last executing test programs:

15m15.724060073s ago: executing program 32 (id=388):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15m9.266777357s ago: executing program 33 (id=387):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0)
ioctl$UI_DEV_DESTROY(r6, 0x5502)

15m9.198958626s ago: executing program 34 (id=383):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0)
ioctl$UI_DEV_DESTROY(r6, 0x5502)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

15m9.127742794s ago: executing program 35 (id=385):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)}, {&(0x7f0000000440)="9c74dfbf775728", 0x7}], 0x2)

15m8.972745073s ago: executing program 36 (id=386):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000002b80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)='@', 0x1}], 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="1400000084000000050000002000000000faffffffffffffff00000002000000000002000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x40)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000002c0)={0x0, @frame_sync})
socket(0x34, 0x3, 0x5)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

15m8.758093567s ago: executing program 37 (id=380):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x24, 0x1, 0x8, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, <r0=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0x2c, 0x10, 0x0, @void, @value, @void, @void, r0}, 0x20)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fbdbdf25000000000c00a60007"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4802)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)

8m38.361723731s ago: executing program 38 (id=1177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)

7m55.157582829s ago: executing program 39 (id=1253):
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)

6m24.849173724s ago: executing program 0 (id=1403):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@usrjquota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@grpid}, {@oldalloc}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
truncate(0x0, 0x3000000)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
r0 = io_uring_setup(0x7d5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3})
close_range(r0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69)

6m24.502078156s ago: executing program 0 (id=1405):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000140)=<r2=>0x0)
clock_gettime(0x0, 0x0)
timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}}, 0x0)
timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x6, 0xf989, "62be"}]}}}}}}}, 0x0)

6m23.79104506s ago: executing program 0 (id=1407):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))

6m20.847561432s ago: executing program 9 (id=1412):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x80002dec, 0x2322, 0x2f, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
splice(r6, 0x0, r5, 0x0, 0x7ffff041, 0x1200000000000008)

6m18.53595009s ago: executing program 0 (id=1418):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x400}}, 0x10)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x6, 0xf989, "62be"}]}}}}}}}, 0x0)

6m9.907269455s ago: executing program 0 (id=1419):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x0)
fadvise64(r0, 0x1, 0x94, 0x0)
connect$ax25(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(r1, 0x0, 0x0)

6m8.306354226s ago: executing program 9 (id=1420):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

6m4.029830297s ago: executing program 40 (id=1415):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x94, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x433}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xec3}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)

6m3.802933764s ago: executing program 41 (id=1416):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x880)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
dup2(r5, r5)

6m3.145806163s ago: executing program 42 (id=1417):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffff800, 0xb1, 0xf, 0x0, 0x6, 0x800, 0x1af1}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0x20)
sendmsg$rds(r9, &(0x7f0000001400)={&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001080)=""/193, 0xc1}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000001180)=""/205, 0xcd}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000001280)=""/73, 0x49}], 0x6, &(0x7f0000001380)=[@cswp={0x58, 0x114, 0x7, {{0x3, 0x274}, &(0x7f0000000340)=0xf, &(0x7f00000003c0)=0x401, 0x2, 0x6e0, 0x18, 0x8000, 0x52, 0x2}}], 0x58, 0x4000}, 0x4000804)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r8, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054)
socket$nl_route(0x10, 0x3, 0x0)

6m1.508497811s ago: executing program 0 (id=1424):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10})
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

6m0.117077791s ago: executing program 9 (id=1425):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a310000000009000100"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

5m53.812585756s ago: executing program 9 (id=1426):
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-512-generic)\x00'}, 0x58)

5m52.391296108s ago: executing program 9 (id=1427):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r1, &(0x7f0000000040)="cb", 0xfffffdef)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

5m50.405685094s ago: executing program 9 (id=1428):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r0=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="925c91d8", 0x4, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000300)={r7})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, 0xffffffffffffffff, 0x0, r8})
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r9, 0x0, 0x0)
unshare(0x40020000)

5m45.682905547s ago: executing program 43 (id=1424):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10})
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

5m33.863954175s ago: executing program 44 (id=1428):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r0=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="925c91d8", 0x4, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000300)={r7})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, 0xffffffffffffffff, 0x0, r8})
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r9, 0x0, 0x0)
unshare(0x40020000)

4m25.69807805s ago: executing program 2 (id=1489):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r0, &(0x7f0000003b80)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)

4m25.223301816s ago: executing program 2 (id=1491):
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
socket$kcm(0xa, 0x1, 0x106)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a)
mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f0000000280)='./file2\x00', 0x4, &(0x7f0000000180)=ANY=[], 0x2, 0x1b8, &(0x7f0000000880)="$eJzsVc0K00AQ/ibZJo0H74rgQdH20DaNP1c9SR/AB7C0sRZT1KagLR7iqe8hQl/Dg/gAXjwoXupBBA96E5GVzc6mSVsQf7BF9oN0vvlmNzO728zeSR+kPoDvDga4jhwuTuINEQSAs6S1G762Hz1t2+x/ENo2WX/K9i3bdL6420+SeLqXyAZQVVxsKz8nhrXwS9P+I6IOg/aEMvzTMl762DmCDMDB9+c4CBjVEJy/lsL7jY8nOPi2lAiJiuL/6Qs37rUnDj7lvez158cDRW4BkFJKpQ31Q+UxqhO90GMCpZ0W+UMuZDFGNT/lXATw7dnkfiedL1rjSX8Uj2KKoktXw8theCXq3B4ncah/qZTC4T+Esk0A6jMOSvEagHfcYE9gF6Z8jlOwVb5B49yGE+czcyUTwvNiLvd2qHfcxAXUATzMaKOawpEvqQeCC5E7XVHKo9dWzwPtwb1kuASBeGS4goBjpq1RK5yocERluUvglCrtPPs9tiu2a7bmzjJ3kVA9CO/Za2SAh0f92WzaVZJmuWZq1lr06qvk3XE46xevurgz/p5TsbCwsLCwsLA4avwIAAD//+jHVFc=")

4m24.007825696s ago: executing program 2 (id=1495):
ptrace(0x10, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, <r1=>0x0})
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)=r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0)
semget$private(0x0, 0x1, 0x398)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x40}}, 0x0)

4m21.14533366s ago: executing program 2 (id=1503):
ptrace(0x10, 0x0)
r0 = socket(0x10, 0x3, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, <r1=>0x0})
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)=r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0)
semget$private(0x0, 0x1, 0x398)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280080001", @ANYRES32=r2], 0x40}}, 0x0)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140))
r5 = io_uring_setup(0x3403, &(0x7f0000000240)={0x0, 0xfbe4, 0x400, 0x1, 0x3b2, 0x0, r4})
r6 = syz_io_uring_setup(0x8d5, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r5}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @remote, 0x4}, 0x1c)
r8 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
io_uring_enter(r8, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r10, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

4m19.105853872s ago: executing program 2 (id=1509):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfa}, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
mbind(&(0x7f00006e6000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000340)=0xa9, 0xffff, 0x5)

4m17.495848522s ago: executing program 2 (id=1514):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000600)="5cf3", 0x2, 0x3b00, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

4m2.095397865s ago: executing program 45 (id=1514):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000600)="5cf3", 0x2, 0x3b00, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m11.133925264s ago: executing program 8 (id=1979):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m10.763964135s ago: executing program 8 (id=1980):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0)

1m8.811848504s ago: executing program 8 (id=1990):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$alg(0x26, 0x5, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a0000004001000000"], 0x80}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0)

1m7.393122837s ago: executing program 8 (id=1992):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003040900000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x4, 0x83, {0x83, 0x1, "1d1bab8e59bff355b948d583c6f2bf866552c1b3385d9b4f90a393c50f725c4290f4ad9e239212dc1b5258907604231dad3cac154ff6213deed0e15b142887134c9097be4230a7c238e62e70a3ed81a8194dc1e54352b29998cc174ce154363bdc51aa5d27f1d8b051c0c406a1365e2c29c619d011dcf023014169f21a9223df58"}}, 0x0}, 0x0)

1m3.842280284s ago: executing program 8 (id=2004):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r1, 0xffffffffffffffff, 0x0)

59.492554725s ago: executing program 8 (id=2018):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
cachestat(r2, &(0x7f0000000180)={0xe6af}, &(0x7f0000002280), 0x0)

