ T5886] usb 6-1: Using ep0 maxpacket: 32
[ 1128.261625][ T5886] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1128.261650][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.294152][ T5886] usb 6-1: config 0 descriptor??
[ 1128.496146][T15057] veth0_vlan: entered promiscuous mode
[ 1128.505112][ T5886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1128.539831][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1128.542565][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1128.542614][ T5886] usb 6-1: media controller created
[ 1128.546684][T15057] veth1_vlan: entered promiscuous mode
[ 1128.614302][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1128.709408][ T5886] az6027: usb out operation failed. (-71)
[ 1128.709799][ T5886] az6027: usb out operation failed. (-71)
[ 1128.709813][ T5886] stb0899_attach: Driver disabled by Kconfig
[ 1128.709822][ T5886] az6027: no front-end attached
[ 1128.709822][ T5886] 
[ 1128.710197][ T5886] az6027: usb out operation failed. (-71)
[ 1128.710210][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1128.713103][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13
[ 1128.718278][ T5886] dvb-usb: schedule remote query interval to 400 msecs.
[ 1128.718296][ T5886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1128.733605][T15057] veth0_macvtap: entered promiscuous mode
[ 1128.755131][T15057] veth1_macvtap: entered promiscuous mode
[ 1129.083133][T15057] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1129.108059][ T5886] usb 6-1: USB disconnect, device number 10
[ 1129.145960][T15057] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1129.237993][ T7886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.239143][ T7886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.239190][ T7886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.239225][ T7886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.234210][ T5886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1130.819395][ T5871] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1130.970082][ T5871] usb 5-1: Using ep0 maxpacket: 16
[ 1130.972319][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1130.972385][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1130.972412][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1130.972432][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1130.972445][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1130.973460][ T5871] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1130.973479][ T5871] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1130.973488][ T5871] usb 5-1: Manufacturer: syz
[ 1131.126948][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'.
[ 1131.170500][ T5871] usb 5-1: config 0 descriptor??
[ 1131.202606][ T7886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1131.202627][ T7886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1131.253251][T15412] vlan2: entered allmulticast mode
[ 1131.253279][T15412] gretap0: entered allmulticast mode
[ 1131.413167][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1131.413188][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1131.509849][ T5871] rc_core: IR keymap rc-hauppauge not found
[ 1131.509869][ T5871] Registered IR keymap rc-empty
[ 1131.510070][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.537847][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.552851][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1131.557117][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14
[ 1131.599754][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.713564][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.741656][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.763962][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.780512][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.799511][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.819538][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.839494][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.859481][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.879476][ T5871] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1131.907415][ T5871] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1131.907431][ T5871] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1132.036895][   T10] usb 5-1: USB disconnect, device number 23
[ 1135.490614][ T9732] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1135.946741][ T9732] usb 8-1: Using ep0 maxpacket: 32
[ 1135.956157][ T9732] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1135.956186][ T9732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1136.089944][ T9732] usb 8-1: config 0 descriptor??
[ 1137.329006][ T9732] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1137.362460][T15471] sctp: [Deprecated]: syz.0.2819 (pid 15471) Use of int in max_burst socket option.
[ 1137.362460][T15471] Use struct sctp_assoc_value instead
[ 1137.685741][ T9732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1137.692750][ T9732] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1137.692803][ T9732] usb 8-1: media controller created
[ 1137.735997][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1137.754382][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1137.755343][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1137.758972][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1137.763631][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1137.905388][ T9732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1137.967234][ T9732] az6027: usb out operation failed. (-71)
[ 1137.970719][ T9732] az6027: usb out operation failed. (-71)
[ 1137.970736][ T9732] stb0899_attach: Driver disabled by Kconfig
[ 1137.970746][ T9732] az6027: no front-end attached
[ 1137.970746][ T9732] 
[ 1137.972006][ T9732] az6027: usb out operation failed. (-71)
[ 1137.972032][ T9732] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1137.975585][ T9732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15
[ 1137.983665][ T9732] dvb-usb: schedule remote query interval to 400 msecs.
[ 1137.983684][ T9732] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1137.999504][ T9732] usb 8-1: USB disconnect, device number 9
[ 1138.236734][T15479] netlink: 'syz.0.2820': attribute type 4 has an invalid length.
[ 1138.625329][ T9732] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1139.057264][T15472] chnl_net:caif_netlink_parms(): no params data found
[ 1139.796674][T15472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.797987][T15472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.798213][T15472] bridge_slave_0: entered allmulticast mode
[ 1139.825017][T15472] bridge_slave_0: entered promiscuous mode
[ 1139.838395][T15472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.838574][T15472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.838879][T15472] bridge_slave_1: entered allmulticast mode
[ 1139.864410][T15472] bridge_slave_1: entered promiscuous mode
[ 1139.968788][T15472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1139.972697][T15472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1140.209736][ T5805] Bluetooth: hci2: command tx timeout
[ 1140.531457][T15472] team0: Port device team_slave_0 added
[ 1140.543022][T15472] team0: Port device team_slave_1 added
[ 1140.549948][T15509] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2827'.
[ 1140.690371][T15472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1140.690389][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1140.690436][T15472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1140.692735][T15472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1140.692748][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1140.692772][T15472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1140.862731][T15472] hsr_slave_0: entered promiscuous mode
[ 1140.864024][T15472] hsr_slave_1: entered promiscuous mode
[ 1142.291464][ T5805] Bluetooth: hci2: command tx timeout
[ 1144.419384][ T5805] Bluetooth: hci2: command tx timeout
[ 1145.209466][ T9732] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1145.359769][ T9732] usb 1-1: Using ep0 maxpacket: 16
[ 1145.361635][ T9732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1145.361674][ T9732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1145.361688][ T9732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1145.361699][ T9732] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1145.361710][ T9732] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1145.363099][ T9732] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1145.363115][ T9732] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1145.363125][ T9732] usb 1-1: Manufacturer: syz
[ 1145.384296][ T9732] usb 1-1: config 0 descriptor??
[ 1145.730361][ T9732] rc_core: IR keymap rc-hauppauge not found
[ 1145.730382][ T9732] Registered IR keymap rc-empty
[ 1145.730548][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.749535][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.772628][ T9732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1145.781539][ T9732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16
[ 1145.813403][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.829714][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.849708][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.872672][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.898260][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.910717][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1146.046291][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1146.063402][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1146.086589][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1146.106531][ T9732] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1146.150428][ T9732] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1146.150453][ T9732] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1146.202194][ T9732] usb 1-1: USB disconnect, device number 47
[ 1146.449439][ T5805] Bluetooth: hci2: command tx timeout
[ 1147.626586][T15604] ptrace attach of "./syz-executor exec"[15057] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1147.851360][T15472] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1148.078024][T15472] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1148.137992][T15472] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1148.199474][T15472] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1148.743365][T15472] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1148.838613][T15472] 8021q: adding VLAN 0 to HW filter on device team0
[ 1148.860409][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.860533][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1148.932882][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1148.933019][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1149.952208][T15472] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1150.124275][T15472] veth0_vlan: entered promiscuous mode
[ 1150.157737][T15472] veth1_vlan: entered promiscuous mode
[ 1150.218415][T15472] veth0_macvtap: entered promiscuous mode
[ 1150.302272][T15472] veth1_macvtap: entered promiscuous mode
[ 1150.453856][T15472] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1150.512922][T15472] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1150.590791][ T1509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.599406][ T1509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.617194][ T1509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1150.617226][ T1509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.460844][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.460865][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1151.546995][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.547016][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1153.425237][T15741] ptrace attach of "./syz-executor exec"[15472] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1158.089462][ T5804] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1158.175390][T15822] ptrace attach of "./syz-executor exec"[15472] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1158.389504][ T5804] usb 5-1: Using ep0 maxpacket: 8
[ 1158.391432][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1158.391463][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1158.391554][ T5804] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1158.391576][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.403926][ T5804] usb 5-1: config 0 descriptor??
[ 1159.089840][ T5804] usbhid 5-1:0.0: can't add hid device: -71
[ 1159.089949][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1159.097058][ T5804] usb 5-1: USB disconnect, device number 24
[ 1160.584364][T15899] tipc: Started in network mode
[ 1160.584395][T15899] tipc: Node identity 865a30bbf6fc, cluster identity 4711
[ 1160.584563][T15899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1160.670790][T15896] tipc: Disabling bearer <eth:syzkaller0>
[ 1160.680889][ T9731] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[ 1160.831777][ T9731] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1160.831809][ T9731] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1160.831850][ T9731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1160.831872][ T9731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.789446][ T9731] usb 1-1: usb_control_msg returned -32
[ 1161.789493][ T9731] usbtmc 1-1:16.0: can't read capabilities
[ 1163.351752][  T809] usb 1-1: USB disconnect, device number 48
[ 1164.419429][ T9731] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1164.589631][ T9731] usb 5-1: Using ep0 maxpacket: 8
[ 1164.591912][ T9731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1164.591942][ T9731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1164.591977][ T9731] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1164.591999][ T9731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.647706][ T9731] usb 5-1: config 0 descriptor??