44.296396465s ago: executing program 46 (id=2018):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
cachestat(r2, &(0x7f0000000180)={0xe6af}, &(0x7f0000002280), 0x0)

19.569701036s ago: executing program 4 (id=2108):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
unlink(0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}})
r6 = syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000380)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0)

19.143344533s ago: executing program 5 (id=2110):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000340)=[0x2a, 0x7])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000200)=[0xa9c7, 0xff])

17.343940436s ago: executing program 1 (id=2117):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @quote}], 0x1c)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0))

17.100706954s ago: executing program 1 (id=2119):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
pread64(r0, &(0x7f0000002440)=""/68, 0x44, 0x5)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="bb", 0x1}], 0x1)

15.528522484s ago: executing program 5 (id=2125):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="05000000000000397c049d00000008000300", @ANYBLOB="33010e0080"], 0x21c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

15.484601345s ago: executing program 7 (id=2126):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x0)
io_setup(0x30, &(0x7f0000000600)=<r0=>0x0)
pipe2$9p(&(0x7f00000000c0), 0x4000)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}])

15.16216493s ago: executing program 4 (id=2129):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x18000400, "54382f86ed8e5e11989357d93d9ad9de68cd68ed8afe9fee3218eb200de45a17"})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_io_uring_setup(0x98b, 0x0, 0x0, &(0x7f0000000000))
io_uring_enter(0xffffffffffffffff, 0x22e6, 0xf62e, 0x71, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ptrace$pokeuser(0x6, r4, 0x2, 0x1)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtaction={0x3f8, 0x30, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{0x4}, {0x250, 0x1, [@m_ipt={0x1f0, 0x1f, 0x0, 0x0, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xb4, 0x6, {0x61, 'mangle\x00', 0x8, 0x4c, "17f61b06437265f1ca6f3c93c5918cc8eb19a1ddfb1c87f7c31b3501108a1bd1873a7da5613c96886021fdc09695540672296f4e1dd0bb43b5eecf35e4e662c80d267c0d81a3f1fbb956f626b38091bf4fc14f9eef7b32a904002964fef1e28f264482db280d5f741d1c8a1367aa1275128ab0e0cb402060e855a11fd4352e566a109e84ff5371043ed4"}}, @TCA_IPT_TARG={0xbf, 0x6, {0x2, 'filter\x00', 0xef, 0xf92, "6e68c246babc9283ee52776695d3e7bc41808d3d713e8b7f5abf998eb460426bc919a83889c0772e74944ce07d2959ed6a1bd0e9a2fc78a1c2fa66fa11f769275acd7194e6e1db14f1dadb493e010e9b44b1f2cb60dd80fad732a9d2d5975bfcb4c1f22035ab2fb7617885ae73d7e81d4ce879009967991e92c31d6c56536a2d06df41e2ecbeba4f042901a3ff2cc3376e197270fe"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x24, 0x6, "d8f1a7b64b1afcf41d582ec490fb3cb62406f1b468f4d6900e15bf8e849f4d0c"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x4}, {0x4}, {0x124, 0x1, [@m_ipt={0x120, 0x1a, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x0, 'raw\x00', 0x9, 0xb0}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x9, 'raw\x00', 0x4, 0x4}}, @TCA_IPT_TARG={0x2a, 0x6, {0xc1, 'security\x00', 0x46, 0x25}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x45, 0x6, "8dd0efb145b2295bb8a703b614ad744805937e709be4dd1313b800403ac64d7629a1a3e4f4969f27939b766d700613424686188710f9a7a92315664a1bc0b6feae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x64, 0x1, [@m_ipt={0x60, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x36, 0x6, "3d1ddde3f877e78565e10fabcdcd59ab1b52d41f21c87201f4f0ffeda46d71437d1ff7f2a60a839db719ba606960ebcdbcc1"}, {0xc}, {0xc}}}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

15.139158855s ago: executing program 7 (id=2130):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6(0xa, 0x3, 0x80000000)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3})

14.787885182s ago: executing program 5 (id=2131):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe}, 0x1c)
sendmmsg$inet6(r1, &(0x7f000000a400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000100)='a', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x1c, &(0x7f00000037c0)=[{&(0x7f00000025c0)="ffa99238e6", 0xffffffffffffffaf}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
read(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x4})
fsmount(r0, 0x0, 0x1)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0)

14.548665143s ago: executing program 3 (id=2132):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2)
truncate(0x0, 0x5)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)
sendmsg$nl_route(r1, 0x0, 0x240cc810)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size'])
fallocate(0xffffffffffffffff, 0x3, 0x9, 0x10000)

12.856470129s ago: executing program 7 (id=2133):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a0000004001000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

12.792692193s ago: executing program 1 (id=2134):
r0 = timerfd_create(0x0, 0x0)
r1 = syz_io_uring_setup(0x598d, &(0x7f0000000880)={0x0, 0xdce9, 0x10100, 0x0, 0x104a}, 0x0, &(0x7f0000000240)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1a})
io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0)

12.764708441s ago: executing program 4 (id=2135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58ff90f0", "2a1e833e7af32011"}, 0x38)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0x9, 0x309580)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "f6d0d3f08ab5712f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28)
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x8800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

12.071225733s ago: executing program 7 (id=2136):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
lseek(r5, 0x7, 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = gettid()
r8 = syz_open_procfs(r7, &(0x7f0000000140)='net/udp\x00')
write$apparmor_current(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
sendfile(r10, r10, 0x0, 0x200000)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@expire={0x2b0, 0x18, 0x400, 0x70bd2d, 0x25dfdbfc, {{{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e21, 0x80, 0x4e21, 0x0, 0xa, 0x80, 0xa0, 0x5e}, {@in6=@private2, 0x4d3, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x11426e0b, 0x7, 0xc, 0xfff, 0x7, 0x3, 0x10001, 0xb}, {0x7, 0xb, 0x1, 0xec}, {0xf2e, 0x80, 0x7}, 0x70bd2d, 0x3503, 0xa, 0x3, 0x6, 0x15}, 0x6}, [@replay_esn_val={0x38, 0x17, {0x7, 0x70bd26, 0x70bd2a, 0x70bd2c, 0x70bd27, 0x5, [0x7, 0x9, 0x8000006, 0xe, 0x0, 0x10001, 0x5]}}, @algo_aead={0x134, 0x12, {{'rfc4543(aegis128l-generic)\x00'}, 0x740, 0x80, "53d4f9ffa957bdbf7be40e1ed5a5d11f002cf9ecbccf97fa3fc692705d5a16db18a2411e9e178c002d5df1ddcdec630e4ec319bcc1ce33778b3ecf4354efbd3f3f81151263d1af2d7929deae66fd2a25bbb27f5a34bfa4158e6e2f653fe1f95999fa241fb2ccec2b5024c593a23b7f8860777b8ff0c310d80a8ea6ecfb4f2380356fba8b55cacdb89a574e7bccfbccec3fe3290a7b5a6e4200e6033fbbcc83f1ee47486ba1359a7a6953f6f3f2c79ea1bfbef391b1545867239dfccab8029eb6eaed8516c34a51447ec5cc600a86bd3143d76063aaedb5e5b7d33f2c93d03e555fc135e7cc3daae2"}}, @algo_crypt={0x4b, 0x2, {{'pcbc(blowfish)\x00'}, 0x18, "e8a441"}}]}, 0x2b0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94)
openat$cgroup_type(r8, &(0x7f0000000080), 0x2, 0x0)

11.629185833s ago: executing program 1 (id=2137):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x2, 0x2, 0x5})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x40000007})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4})
dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

11.364532339s ago: executing program 3 (id=2138):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0xecf86c37d53049cc)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d)

11.119187037s ago: executing program 4 (id=2139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x1c57, 0x0, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

10.928008993s ago: executing program 1 (id=2140):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x8a301, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000640)="ce", 0x1}], 0x1)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

9.577834237s ago: executing program 3 (id=2141):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
creat(&(0x7f0000000200)='./bus\x00', 0x84)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x53d0)

9.485001175s ago: executing program 4 (id=2142):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
unlink(0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}})
r6 = syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000380)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0)

8.970779619s ago: executing program 6 (id=2143):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="05000000000000397c049d00000008000300", @ANYBLOB="33010e0080"], 0x21c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

8.882842887s ago: executing program 3 (id=2144):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0)
getpid()
r0 = syz_open_dev$sndpcmp(0x0, 0x3, 0x800)
mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000004, 0x11, r0, 0x83000000)

8.549485686s ago: executing program 5 (id=2145):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6(0xa, 0x3, 0x80000000)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3})

7.437564994s ago: executing program 5 (id=2146):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
pread64(r0, &(0x7f0000002440)=""/68, 0x44, 0x5)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="bb", 0x1}], 0x1)

7.390932869s ago: executing program 6 (id=2147):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x18000400, "54382f86ed8e5e11989357d93d9ad9de68cd68ed8afe9fee3218eb200de45a17"})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_io_uring_setup(0x98b, 0x0, 0x0, &(0x7f0000000000))
io_uring_enter(0xffffffffffffffff, 0x22e6, 0xf62e, 0x71, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ptrace$pokeuser(0x6, r4, 0x2, 0x1)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtaction={0x3f8, 0x30, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{0x4}, {0x250, 0x1, [@m_ipt={0x1f0, 0x1f, 0x0, 0x0, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xb4, 0x6, {0x61, 'mangle\x00', 0x8, 0x4c, "17f61b06437265f1ca6f3c93c5918cc8eb19a1ddfb1c87f7c31b3501108a1bd1873a7da5613c96886021fdc09695540672296f4e1dd0bb43b5eecf35e4e662c80d267c0d81a3f1fbb956f626b38091bf4fc14f9eef7b32a904002964fef1e28f264482db280d5f741d1c8a1367aa1275128ab0e0cb402060e855a11fd4352e566a109e84ff5371043ed4"}}, @TCA_IPT_TARG={0xc0, 0x6, {0x2, 'filter\x00', 0xef, 0xf92, "6e68c246babc9283ee52776695d3e7bc41808d3d713e8b7f5abf998eb460426bc919a83889c0772e74944ce07d2959ed6a1bd0e9a2fc78a1c2fa66fa11f769275acd7194e6e1db14f1dadb493e010e9b44b1f2cb60dd80fad732a9d2d5975bfcb4c1f22035ab2fb7617885ae73d7e81d4ce879009967991e92c31d6c56536a2d06df41e2ecbeba4f042901a3ff2cc3376e197270fefd"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x24, 0x6, "d8f1a7b64b1afcf41d582ec490fb3cb62406f1b468f4d6900e15bf8e849f4d0c"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x4}, {0x4}, {0x124, 0x1, [@m_ipt={0x120, 0x1a, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x0, 'raw\x00', 0x9, 0xb0}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x9, 'raw\x00', 0x4, 0x4}}, @TCA_IPT_TARG={0x2a, 0x6, {0xc1, 'security\x00', 0x46, 0x25}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x45, 0x6, "8dd0efb145b2295bb8a703b614ad744805937e709be4dd1313b800403ac64d7629a1a3e4f4969f27939b766d700613424686188710f9a7a92315664a1bc0b6feae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x64, 0x1, [@m_ipt={0x60, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x36, 0x6, "3d1ddde3f877e78565e10fabcdcd59ab1b52d41f21c87201f4f0ffeda46d71437d1ff7f2a60a839db719ba606960ebcdbcc1"}, {0xc}, {0xc}}}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

6.570953104s ago: executing program 6 (id=2148):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a0000004001000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

6.085981523s ago: executing program 6 (id=2149):
r0 = timerfd_create(0x0, 0x0)
r1 = syz_io_uring_setup(0x598d, &(0x7f0000000880)={0x0, 0xdce9, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1a})
io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0)

5.938811017s ago: executing program 7 (id=2150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512)

5.648189584s ago: executing program 3 (id=2151):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58ff90f0", "2a1e833e7af32011"}, 0x38)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0x9, 0x309580)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "f6d0d3f08ab5712f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28)
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x8800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

5.59242958s ago: executing program 6 (id=2152):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
lseek(r1, 0x1800000, 0x0)
r3 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x401, 0x80000004, 0x24d, 0x10001, 0x9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc)

5.591822628s ago: executing program 7 (id=2153):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000600)="5cf3", 0x2, 0x3b00, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x800})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5.220483301s ago: executing program 1 (id=2154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x1c57, 0x0, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

4.521763764s ago: executing program 5 (id=2155):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfa}, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mbind(&(0x7f00006e6000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000340)=0xa9, 0xffff, 0x5)

4.521138385s ago: executing program 3 (id=2156):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket(0x8000000010, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

1.954961298s ago: executing program 4 (id=2157):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
creat(&(0x7f0000000200)='./bus\x00', 0x84)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x53d0)

0s ago: executing program 6 (id=2158):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @quote}], 0x38)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, 0x0)

kernel console output (not intermixed with test programs):