[ 1164.998966][T15990] binder: 15988:15990 ioctl c0306201 2000000003c0 returned -14
[ 1165.268430][ T9731] usbhid 5-1:0.0: can't add hid device: -71
[ 1165.268537][ T9731] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1165.296821][ T9731] usb 5-1: USB disconnect, device number 25
[ 1165.323041][T15998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2967'.
[ 1166.885085][T16032] binder: 16030:16032 ioctl c0306201 2000000003c0 returned -14
[ 1169.669412][ T9731] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1169.827839][ T9731] usb 4-1: Using ep0 maxpacket: 8
[ 1169.835348][ T9731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1169.835379][ T9731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1169.835416][ T9731] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1169.835438][ T9731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.881387][ T9731] usb 4-1: config 0 descriptor??
[ 1170.732772][ T9731] usbhid 4-1:0.0: can't add hid device: -71
[ 1170.732884][ T9731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1170.769408][ T9731] usb 4-1: USB disconnect, device number 50
[ 1173.208612][ T9731] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1173.623640][ T9731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1173.623675][ T9731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1173.623711][ T9731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1173.623734][ T9731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.681790][ T9731] usb 4-1: config 0 descriptor??
[ 1173.900495][ T9731] usbhid 4-1:0.0: can't add hid device: -71
[ 1173.900608][ T9731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1173.926245][ T9731] usb 4-1: USB disconnect, device number 51
[ 1174.369444][ T5804] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1174.732814][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1174.732848][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1174.732884][ T5804] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1174.732906][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.826078][ T5804] usb 4-1: config 0 descriptor??
[ 1174.855061][ T5804] hub 4-1:0.0: USB hub found
[ 1175.179785][ T5804] hub 4-1:0.0: 6 ports detected
[ 1175.181691][ T5804] hub 4-1:0.0: insufficient power available to use all downstream ports
[ 1175.322276][ T5804] hub 4-1:0.0: hub_hub_status failed (err = -71)
[ 1175.322298][ T5804] hub 4-1:0.0: config failed, can't get hub status (err -71)
[ 1175.340872][ T5804] usbhid 4-1:0.0: can't add hid device: -71
[ 1175.340981][ T5804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1175.512499][ T5804] usb 4-1: USB disconnect, device number 52
[ 1178.380250][  T993] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1178.575808][  T993] usb 4-1: Using ep0 maxpacket: 16
[ 1178.592448][  T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1178.592504][  T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1178.592531][  T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1178.592552][  T993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1178.592574][  T993] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1178.598754][  T993] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1178.598785][  T993] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1178.598803][  T993] usb 4-1: Manufacturer: syz
[ 1178.696834][  T993] usb 4-1: config 0 descriptor??
[ 1178.744096][   T31] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1178.744691][   T31] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1178.813109][   T31] usb 9-1: USB disconnect, device number 9
[ 1179.131252][  T993] rc_core: IR keymap rc-hauppauge not found
[ 1179.131270][  T993] Registered IR keymap rc-empty
[ 1179.131419][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.160982][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.182785][  T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1179.185970][  T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[ 1179.220046][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.239561][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.265855][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.279494][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.306613][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.320068][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.341855][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.359887][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.380169][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.399976][  T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1179.441733][  T993] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1179.441762][  T993] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1179.499431][  T993] usb 4-1: USB disconnect, device number 53
[ 1182.990102][   T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.221465][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1184.221533][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1185.216491][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3066'.
[ 1185.216515][T16362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3066'.
[ 1185.241557][   T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.871869][T16375] ptrace attach of "./syz-executor exec"[15472] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1186.831101][   T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.144631][T16399] binder: BINDER_SET_CONTEXT_MGR already set
[ 1187.144655][T16399] binder: 16398:16399 ioctl 4018620d 200000004a80 returned -16
[ 1187.526200][   T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.460988][   T49] bridge_slave_1: left allmulticast mode
[ 1189.461015][   T49] bridge_slave_1: left promiscuous mode
[ 1189.463121][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1189.837497][   T49] bridge_slave_0: left allmulticast mode
[ 1189.837525][   T49] bridge_slave_0: left promiscuous mode
[ 1189.837756][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1191.919433][  T993] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1192.206051][  T993] usb 1-1: Using ep0 maxpacket: 8
[ 1192.209195][  T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1192.209227][  T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1192.209263][  T993] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1192.209404][  T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.257567][  T993] usb 1-1: config 0 descriptor??