figured BSSID 50:50:50:50:50:50
[  903.776783][T11581] veth1_vlan: entered promiscuous mode
[  903.794965][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  903.968994][T10177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  904.021697][T10177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  904.062123][T11722] netlink: 'syz.3.1431': attribute type 39 has an invalid length.
[  904.129280][T11722] veth0_macvtap: left promiscuous mode
[  904.281826][T11581] veth0_macvtap: entered promiscuous mode
[  904.323463][T11581] veth1_macvtap: entered promiscuous mode
[  904.421184][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  904.440480][T11579] veth0_vlan: entered promiscuous mode
[  904.459715][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.480773][T11597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.505476][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'.
[  904.546714][T11581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  904.675765][T11579] veth1_vlan: entered promiscuous mode
[  904.782887][T11581] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  904.791884][T11581] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  904.800589][T11581] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  904.814309][T11581] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  904.961430][T11623] veth0_vlan: entered promiscuous mode
[  904.970806][T11579] veth0_macvtap: entered promiscuous mode
[  905.070434][T11739] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  905.077012][T11739] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  905.085923][T11739] vhci_hcd vhci_hcd.0: Device attached
[  905.103157][T11579] veth1_macvtap: entered promiscuous mode
[  905.249935][T11623] veth1_vlan: entered promiscuous mode
[  905.282194][ T5845] vhci_hcd: vhci_device speed not set
[  905.448139][ T5845] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[  905.457208][T11740] vhci_hcd: connection closed
[  905.458536][T11741] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  905.480518][ T6058] vhci_hcd: stop threads
[  905.551248][ T6058] vhci_hcd: release socket
[  905.570563][ T6058] vhci_hcd: disconnect device
[  905.708267][T11579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  905.749575][T11579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  905.982162][T11579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.001184][T11579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.017536][T11579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.033438][T11579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  906.089814][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1433'.
[  906.290090][T11749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  906.346958][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.511191][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.593899][T11752] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1434'.
[  906.732161][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.792095][T11623] veth0_macvtap: entered promiscuous mode
[  906.804163][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.845440][T11597] veth0_vlan: entered promiscuous mode
[  906.919063][T11597] veth1_vlan: entered promiscuous mode
[  907.114704][T11623] veth1_macvtap: entered promiscuous mode
[  907.476629][T11623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  907.640468][T11597] veth0_macvtap: entered promiscuous mode
[  907.706354][T11597] veth1_macvtap: entered promiscuous mode
[  907.729651][T11623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  907.834495][T11623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.889392][T11623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.952919][T11623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.981584][T11623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  908.057696][T11597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  908.186401][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  908.203694][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  908.233261][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  908.249361][T11597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  908.258216][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  908.275071][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  908.315771][T11597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  908.342230][T11597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  908.381748][T11597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  908.440824][T11597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  908.473624][T10928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  908.502926][T10928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  908.512111][T10928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  908.521999][T10928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  908.531699][T10928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  910.372805][ T5855] Bluetooth: hci5: command tx timeout
[  910.581950][ T5845] vhci_hcd: vhci_device speed not set
[  910.602176][ T5855] Bluetooth: hci2: command tx timeout
[  911.161125][   T38] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.749368][T11774] loop5: detected capacity change from 0 to 32768
[  911.935269][T11774] (syz.5.1439,11774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  911.955609][T11774] (syz.5.1439,11774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  911.955786][   T38] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.140670][T11774] JBD2: Ignoring recovery information on journal
[  912.279981][   T38] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.290323][T11774] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  912.389582][T10174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.432357][T10174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.442452][ T5855] Bluetooth: hci5: command tx timeout
[  912.504134][   T38] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.676184][ T5855] Bluetooth: hci2: command tx timeout
[  912.766993][ T6058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.791802][ T6058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.902475][T11576] ocfs2: Unmounting device (7,5) on (node local)
[  912.932559][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.940432][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  913.097540][T11787] netlink: 'syz.3.1441': attribute type 39 has an invalid length.
[  914.348402][T11762] chnl_net:caif_netlink_parms(): no params data found
[  914.389686][T10174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.731690][ T5855] Bluetooth: hci5: command tx timeout
[  914.733425][T10174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  914.751640][ T5855] Bluetooth: hci2: command tx timeout
[  915.393517][T11796] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  915.400100][T11796] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  916.391883][T11796] vhci_hcd vhci_hcd.0: Device attached
[  916.542218][T11792] loop2: detected capacity change from 0 to 32768
[  916.835672][T11794] Set syz1 is full, maxelem 65536 reached
[  916.873346][ T5855] Bluetooth: hci5: command tx timeout
[  916.878818][T10928] Bluetooth: hci2: command tx timeout
[  916.938819][T11799] vhci_hcd: connection closed
[  916.951651][ T5992] vhci_hcd: vhci_device speed not set
[  916.951763][T10174] vhci_hcd: stop threads
[  917.031815][ T5992] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  917.064167][T10174] vhci_hcd: release socket
[  917.092459][T10174] vhci_hcd: disconnect device
[  917.413967][T11758] chnl_net:caif_netlink_parms(): no params data found
[  917.653556][   T38] bridge_slave_1: left allmulticast mode
[  917.706554][   T38] bridge_slave_1: left promiscuous mode
[  917.741914][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.069773][   T38] bridge_slave_0: left allmulticast mode
[  918.106700][   T38] bridge_slave_0: left promiscuous mode
[  918.133914][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.941566][ T6009] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  920.122126][ T6009] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  920.151557][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  920.183746][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  920.198448][ T6009] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  920.215957][ T6009] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  920.319895][ T6009] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  920.331571][ T6009] usb 3-1: Manufacturer: syz
[  920.382754][ T6009] usb 3-1: config 0 descriptor??
[  920.867886][ T6009] rc_core: IR keymap rc-hauppauge not found
[  921.018282][ T6009] Registered IR keymap rc-empty
[  921.028717][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.091843][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.216389][ T6009] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  921.366356][ T6009] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  921.560002][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.610026][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  921.641187][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.651975][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  921.663137][   T38] bond0 (unregistering): Released all slaves
[  921.672064][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.732330][T11838] fuse: Unknown parameter 'grou00000000000000000000'
[  921.740355][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.794730][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.831857][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.851650][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.872339][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.901884][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.921942][ T6009] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  921.952458][ T6009] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  921.981664][ T6009] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  922.001624][ T6009] usb 3-1: USB disconnect, device number 5
[  922.191980][ T5992] vhci_hcd: vhci_device speed not set
[  922.346209][T11762] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.371839][T11762] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.401805][T11762] bridge_slave_0: entered allmulticast mode
[  922.420115][T11762] bridge_slave_0: entered promiscuous mode
[  922.426376][ T6137] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  923.528697][ T6137] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  923.546540][ T6137] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  923.578558][ T6137] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  923.625026][ T6137] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  923.671114][   T38] hsr_slave_0: left promiscuous mode
[  923.681656][ T6137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.702489][   T38] hsr_slave_1: left promiscuous mode
[  923.722252][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  923.729724][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  923.757630][ T6137] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  923.778419][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  923.801626][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  923.891878][ T6137] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12
[  923.971171][T11844] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1455'.
[  923.976818][   T38] veth1_macvtap: left promiscuous mode
[  924.002879][   T38] veth0_macvtap: left promiscuous mode
[  924.008773][   T38] veth1_vlan: left promiscuous mode
[  924.014248][   T38] veth0_vlan: left promiscuous mode
[  926.623456][ T6137] usb 4-1: USB disconnect, device number 3
[  927.277068][   T38] team0 (unregistering): Port device team_slave_1 removed
[  927.359892][   T38] team0 (unregistering): Port device team_slave_0 removed
[  928.166433][T11762] bridge0: port 2(bridge_slave_1) entered blocking state
[  928.174035][T11762] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.184676][T11762] bridge_slave_1: entered allmulticast mode
[  928.213388][T11762] bridge_slave_1: entered promiscuous mode
[  928.365185][T11860] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  928.400014][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'.