[ 1192.973224][  T993] usbhid 1-1:0.0: can't add hid device: -71
[ 1192.975489][  T993] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1193.011463][  T993] usb 1-1: USB disconnect, device number 49
[ 1195.242151][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1195.538343][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1195.580171][   T49] bond0 (unregistering): Released all slaves
[ 1198.299488][ T9731] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1198.449719][ T9731] usb 1-1: Using ep0 maxpacket: 8
[ 1198.452922][ T9731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1198.452940][ T9731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1198.452960][ T9731] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1198.452971][ T9731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.455802][ T9731] usb 1-1: config 0 descriptor??
[ 1199.230658][ T9731] usbhid 1-1:0.0: can't add hid device: -71
[ 1199.230726][ T9731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1199.236478][ T9731] usb 1-1: USB disconnect, device number 50
[ 1199.440985][ T5805] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[ 1202.809596][   T49] hsr_slave_0: left promiscuous mode
[ 1202.849944][   T49] hsr_slave_1: left promiscuous mode
[ 1202.850953][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1202.850976][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1202.914840][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1202.914858][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1203.114735][   T49] veth1_macvtap: left promiscuous mode
[ 1203.114798][   T49] veth0_macvtap: left promiscuous mode
[ 1203.114929][   T49] veth1_vlan: left promiscuous mode
[ 1203.138108][   T49] veth0_vlan: left promiscuous mode
[ 1205.541962][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1206.051949][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1206.320976][ T5805] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[ 1206.854410][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'.
[ 1207.689405][ T9797] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1207.946340][ T9797] usb 8-1: Using ep0 maxpacket: 16
[ 1207.968808][ T9797] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1207.968862][ T9797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1207.968888][ T9797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1207.968908][ T9797] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1207.968931][ T9797] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1207.970412][ T9797] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1207.970438][ T9797] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1207.970457][ T9797] usb 8-1: Manufacturer: syz
[ 1207.980655][ T9797] usb 8-1: config 0 descriptor??
[ 1208.579368][ T9797] rc_core: IR keymap rc-hauppauge not found
[ 1208.579389][ T9797] Registered IR keymap rc-empty
[ 1208.579535][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.599590][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.621011][ T9797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1208.624139][ T9797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18
[ 1208.754683][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.823293][    C1] rc rc0: IR event FIFO is full!
[ 1208.823316][    C1] rc rc0: IR event FIFO is full!
[ 1208.823330][    C1] rc rc0: IR event FIFO is full!
[ 1208.823344][    C1] rc rc0: IR event FIFO is full!
[ 1208.823358][    C1] rc rc0: IR event FIFO is full!
[ 1208.823432][    C1] rc rc0: IR event FIFO is full!
[ 1208.823447][    C1] rc rc0: IR event FIFO is full!
[ 1208.823894][    C1] rc rc0: IR event FIFO is full!
[ 1208.823909][    C1] rc rc0: IR event FIFO is full!
[ 1208.823921][    C1] rc rc0: IR event FIFO is full!
[ 1208.823933][    C1] rc rc0: IR event FIFO is full!
[ 1208.824159][    C1] rc rc0: IR event FIFO is full!
[ 1208.824174][    C1] rc rc0: IR event FIFO is full!
[ 1208.824188][    C1] rc rc0: IR event FIFO is full!
[ 1208.824204][    C1] rc rc0: IR event FIFO is full!
[ 1208.824218][    C1] rc rc0: IR event FIFO is full!
[ 1208.824233][    C1] rc rc0: IR event FIFO is full!
[ 1208.824245][    C1] rc rc0: IR event FIFO is full!
[ 1208.824257][    C1] rc rc0: IR event FIFO is full!
[ 1208.824300][    C1] rc rc0: IR event FIFO is full!
[ 1208.824328][    C1] rc rc0: IR event FIFO is full!
[ 1208.824551][    C1] rc rc0: IR event FIFO is full!
[ 1208.824567][    C1] rc rc0: IR event FIFO is full!
[ 1208.824579][    C1] rc rc0: IR event FIFO is full!
[ 1208.824590][    C1] rc rc0: IR event FIFO is full!
[ 1208.824602][    C1] rc rc0: IR event FIFO is full!
[ 1208.824830][    C1] rc rc0: IR event FIFO is full!
[ 1208.824845][    C1] rc rc0: IR event FIFO is full!
[ 1208.824858][    C1] rc rc0: IR event FIFO is full!
[ 1208.824870][    C1] rc rc0: IR event FIFO is full!
[ 1208.825090][    C1] rc rc0: IR event FIFO is full!
[ 1208.825104][    C1] rc rc0: IR event FIFO is full!