[  928.463478][T11860] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  928.525154][T11860] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  928.536785][T11762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  928.692084][T11860] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  928.706993][T11860] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  928.749395][T11860] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  928.749858][T11762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  928.827408][T11860] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  928.862554][T11860] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  928.908838][T11860] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  928.927151][T11758] bridge0: port 1(bridge_slave_0) entered blocking state
[  928.957140][T11758] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.976213][T11758] bridge_slave_0: entered allmulticast mode
[  928.985124][T11860] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  928.991090][T11860] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  929.024601][T11758] bridge_slave_0: entered promiscuous mode
[  929.111237][T11860] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  929.142093][T11860] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  929.170368][T11860] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  929.179429][T11758] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.193038][T11758] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.200287][T11758] bridge_slave_1: entered allmulticast mode
[  929.213396][T11860] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  929.217393][T11758] bridge_slave_1: entered promiscuous mode
[  929.237013][T11860] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  929.246883][T11860] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  929.260628][T11860] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  929.293786][T11762] team0: Port device team_slave_0 added
[  929.591912][T11888] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1467'.
[  929.836838][T11758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  929.848870][T11762] team0: Port device team_slave_1 added
[  929.850608][T11891] loop3: detected capacity change from 0 to 512
[  929.897378][T11758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  929.936136][T11891] EXT4-fs (loop3): orphan cleanup on readonly fs
[  929.985935][T11891] __quota_error: 23 callbacks suppressed
[  929.985955][T11891] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  930.034861][T11891] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  930.121663][T11891] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1468: Failed to acquire dquot type 1
[  930.173365][T11891] EXT4-fs (loop3): 1 truncate cleaned up
[  930.222151][ T5845] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  930.240191][T11891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  930.353039][T11881] loop5: detected capacity change from 0 to 32768
[  930.362507][T10928] Bluetooth: hci0: command 0x0c1a tx timeout
[  930.381617][ T5845] usb 3-1: Using ep0 maxpacket: 16
[  930.392901][ T5845] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  930.393658][T11881] btrfs: Deprecated parameter 'usebackuproot'
[  930.403613][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.426453][ T5845] usb 3-1: Product: syz
[  930.430650][ T5845] usb 3-1: Manufacturer: syz
[  930.446710][ T5845] usb 3-1: SerialNumber: syz
[  930.456853][T11896] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  930.476690][ T5845] usb 3-1: config 0 descriptor??
[  930.491425][ T5845] as10x_usb: device has been detected
[  930.493492][T11881] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  930.499457][ T5845] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  930.518623][T11896] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  930.526732][T11762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.536575][T11881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1465 (11881)
[  930.551450][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  930.605210][T10928] Bluetooth: hci4: command 0x0c1a tx timeout
[  930.617604][T11881] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  930.628181][T11762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.638995][T11881] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  930.649077][T11881] BTRFS info (device loop5): using free-space-tree
[  930.654094][T11762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.712799][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  930.714999][ T5845] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  930.739390][T11762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.774439][T11585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.808699][T11758] team0: Port device team_slave_0 added
[  930.837889][T10928] Bluetooth: hci6: command 0x0c1a tx timeout
[  930.845591][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  930.856140][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  930.874808][T11758] team0: Port device team_slave_1 added
[  930.894360][ T6212] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  930.927671][ T5845] as10x_usb: error during firmware upload part1
[  930.992023][ T5845] Registered device Sky IT Digital Key (green led)
[  930.997621][T11881] BTRFS warning (device loop5): couldn't read tree root
[  931.012935][T11881] BTRFS warning (device loop5): try to load backup roots slot 1
[  931.050378][T10177] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  931.064670][T11758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  931.072573][T10928] Bluetooth: hci3: command 0x0c1a tx timeout
[  931.081227][T11881] BTRFS warning (device loop5): couldn't read tree root
[  931.091615][T11758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  931.117623][T11881] BTRFS warning (device loop5): try to load backup roots slot 2
[  931.130412][T10174] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  931.141692][T11758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  931.152342][T10928] Bluetooth: hci5: command 0x0c1a tx timeout
[  931.159522][T11881] BTRFS warning (device loop5): couldn't read tree root
[  931.167575][T11881] BTRFS warning (device loop5): try to load backup roots slot 3
[  931.206578][T11881] BTRFS info (device loop5): rebuilding free space tree
[  931.321592][T10928] Bluetooth: hci2: command 0x0c1a tx timeout
[  931.350800][T11881] BTRFS info (device loop5): checking UUID tree
[  931.352426][   T38] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.416142][T11758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  931.430091][   T30] audit: type=1800 audit(1752453720.086:1850): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1465" name="bus" dev="loop5" ino=257 res=0 errno=0
[  931.446676][T11758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  931.504830][T11758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  931.588024][   T38] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.640057][T11762] hsr_slave_0: entered promiscuous mode
[  931.648130][T11762] hsr_slave_1: entered promiscuous mode
[  931.660903][T11762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  931.668556][T11762] Cannot create hsr debugfs directory
[  931.687524][T11920] fuse: Bad value for 'fd'
[  931.720541][   T38] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.763892][T11576] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  931.819420][   T38] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.028253][T11758] hsr_slave_0: entered promiscuous mode
[  932.048534][T11758] hsr_slave_1: entered promiscuous mode
[  932.064173][T11758] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  932.080000][T11758] Cannot create hsr debugfs directory
[  932.459513][   T38] bridge_slave_1: left allmulticast mode
[  932.466249][   T38] bridge_slave_1: left promiscuous mode
[  932.478251][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.488641][   T38] bridge_slave_0: left allmulticast mode
[  932.495416][   T38] bridge_slave_0: left promiscuous mode
[  932.501201][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.672772][T10928] Bluetooth: hci4: command 0x0c1a tx timeout
[  932.850803][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  932.865426][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  932.880681][   T38] bond0 (unregistering): Released all slaves
[  932.912750][T10928] Bluetooth: hci0: command 0x0c1a tx timeout
[  932.912780][ T5855] Bluetooth: hci6: command 0x0c1a tx timeout
[  932.919126][T11894] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  932.980935][T11894] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  933.005917][T11894] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  933.030657][T11894] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  933.071078][T11894] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  933.110989][T11894] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  933.196600][ T5947] usb 3-1: USB disconnect, device number 6
[  933.230898][ T5947] Unregistered device Sky IT Digital Key (green led)
[  933.232638][ T5947] as10x_usb: device has been disconnected
[  935.021597][T10928] Bluetooth: hci0: command 0x0c1a tx timeout
[  935.151797][T10928] Bluetooth: hci5: command 0x0c1a tx timeout
[  935.157892][T10928] Bluetooth: hci3: command 0x0c1a tx timeout
[  935.163966][ T5855] Bluetooth: hci6: command 0x0c1a tx timeout
[  935.169987][ T5855] Bluetooth: hci4: command 0x0c1a tx timeout
[  935.178766][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout
[  936.439849][T11941] loop3: detected capacity change from 0 to 8
[  937.442110][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  937.448281][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout
[  937.454729][ T5855] Bluetooth: hci5: command 0x0c1a tx timeout
[  939.290944][T11926] Set syz1 is full, maxelem 65536 reached
[  940.073162][   T38] hsr_slave_0: left promiscuous mode
[  940.084589][ T5946] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  940.122495][   T38] hsr_slave_1: left promiscuous mode
[  940.149728][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  940.169416][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  940.258597][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  940.284745][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  940.364367][ T5946] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  940.384780][ T5946] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  940.401625][ T5946] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  940.413879][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.439527][T11944] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  940.460136][ T5946] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  940.468573][   T38] veth1_macvtap: left promiscuous mode
[  940.474289][   T38] veth0_macvtap: left promiscuous mode
[  940.491309][   T38] veth1_vlan: left promiscuous mode
[  940.515667][   T38] veth0_vlan: left promiscuous mode
[  943.306040][ T5946] usb 3-1: USB disconnect, device number 7
[  943.654773][T11963] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1486'.
[  943.823193][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1487'.
[  945.094464][T11980] overlayfs: overlapping lowerdir path
[  946.363734][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1495'.
[  946.625759][   T38] team0 (unregistering): Port device team_slave_1 removed
[  946.955083][   T38] team0 (unregistering): Port device team_slave_0 removed
[  947.869007][T11999] loop3: detected capacity change from 0 to 32768
[  947.887831][T11999] (syz.3.1497,11999,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  947.910621][T11999] (syz.3.1497,11999,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  947.992196][T11999] JBD2: Ignoring recovery information on journal
[  948.114134][T11999] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  948.509669][T11585] ocfs2: Unmounting device (7,3) on (node local)
[  948.745774][T11994] netlink: 'syz.6.1494': attribute type 12 has an invalid length.
[  948.914862][T12012] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1500'.
[  949.040029][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'.
[  950.073832][T12040] loop5: detected capacity change from 0 to 8