[ 1208.825118][    C1] rc rc0: IR event FIFO is full!
[ 1208.825131][    C1] rc rc0: IR event FIFO is full!
[ 1208.825145][    C1] rc rc0: IR event FIFO is full!
[ 1208.825167][    C1] rc rc0: IR event FIFO is full!
[ 1208.825180][    C1] rc rc0: IR event FIFO is full!
[ 1208.825402][    C1] rc rc0: IR event FIFO is full!
[ 1208.825416][    C1] rc rc0: IR event FIFO is full!
[ 1208.825430][    C1] rc rc0: IR event FIFO is full!
[ 1208.825443][    C1] rc rc0: IR event FIFO is full!
[ 1208.825456][    C1] rc rc0: IR event FIFO is full!
[ 1208.825470][    C1] rc rc0: IR event FIFO is full!
[ 1208.825483][    C1] rc rc0: IR event FIFO is full!
[ 1208.825496][    C1] rc rc0: IR event FIFO is full!
[ 1208.825508][    C1] rc rc0: IR event FIFO is full!
[ 1208.825948][    C1] rc rc0: IR event FIFO is full!
[ 1208.825964][    C1] rc rc0: IR event FIFO is full!
[ 1208.825980][    C1] rc rc0: IR event FIFO is full!
[ 1208.825992][    C1] rc rc0: IR event FIFO is full!
[ 1208.826296][    C1] rc rc0: IR event FIFO is full!
[ 1208.826312][    C1] rc rc0: IR event FIFO is full!
[ 1208.826325][    C1] rc rc0: IR event FIFO is full!
[ 1208.826338][    C1] rc rc0: IR event FIFO is full!
[ 1208.826364][    C1] rc rc0: IR event FIFO is full!
[ 1208.826379][    C1] rc rc0: IR event FIFO is full!
[ 1208.827240][    C1] rc rc0: IR event FIFO is full!
[ 1208.827257][    C1] rc rc0: IR event FIFO is full!
[ 1208.827270][    C1] rc rc0: IR event FIFO is full!
[ 1208.827282][    C1] rc rc0: IR event FIFO is full!
[ 1208.827713][    C1] rc rc0: IR event FIFO is full!
[ 1208.827729][    C1] rc rc0: IR event FIFO is full!
[ 1208.827745][    C1] rc rc0: IR event FIFO is full!
[ 1208.827761][    C1] rc rc0: IR event FIFO is full!
[ 1208.827776][    C1] rc rc0: IR event FIFO is full!
[ 1208.828430][    C1] rc rc0: IR event FIFO is full!
[ 1208.828450][    C1] rc rc0: IR event FIFO is full!
[ 1208.828467][    C1] rc rc0: IR event FIFO is full!
[ 1208.828480][    C1] rc rc0: IR event FIFO is full!
[ 1208.828915][    C1] rc rc0: IR event FIFO is full!
[ 1208.828933][    C1] rc rc0: IR event FIFO is full!
[ 1208.828946][    C1] rc rc0: IR event FIFO is full!
[ 1208.828959][    C1] rc rc0: IR event FIFO is full!
[ 1208.828973][    C1] rc rc0: IR event FIFO is full!
[ 1208.829204][    C1] rc rc0: IR event FIFO is full!
[ 1208.829221][    C1] rc rc0: IR event FIFO is full!
[ 1208.829531][    C1] rc rc0: IR event FIFO is full!
[ 1208.829818][    C1] rc rc0: IR event FIFO is full!
[ 1208.829833][    C1] rc rc0: IR event FIFO is full!
[ 1208.829845][    C1] rc rc0: IR event FIFO is full!
[ 1208.829859][    C1] rc rc0: IR event FIFO is full!
[ 1208.829872][    C1] rc rc0: IR event FIFO is full!
[ 1208.830094][    C1] rc rc0: IR event FIFO is full!
[ 1208.830378][    C1] rc rc0: IR event FIFO is full!
[ 1208.830393][    C1] rc rc0: IR event FIFO is full!
[ 1208.830612][    C1] rc rc0: IR event FIFO is full!
[ 1208.830626][    C1] rc rc0: IR event FIFO is full!
[ 1208.830901][    C1] rc rc0: IR event FIFO is full!
[ 1208.830914][    C1] rc rc0: IR event FIFO is full!
[ 1208.830927][    C1] rc rc0: IR event FIFO is full!
[ 1208.830939][    C1] rc rc0: IR event FIFO is full!
[ 1208.830951][    C1] rc rc0: IR event FIFO is full!
[ 1208.830963][    C1] rc rc0: IR event FIFO is full!
[ 1208.830977][    C1] rc rc0: IR event FIFO is full!
[ 1208.830990][    C1] rc rc0: IR event FIFO is full!
[ 1208.831010][    C1] rc rc0: IR event FIFO is full!
[ 1208.831023][    C1] rc rc0: IR event FIFO is full!
[ 1208.831242][    C1] rc rc0: IR event FIFO is full!
[ 1208.831257][    C1] rc rc0: IR event FIFO is full!
[ 1208.831269][    C1] rc rc0: IR event FIFO is full!
[ 1208.831546][    C1] rc rc0: IR event FIFO is full!
[ 1208.831560][    C1] rc rc0: IR event FIFO is full!
[ 1208.831573][    C1] rc rc0: IR event FIFO is full!
[ 1208.831585][    C1] rc rc0: IR event FIFO is full!
[ 1208.831802][    C1] rc rc0: IR event FIFO is full!
[ 1208.831815][    C1] rc rc0: IR event FIFO is full!
[ 1208.831828][    C1] rc rc0: IR event FIFO is full!
[ 1208.831843][    C1] rc rc0: IR event FIFO is full!
[ 1208.832064][    C1] rc rc0: IR event FIFO is full!
[ 1208.832076][    C1] rc rc0: IR event FIFO is full!
[ 1208.832090][    C1] rc rc0: IR event FIFO is full!
[ 1208.832102][    C1] rc rc0: IR event FIFO is full!
[ 1208.832115][    C1] rc rc0: IR event FIFO is full!
[ 1208.832129][    C1] rc rc0: IR event FIFO is full!
[ 1208.832141][    C1] rc rc0: IR event FIFO is full!
[ 1208.832161][    C1] rc rc0: IR event FIFO is full!
[ 1208.832376][    C1] rc rc0: IR event FIFO is full!
[ 1208.832389][    C1] rc rc0: IR event FIFO is full!
[ 1208.832402][    C1] rc rc0: IR event FIFO is full!
[ 1208.832420][    C1] rc rc0: IR event FIFO is full!
[ 1208.832433][    C1] rc rc0: IR event FIFO is full!
[ 1208.832445][    C1] rc rc0: IR event FIFO is full!
[ 1208.832458][    C1] rc rc0: IR event FIFO is full!
[ 1208.833049][    C1] rc rc0: IR event FIFO is full!
[ 1208.833064][    C1] rc rc0: IR event FIFO is full!
[ 1208.833077][    C1] rc rc0: IR event FIFO is full!
[ 1208.837159][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.866107][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.907579][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.919577][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.954384][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1208.979518][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1209.009478][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1209.029544][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1209.049511][ T9797] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1209.072307][ T9797] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1209.072331][ T9797] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1209.077264][ T9797] usb 8-1: USB disconnect, device number 10
[ 1212.579451][ T9731] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1212.732987][ T9731] usb 8-1: Using ep0 maxpacket: 16
[ 1212.735652][ T9731] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1212.735706][ T9731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1212.735733][ T9731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1212.735754][ T9731] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1212.735775][ T9731] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1212.737126][ T9731] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1212.737152][ T9731] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1212.737171][ T9731] usb 8-1: Manufacturer: syz
[ 1212.851696][ T9731] usb 8-1: config 0 descriptor??
[ 1213.234754][T16821] sctp: [Deprecated]: syz.3.3221 (pid 16821) Use of int in max_burst socket option.
[ 1213.234754][T16821] Use struct sctp_assoc_value instead
[ 1213.424063][ T9731] rc_core: IR keymap rc-hauppauge not found
[ 1213.424075][ T9731] Registered IR keymap rc-empty
[ 1213.424163][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.439529][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.460998][ T9731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1213.463944][ T9731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input19
[ 1213.469678][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.489536][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.509516][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.542656][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.559575][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.579543][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.599525][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.629504][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.659550][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.679531][ T9731] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1213.701466][ T9731] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1213.701481][ T9731] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1213.721421][ T9731] usb 8-1: USB disconnect, device number 11
[ 1215.015014][T16863] sctp: [Deprecated]: syz.7.3235 (pid 16863) Use of int in max_burst socket option.
[ 1215.015014][T16863] Use struct sctp_assoc_value instead
[ 1216.346080][T16900] sctp: [Deprecated]: syz.0.3247 (pid 16900) Use of int in max_burst socket option.
[ 1216.346080][T16900] Use struct sctp_assoc_value instead
[ 1217.806759][   T49] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 1217.807162][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1218.423715][T16948] sctp: [Deprecated]: syz.7.3261 (pid 16948) Use of int in max_burst socket option.