[  951.009558][T11758] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  951.079102][T11758] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  951.700548][T11758] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  951.771660][T11758] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  951.887691][T11762] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  951.951423][T11762] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  952.166413][T11762] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  952.181547][ T5992] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  952.222633][T11762] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  952.367396][ T5992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  952.409823][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  952.452811][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  952.491552][ T5992] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  952.548057][ T5992] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  952.578079][ T5992] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  952.603415][ T5992] usb 4-1: Manufacturer: syz
[  952.641758][ T5992] usb 4-1: config 0 descriptor??
[  952.707683][T11758] 8021q: adding VLAN 0 to HW filter on device bond0
[  952.863483][T11762] 8021q: adding VLAN 0 to HW filter on device bond0
[  953.140545][T11758] 8021q: adding VLAN 0 to HW filter on device team0
[  953.231132][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1515'.
[  953.283787][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.290924][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  953.381801][ T5992] rc_core: IR keymap rc-hauppauge not found
[  953.390912][ T5992] Registered IR keymap rc-empty
[  953.398441][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.442029][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.455923][T11762] 8021q: adding VLAN 0 to HW filter on device team0
[  953.493129][ T5992] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  953.609762][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.617005][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  953.627223][ T5992] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  953.644425][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.676132][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.701833][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.714960][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.722193][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state
[  953.731708][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.781661][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.806956][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.862859][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  953.899507][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.906693][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  953.981628][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  954.011832][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  954.061702][ T5992] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  954.113854][ T5992] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  954.127262][ T5992] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  954.168713][ T5992] usb 4-1: USB disconnect, device number 4
[  954.321777][T11762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  954.352668][T11762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  954.742728][ T5845] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  954.961709][ T5845] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  955.000479][ T5845] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  955.028473][ T5845] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  955.073946][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.113714][T12085] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  955.128739][ T5845] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  957.989698][T11689] usb 7-1: USB disconnect, device number 4
[  958.019955][T11762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  958.053663][T11758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  959.329609][T11689] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  959.398976][T11762] veth0_vlan: entered promiscuous mode
[  959.718385][T11762] veth1_vlan: entered promiscuous mode
[  959.733587][T11689] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  959.744771][T11689] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  959.818431][T11758] veth0_vlan: entered promiscuous mode
[  959.834612][T11689] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  959.846624][T11689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.878275][T11689] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  959.885981][T11689] usb 4-1: invalid MIDI out EP 0
[  960.089270][T12127] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1524'.
[  960.106396][T11762] veth0_macvtap: entered promiscuous mode
[  960.118978][T11758] veth1_vlan: entered promiscuous mode
[  960.143172][T11689] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  960.154383][T11689] usb 4-1: USB disconnect, device number 5
[  960.244410][T11762] veth1_macvtap: entered promiscuous mode
[  960.339098][T11762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  960.375368][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  960.420371][T11762] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  960.498220][T11762] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.512115][T11762] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.539477][T11762] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.564348][T11758] veth0_macvtap: entered promiscuous mode
[  960.623461][T11758] veth1_macvtap: entered promiscuous mode
[  961.038505][T11758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  961.185318][T11758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  961.906484][T12144] netlink: 'syz.3.1527': attribute type 12 has an invalid length.
[  962.064518][T11758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  962.111262][T11758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  962.141690][T11758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  962.150436][T11758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  962.235833][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.251640][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.537229][T12155] autofs: Bad value for 'fd'
[  962.665354][T10174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.699695][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.741142][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.741155][T10174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.786829][T12156] loop6: detected capacity change from 0 to 24
[  962.817040][T12156] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  962.906464][T12156] romfs: bad initial checksum on dev loop6.
[  963.020678][T12156] loop6: detected capacity change from 0 to 1024
[  963.081988][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  963.089863][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.341636][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  967.471387][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.511370][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  967.552392][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  967.581699][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.651639][   T10] usb 7-1: config 0 descriptor??
[  968.111598][   T10] usb 7-1: string descriptor 0 read error: -71
[  968.160006][   T10] usb 7-1: USB disconnect, device number 5
[  972.698412][T12230] fuse: Unknown parameter 'user_id00000000000000000000'
[  973.094276][T12237] netlink: 'syz.5.1553': attribute type 12 has an invalid length.
[  973.272102][T11942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  973.303110][T11942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  973.316601][T11942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  973.328338][T11942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  973.337130][T11942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  973.988775][T12245] loop8: detected capacity change from 0 to 512
[  974.169964][T12245] EXT4-fs (loop8): orphan cleanup on readonly fs
[  974.252184][T12245] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  974.272309][T12245] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  974.291794][T12245] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1556: Failed to acquire dquot type 1
[  974.331587][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  974.525238][T12245] EXT4-fs (loop8): 1 truncate cleaned up
[  974.533355][T12245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  974.678156][   T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  974.738208][T12236] chnl_net:caif_netlink_parms(): no params data found
[  974.760611][   T10] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  974.795103][T12258] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  974.826671][T12258] EXT4-fs warning (device loop8): read_mmp_block:115: Error -117 while reading MMP block 8
[  974.904529][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  974.928082][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.978887][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  974.987144][   T10] usb 5-1: invalid MIDI out EP 0
[  975.058929][   T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  975.156163][T12247] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1558'.
[  975.263747][T11762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  975.384754][T12266] input: syz1 as /devices/virtual/input/input9
[  975.392984][ T5852] Bluetooth: hci1: command tx timeout
[  975.405393][ T5947] usb 5-1: USB disconnect, device number 4
[  975.663429][T12236] bridge0: port 1(bridge_slave_0) entered blocking state
[  975.702930][T12236] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.710272][T12236] bridge_slave_0: entered allmulticast mode
[  975.758344][T12236] bridge_slave_0: entered promiscuous mode
[  975.795660][T12236] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.829181][T12236] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.862045][T12236] bridge_slave_1: entered allmulticast mode
[  975.890432][T12236] bridge_slave_1: entered promiscuous mode
[  976.231546][ T5992] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  976.393197][T12236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  976.498363][T12236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  976.571799][ T5992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  976.831641][ T5992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  976.845812][ T5992] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  976.855666][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.639248][ T5852] Bluetooth: hci1: command tx timeout
[  977.726021][ T5992] usb 7-1: config 0 descriptor??
[  978.701242][T12236] team0: Port device team_slave_0 added
[  978.755493][T12236] team0: Port device team_slave_1 added
[  979.232479][ T6009] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  979.348901][T12302] autofs: Bad value for 'fd'
[  979.470856][ T6009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.571569][ T6009] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  979.580536][ T6009] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  979.593333][T12236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.611241][T12069] Set syz1 is full, maxelem 65536 reached
[  979.653302][T12236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.722973][ T5852] Bluetooth: hci1: command tx timeout
[  979.761754][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.788608][ T6009] usb 6-1: config 0 descriptor??
[  979.850659][ T6009] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  979.900001][ T6009] dvb-usb: bulk message failed: -22 (3/0)
[  979.906562][T12236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  979.995657][T12236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  980.004072][ T6009] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  980.114678][T12300] netlink: 'syz.5.1567': attribute type 13 has an invalid length.
[  980.131673][T12236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  980.132576][ T6009] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  980.494884][T12236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  980.687486][ T6009] usb 6-1: media controller created
[  980.907102][T12300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  980.973685][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  981.094072][ T6009] dvb-usb: bulk message failed: -22 (6/0)