[ 1218.423715][T16948] Use struct sctp_assoc_value instead
[ 1220.191692][ T5810] Bluetooth: hci1: command 0x1003 tx timeout
[ 1220.193508][ T5805] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1222.370678][T16986] binder: 16981:16986 ioctl c0306201 2000000003c0 returned -14
[ 1222.837707][ T5810] Bluetooth: hci3: command 0x0406 tx timeout
[ 1229.953029][T17069] netlink: 568 bytes leftover after parsing attributes in process `syz.3.3295'.
[ 1230.991920][ T9797] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[ 1233.212220][ T9797] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1233.212260][ T9797] usb 8-1: can't read configurations, error -71
[ 1233.348179][T17107] netlink: 568 bytes leftover after parsing attributes in process `syz.3.3307'.
[ 1236.592851][T17139] capability: warning: `syz.0.3315' uses deprecated v2 capabilities in a way that may be insecure
[ 1237.145182][T17149] gfs2: gfs2 mount does not exist
[ 1237.260194][T17154] overlay: Unknown parameter '/'
[ 1242.900021][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805f430400: rx timeout, send abort
[ 1243.400101][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805f430400: abort rx timeout. Force session deactivation
[ 1243.400236][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025240000: rx timeout, send abort
[ 1243.900331][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025240000: abort rx timeout. Force session deactivation
[ 1243.952193][T17279] ptrace attach of "./syz-executor exec"[12468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1245.257083][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1245.257154][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.847864][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032f86400: rx timeout, send abort
[ 1246.408366][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032f84400: rx timeout, send abort
[ 1246.408396][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032f86400: abort rx timeout. Force session deactivation
[ 1246.908457][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032f84400: abort rx timeout. Force session deactivation
[ 1248.760464][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024aebc00: rx timeout, send abort
[ 1249.251360][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024ae9c00: rx timeout, send abort
[ 1249.260577][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024aebc00: abort rx timeout. Force session deactivation
[ 1249.751696][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024ae9c00: abort rx timeout. Force session deactivation
[ 1251.525203][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'.
[ 1251.525281][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3391'.
[ 1253.129469][ T9731] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1253.289429][ T9731] usb 4-1: Using ep0 maxpacket: 8
[ 1253.294738][ T9731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1253.294762][ T9731] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1253.294795][ T9731] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1253.294817][ T9731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.306145][ T9731] usb 4-1: config 0 descriptor??
[ 1253.526785][ T6131] usb 4-1: USB disconnect, device number 54
[ 1254.355823][ T5805] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[ 1255.667781][T17512] binder: 17509:17512 ioctl 4018620d 0 returned -22
[ 1255.829441][  T993] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1255.989419][  T993] usb 5-1: Using ep0 maxpacket: 16
[ 1255.991465][  T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1255.991518][  T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1255.991544][  T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1255.991566][  T993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1255.991588][  T993] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1255.992828][  T993] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1255.992852][  T993] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1255.992871][  T993] usb 5-1: Manufacturer: syz
[ 1255.997813][  T993] usb 5-1: config 0 descriptor??
[ 1256.479413][  T993] rc_core: IR keymap rc-hauppauge not found
[ 1256.479433][  T993] Registered IR keymap rc-empty
[ 1256.479575][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.499480][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.521131][  T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1256.524222][  T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[ 1256.599066][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.619579][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.639490][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.669797][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.689676][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.709506][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.729491][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.759497][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.779740][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.799513][  T993] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1256.822263][  T993] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1256.822288][  T993] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1256.915260][  T993] usb 5-1: USB disconnect, device number 26
[ 1258.969423][  T993] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 1260.144157][ T7888] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1260.195013][ T1543] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1261.180895][  T993] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1261.180933][  T993] usb 5-1: can't read configurations, error -71
[ 1261.835424][T17594] Bluetooth: hci3: unexpected event for opcode 0x0c20
[ 1262.425507][T17594] Bluetooth: hci1: command 0x1003 tx timeout
[ 1262.425815][ T5805] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1263.751284][ T5805] Bluetooth: hci2: command 0x0406 tx timeout
[ 1265.873193][T17634] syz.7.3454 (17634) used greatest stack depth: 18056 bytes left
[ 1267.637612][T17590] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[ 1268.208538][T17692] overlayfs: failed to resolve './file0': -2
[ 1277.439481][ T5887] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[ 1278.381128][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1278.381167][ T5887] usb 5-1: can't read configurations, error -71
[ 1279.608199][T17590] Bluetooth: hci5: unexpected event for opcode 0x0c20
[ 1289.999409][ T5804] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1290.175340][ T5804] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.175369][ T5804] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1290.175403][ T5804] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1290.175472][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.181481][ T5804] usb 8-1: config 0 descriptor??
[ 1290.440320][ T5886] usb 8-1: USB disconnect, device number 14
[ 1298.570370][ T5805]  1024-page vmalloc region starting at 0xffffc900165fd000 allocated at kcov_ioctl+0x58/0x640
[ 1298.570457][ T5805] list_del corruption. next->prev should be ffffc9001ca0f000, but was 0000000000000000. (next=ffffc900165fe000)
[ 1298.570956][ T5805] ------------[ cut here ]------------
[ 1298.570965][ T5805] kernel BUG at lib/list_debug.c:67!
[ 1298.570997][ T5805] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1298.571020][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1298.571045][ T5805] Tainted: [L]=SOFTLOCKUP
[ 1298.571052][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1298.571064][ T5805] Workqueue: hci1 hci_rx_work
[ 1298.571092][ T5805] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190
[ 1298.571228][ T5805] Code: 6c c9 61 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d 01 83 fd 49 8b 56 08 48 c7 c7 40 4d a6 8b 48 89 de 4c 89 f1 e8 07 02 80 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1298.571245][ T5805] RSP: 0018:ffffc900047dfa00 EFLAGS: 00010246
[ 1298.571260][ T5805] RAX: 000000000000006d RBX: ffffc9001ca0f000 RCX: 34f6807afbc2ec00
[ 1298.571274][ T5805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1298.571285][ T5805] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000
[ 1298.571296][ T5805] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92002cbfc01
[ 1298.571310][ T5805] R13: dffffc0000000000 R14: ffffc900165fe000 R15: ffffc900165fe008
[ 1298.571324][ T5805] FS:  0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000
[ 1298.571339][ T5805] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1298.571351][ T5805] CR2: 00007fc1be2f7e9c CR3: 000000005fc42000 CR4: 00000000003526f0
[ 1298.571368][ T5805] Call Trace:
[ 1298.571375][ T5805]  <TASK>
[ 1298.571384][ T5805]  kcov_remote_start+0x2af/0x710
[ 1298.571407][ T5805]  hci_rx_work+0x10f/0x1030
[ 1298.571433][ T5805]  ? process_scheduled_works+0xa25/0x1830
[ 1298.571460][ T5805]  process_scheduled_works+0xb02/0x1830
[ 1298.571494][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1298.571521][ T5805]  ? assign_work+0x3d5/0x5e0
[ 1298.571546][ T5805]  worker_thread+0xa50/0xfc0
[ 1298.571582][ T5805]  kthread+0x388/0x470
[ 1298.571600][ T5805]  ? __pfx_worker_thread+0x10/0x10
[ 1298.571621][ T5805]  ? __pfx_kthread+0x10/0x10
[ 1298.571637][ T5805]  ret_from_fork+0x51e/0xb90
[ 1298.571661][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[ 1298.571683][ T5805]  ? __switch_to+0xc7d/0x1450
[ 1298.571705][ T5805]  ? __pfx_kthread+0x10/0x10
[ 1298.571721][ T5805]  ret_from_fork_asm+0x1a/0x30
[ 1298.571743][ T5805]  </TASK>
[ 1298.571755][ T5805] Modules linked in:
[ 1298.571776][ T5805] ---[ end trace 0000000000000000 ]---
[ 1298.571796][ T5805] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190
[ 1298.571826][ T5805] Code: 6c c9 61 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d 01 83 fd 49 8b 56 08 48 c7 c7 40 4d a6 8b 48 89 de 4c 89 f1 e8 07 02 80 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1298.571842][ T5805] RSP: 0018:ffffc900047dfa00 EFLAGS: 00010246
[ 1298.571865][ T5805] RAX: 000000000000006d RBX: ffffc9001ca0f000 RCX: 34f6807afbc2ec00
[ 1298.571878][ T5805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1298.571889][ T5805] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000
[ 1298.571900][ T5805] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92002cbfc01
[ 1298.571914][ T5805] R13: dffffc0000000000 R14: ffffc900165fe000 R15: ffffc900165fe008
[ 1298.571927][ T5805] FS:  0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000
[ 1298.571941][ T5805] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1298.571953][ T5805] CR2: 00007fc1be2f7e9c CR3: 000000005fc42000 CR4: 00000000003526f0
[ 1298.571975][ T5805] Kernel panic - not syncing: Fatal exception
[ 1298.572473][ T5805] Kernel Offset: disabled