[  981.318708][ T6009] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  981.387582][ T6009] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10
[  981.701843][ T6009] dvb-usb: schedule remote query interval to 150 msecs.
[  981.708846][ T6009] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  981.758758][T12236] hsr_slave_0: entered promiscuous mode
[  981.792588][ T5852] Bluetooth: hci1: command tx timeout
[  981.867819][T12236] hsr_slave_1: entered promiscuous mode
[  981.992185][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  981.998145][ T6137] dvb-usb: error while querying for an remote control event.
[  982.002718][T12236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  982.089762][T12236] Cannot create hsr debugfs directory
[  982.271911][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  982.277713][ T6137] dvb-usb: error while querying for an remote control event.
[  982.481953][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  982.519111][ T6137] dvb-usb: error while querying for an remote control event.
[  982.721560][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  982.741292][ T6137] dvb-usb: error while querying for an remote control event.
[  982.769342][ T5992] usb 7-1: can't set config #0, error -110
[  982.942103][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  982.964606][ T6137] dvb-usb: error while querying for an remote control event.
[  983.141569][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  983.166042][ T6137] dvb-usb: error while querying for an remote control event.
[  983.371711][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  983.377528][ T6137] dvb-usb: error while querying for an remote control event.
[  983.622689][ T6137] dvb-usb: bulk message failed: -22 (1/0)
[  983.646298][ T6137] dvb-usb: error while querying for an remote control event.
[  983.887705][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  983.900218][   T10] dvb-usb: error while querying for an remote control event.
[  983.947503][ T5992] usb 6-1: USB disconnect, device number 2
[  984.174879][ T5992] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  984.241607][T11689] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  984.419023][T11689] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  984.468888][T11689] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  984.545836][T11689] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  984.632050][T11689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.768447][T11689] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  984.975298][T12322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1575'.
[  985.002566][T11689] usb 5-1: invalid MIDI out EP 0
[  986.006594][T11689] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  986.189435][T12236] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  986.191825][T11689] usb 5-1: USB disconnect, device number 5
[  986.389456][T12236] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  986.437125][T12236] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  986.512198][T12236] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  986.677815][ T5992] usb 7-1: USB disconnect, device number 6
[  986.741599][T11689] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  986.772538][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'.
[  986.908153][T11689] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  986.976613][T11689] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  987.056024][T11689] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  987.076838][T11689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.088545][T12337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  987.104964][T11689] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  987.419261][T12236] 8021q: adding VLAN 0 to HW filter on device bond0
[  987.442108][T12236] 8021q: adding VLAN 0 to HW filter on device team0
[  988.774470][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state
[  988.781719][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  989.171891][ T5992] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  990.174740][   T10] usb 6-1: USB disconnect, device number 3
[  990.192930][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.200080][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.952657][T12236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  992.293383][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  992.299770][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  992.365109][T12391] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1593'.
[  992.922766][   T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  993.137544][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  993.202198][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  993.254984][   T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  993.310152][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.320470][T12236] veth0_vlan: entered promiscuous mode
[  993.343855][   T10] usb 5-1: config 0 descriptor??
[  993.364461][T12236] veth1_vlan: entered promiscuous mode
[  993.580872][T12236] veth0_macvtap: entered promiscuous mode
[  993.610447][   T10] usb 5-1: USB disconnect, device number 6
[  993.672204][T12236] veth1_macvtap: entered promiscuous mode
[  994.072017][T11689] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  994.076004][T12236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  994.184445][T12236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.318077][T12236] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.409302][T12236] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  994.444407][T12236] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  994.454286][T11689] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  994.473005][T11689] usb 9-1: config 0 interface 0 has no altsetting 0
[  994.492162][T11689] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  994.510774][T11689] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  994.528030][T12236] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  994.548588][T11689] usb 9-1: Product: syz
[  994.555330][T11689] usb 9-1: Manufacturer: syz
[  994.560010][T11689] usb 9-1: SerialNumber: syz
[  994.600520][T11689] usb 9-1: config 0 descriptor??
[  994.625399][T11689] usb 9-1: selecting invalid altsetting 0
[  994.959851][T12416] syzkaller1: entered promiscuous mode
[  994.971822][T12416] syzkaller1: entered allmulticast mode
[  995.475498][ T6211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.552322][ T6211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.039967][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.170806][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.472324][   T10] usb 9-1: USB disconnect, device number 2
[  997.628966][   T30] audit: type=1326 audit(1752453786.266:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.8.1603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f422e38e929 code=0x0
[  998.704244][    C0] vkms_vblank_simulate: vblank timer overrun
[  998.766746][    C0] vkms_vblank_simulate: vblank timer overrun
[  998.832169][    C0] vkms_vblank_simulate: vblank timer overrun
[  998.863962][    C0] vkms_vblank_simulate: vblank timer overrun
[  999.036895][    C0] vkms_vblank_simulate: vblank timer overrun
[  999.227624][T12456] input: syz1 as /devices/virtual/input/input11
[ 1000.232895][T12471] syzkaller1: entered promiscuous mode
[ 1000.241706][T12471] syzkaller1: entered allmulticast mode
[ 1001.703638][T12478] netlink: 'syz.4.1617': attribute type 12 has an invalid length.
[ 1002.972796][T12487] geneve2: entered allmulticast mode
[ 1003.362262][T12501] syzkaller1: entered promiscuous mode
[ 1003.421994][T12501] syzkaller1: entered allmulticast mode
[ 1004.111820][ T5992] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1004.274442][ T5992] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1004.284526][ T5992] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1004.294285][ T5992] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1004.308675][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1004.317192][ T5992] usb 4-1: Product: syz
[ 1004.324848][ T5992] usb 4-1: Manufacturer: syz
[ 1004.329573][ T5992] usb 4-1: SerialNumber: syz
[ 1004.337418][ T5992] usb 4-1: config 0 descriptor??
[ 1004.347345][ T5992] usb 4-1: selecting invalid altsetting 0
[ 1004.377022][T12516] fuse: Unknown parameter '0x0000000000000004'
[ 1005.769123][T12532] netlink: 'syz.5.1635': attribute type 39 has an invalid length.
[ 1005.863387][T12532] veth0_macvtap: left promiscuous mode
[ 1006.701923][T12539] geneve2: entered allmulticast mode
[ 1007.841296][ T5947] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1007.971805][T11689] usb 4-1: USB disconnect, device number 7
[ 1008.013890][ T5947] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1008.047751][ T5947] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1008.102804][ T5947] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1008.120096][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1008.174296][ T5947] usb 8-1: Product: syz
[ 1008.290070][ T5947] usb 8-1: Manufacturer: syz
[ 1008.332193][ T5947] usb 8-1: SerialNumber: syz
[ 1008.423957][ T5947] usb 8-1: config 0 descriptor??
[ 1008.458879][ T5947] usb 8-1: selecting invalid altsetting 0
[ 1009.740691][T12574] qrtr: Invalid version 0
[ 1010.763686][T12580] netlink: 'syz.3.1651': attribute type 3 has an invalid length.
[ 1012.451569][T11689] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 1012.791687][T11689] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1012.966188][   T10] usb 8-1: USB disconnect, device number 6
[ 1013.034797][T11689] usb 6-1: config 0 has no interface number 0
[ 1013.248380][T11689] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1013.278981][T11689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.299835][T11689] usb 6-1: config 0 descriptor??
[ 1013.330581][T11689] usb 6-1: selecting invalid altsetting 1
[ 1013.383692][T11689] dvb_ttusb_budget: ttusb_init_controller: error
[ 1013.428051][T11689] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1013.550030][T11689] DVB: Unable to find symbol cx22700_attach()
[ 1013.964421][ T6212] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1014.632642][T11689] DVB: Unable to find symbol tda10046_attach()
[ 1014.723223][T11689] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1014.781208][T11689] usb 6-1: USB disconnect, device number 4
[ 1014.805275][T12625] qrtr: Invalid version 0
[ 1014.987984][ T6212] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.538290][ T6212] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.730571][ T6212] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.320169][T12630] syzkaller1: entered promiscuous mode
[ 1016.326213][T12630] syzkaller1: entered allmulticast mode
[ 1016.758932][T12640] netlink: 'syz.6.1666': attribute type 12 has an invalid length.
[ 1020.769936][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'.
[ 1021.308925][ T6212] bond0 (unregistering): Released all slaves
[ 1022.673184][ T6212] bond1 (unregistering): Released all slaves
[ 1022.929336][T12656] geneve2: entered allmulticast mode
[ 1022.954922][ T6212] IPVS: stopping master sync thread 10665 ...
[ 1023.110832][T12663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1023.558730][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1680'.
[ 1024.479460][T12699] geneve2: entered allmulticast mode
[ 1024.898628][ T6212] hsr_slave_0: left promiscuous mode
[ 1024.932330][ T6212] hsr_slave_1: left promiscuous mode
[ 1025.051382][ T6212] veth1_macvtap: left promiscuous mode
[ 1025.079613][ T6212] veth0_macvtap: left promiscuous mode
[ 1025.099484][ T6212] veth1_vlan: left promiscuous mode
[ 1025.140477][ T6212] veth0_vlan: left promiscuous mode
[ 1029.918829][   T30] audit: type=1326 audit(1752453818.576:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.007838][   T30] audit: type=1326 audit(1752453818.576:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.170483][   T30] audit: type=1326 audit(1752453818.576:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.403241][   T30] audit: type=1326 audit(1752453818.576:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.621254][   T30] audit: type=1326 audit(1752453818.576:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.681632][T12753] qrtr: Invalid version 0
[ 1030.722576][   T30] audit: type=1326 audit(1752453818.576:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.835045][   T30] audit: type=1326 audit(1752453818.576:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1030.969354][   T30] audit: type=1326 audit(1752453818.576:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1031.177379][   T30] audit: type=1326 audit(1752453818.576:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1031.331959][   T30] audit: type=1326 audit(1752453818.576:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12738 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1031.616382][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'.
[ 1035.080855][T12729] syzkaller1: entered promiscuous mode
[ 1035.111543][T12729] syzkaller1: entered allmulticast mode
[ 1036.398951][T12789] geneve2: entered allmulticast mode
[ 1036.498898][T12796] qrtr: Invalid version 0
[ 1038.727119][   T30] kauditd_printk_skb: 59 callbacks suppressed
[ 1038.727143][   T30] audit: type=1326 audit(1752453827.376:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1039.121617][ T5946] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1039.271535][   T30] audit: type=1326 audit(1752453827.376:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1039.357389][ T5946] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1039.399228][   T30] audit: type=1326 audit(1752453827.386:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1039.611572][ T5946] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1039.651643][ T5946] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1039.681304][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.711954][   T30] audit: type=1326 audit(1752453827.386:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1039.745213][T12819] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1039.758320][ T5946] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1039.887311][   T30] audit: type=1326 audit(1752453827.386:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1040.013428][ T5946] usb 7-1: USB disconnect, device number 7
[ 1040.081533][   T30] audit: type=1326 audit(1752453827.386:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1040.218634][   T30] audit: type=1326 audit(1752453827.386:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1040.575122][   T30] audit: type=1326 audit(1752453827.386:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1040.651647][   T30] audit: type=1326 audit(1752453827.386:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1040.732961][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1040.771547][   T30] audit: type=1326 audit(1752453827.386:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f422e38e929 code=0x7ffc0000
[ 1040.942780][   T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1041.220479][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1041.253632][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1041.262891][   T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1041.281557][   T10] usb 5-1: Product: syz
[ 1041.343546][   T10] usb 5-1: Manufacturer: syz
[ 1041.348177][   T10] usb 5-1: SerialNumber: syz
[ 1041.377913][T12840] fuse: Bad value for 'rootmode'
[ 1041.394806][   T10] usb 5-1: config 0 descriptor??
[ 1041.435054][   T10] usb 5-1: selecting invalid altsetting 0
[ 1041.855777][ T6212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.193599][T12849] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[ 1042.200256][T12849] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1042.226989][T12849] vhci_hcd vhci_hcd.0: Device attached
[ 1042.471890][   T10] usb 43-1: new high-speed USB device number 3 using vhci_hcd
[ 1042.500791][ T6212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.585953][T12851] vhci_hcd: connection reset by peer
[ 1042.591835][ T6213] vhci_hcd: stop threads
[ 1042.596198][ T6213] vhci_hcd: release socket
[ 1042.612835][ T6213] vhci_hcd: disconnect device
[ 1043.992115][T12862] lo speed is unknown, defaulting to 1000
[ 1043.997946][T12862] lo speed is unknown, defaulting to 1000
[ 1044.004404][T12862] lo speed is unknown, defaulting to 1000
[ 1044.019987][T12862] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1044.048612][T12862] lo speed is unknown, defaulting to 1000
[ 1044.056458][T12862] lo speed is unknown, defaulting to 1000
[ 1044.064178][T12862] lo speed is unknown, defaulting to 1000
[ 1045.014397][ T6212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.086843][T12862] lo speed is unknown, defaulting to 1000
[ 1045.094605][T12862] lo speed is unknown, defaulting to 1000
[ 1045.102631][T12862] lo speed is unknown, defaulting to 1000
[ 1045.109853][T12862] lo speed is unknown, defaulting to 1000
[ 1045.117538][T12862] lo speed is unknown, defaulting to 1000
[ 1045.232059][T12870] netlink: 'syz.3.1731': attribute type 12 has an invalid length.
[ 1046.821561][ T5992] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1046.869907][ T6212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.994547][ T5992] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1047.048425][ T5992] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1047.075277][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1737'.
[ 1047.118914][ T5992] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1047.201594][ T5992] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1047.230228][ T5992] usb 9-1: Product: syz
[ 1047.245045][ T5992] usb 9-1: Manufacturer: syz
[ 1047.261566][ T5992] usb 9-1: SerialNumber: syz
[ 1047.296135][ T5992] usb 9-1: config 0 descriptor??
[ 1047.303912][ T5946] usb 5-1: USB disconnect, device number 7
[ 1047.415418][ T5992] usb 9-1: selecting invalid altsetting 0
[ 1047.665707][   T10] vhci_hcd: vhci_device speed not set
[ 1048.165409][ T6212] bridge_slave_1: left allmulticast mode
[ 1048.182772][ T6212] bridge_slave_1: left promiscuous mode
[ 1048.217739][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.291648][ T5946] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1048.381797][ T6212] bridge_slave_0: left allmulticast mode
[ 1048.408677][ T6212] bridge_slave_0: left promiscuous mode
[ 1048.430572][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.454247][ T5946] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1048.464524][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1048.548091][ T5946] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1048.570744][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1048.617659][ T5946] usb 4-1: Product: syz
[ 1048.644935][ T5946] usb 4-1: Manufacturer: syz
[ 1048.670078][ T5946] usb 4-1: SerialNumber: syz
[ 1048.692156][ T5946] usb 4-1: config 0 descriptor??
[ 1048.779230][ T6212] tipc: Resetting bearer <eth:gre0>
[ 1048.798508][ T5946] usb 4-1: selecting invalid altsetting 0
[ 1051.284515][ T5845] usb 9-1: USB disconnect, device number 3
[ 1052.147566][T12931] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11)
[ 1052.154302][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1052.258996][T12931] vhci_hcd vhci_hcd.0: Device attached
[ 1052.416326][ T6212] tipc: Disabling bearer <eth:gre0>
[ 1052.505701][T12933] vhci_hcd: connection closed
[ 1052.517069][T10174] vhci_hcd: stop threads
[ 1052.525011][ T5845] usb 4-1: USB disconnect, device number 8
[ 1052.565782][   T10] usb 49-1: new high-speed USB device number 7 using vhci_hcd
[ 1052.591188][T10174] vhci_hcd: release socket
[ 1052.606286][T10174] vhci_hcd: disconnect device
[ 1052.613950][   T10] usb 49-1: enqueue for inactive port 0
[ 1052.723267][   T10] vhci_hcd: vhci_device speed not set
[ 1053.731178][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.738104][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.061390][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1054.155156][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1054.333542][ T6212] bond0 (unregistering): Released all slaves
[ 1054.377658][T12915] netlink: 'syz.7.1742': attribute type 12 has an invalid length.
[ 1054.429178][T12924] netlink: 'syz.6.1745': attribute type 12 has an invalid length.
[ 1054.709640][ T6212] tipc: Left network mode
[ 1056.135218][T12985] geneve2: entered allmulticast mode
[ 1056.519618][ T6212] hsr_slave_0: left promiscuous mode
[ 1056.529450][ T6212] hsr_slave_1: left promiscuous mode
[ 1056.960345][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1056.981674][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1057.019291][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1057.071975][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1057.246689][ T6212] veth1_macvtap: left promiscuous mode
[ 1057.303259][ T6212] veth1_vlan: left promiscuous mode
[ 1057.308600][ T6212] veth0_vlan: left promiscuous mode
[ 1057.901971][   T30] kauditd_printk_skb: 51 callbacks suppressed
[ 1057.901991][   T30] audit: type=1326 audit(1752453846.566:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.234502][   T30] audit: type=1326 audit(1752453846.566:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.335318][   T30] audit: type=1326 audit(1752453846.596:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.374715][   T30] audit: type=1326 audit(1752453846.596:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.397352][   T30] audit: type=1326 audit(1752453846.596:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.419802][   T30] audit: type=1326 audit(1752453846.596:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.633045][   T30] audit: type=1326 audit(1752453846.596:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.670636][   T30] audit: type=1326 audit(1752453846.596:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.704231][   T30] audit: type=1326 audit(1752453846.596:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1058.770968][   T30] audit: type=1326 audit(1752453846.596:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13003 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3a178e929 code=0x7ffc0000
[ 1059.681826][T13024] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[ 1059.688502][T13024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1059.707886][T13024] vhci_hcd vhci_hcd.0: Device attached
[ 1059.981589][ T5947] usb 45-1: new high-speed USB device number 4 using vhci_hcd
[ 1060.086685][T13025] vhci_hcd: connection reset by peer
[ 1060.180594][T10177] vhci_hcd: stop threads
[ 1060.196812][T10177] vhci_hcd: release socket
[ 1060.215859][T10177] vhci_hcd: disconnect device
[ 1061.722870][ T6212] team0 (unregistering): Port device team_slave_1 removed
[ 1061.918375][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1775'.
[ 1061.940168][ T6212] team0 (unregistering): Port device team_slave_0 removed
[ 1062.229752][T13047] qrtr: Invalid version 255
[ 1063.189792][T13006] geneve2: entered allmulticast mode
[ 1063.289815][T13043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1063.322950][T13051] netlink: 'syz.8.1778': attribute type 12 has an invalid length.
[ 1063.826076][T13056] fuse: Unknown parameter 'grou00000000000000000000'
[ 1064.673665][T13074] netlink: 'syz.8.1782': attribute type 12 has an invalid length.
[ 1065.720965][ T5947] vhci_hcd: vhci_device speed not set
[ 1066.260463][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1066.618467][   T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1066.861647][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1066.895403][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1066.939553][   T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1066.981554][   T24] usb 4-1: Product: syz
[ 1066.985753][   T24] usb 4-1: Manufacturer: syz
[ 1067.020313][   T24] usb 4-1: SerialNumber: syz
[ 1067.093671][   T24] usb 4-1: config 0 descriptor??
[ 1067.146142][   T24] usb 4-1: selecting invalid altsetting 0
[ 1068.545073][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1793'.
[ 1068.600432][T13103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1068.617247][   T24] lo speed is unknown, defaulting to 1000
[ 1068.715109][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'.
[ 1070.216426][ T5947] usb 4-1: USB disconnect, device number 9
[ 1070.567350][T13119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[ 1070.574016][T13119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1070.661691][T13119] vhci_hcd vhci_hcd.0: Device attached
[ 1071.076104][T13127] vhci_hcd: connection closed
[ 1071.083059][   T36] vhci_hcd: stop threads
[ 1071.115036][   T36] vhci_hcd: release socket
[ 1071.121589][   T36] vhci_hcd: disconnect device
[ 1071.161511][   T10] usb 41-1: new high-speed USB device number 5 using vhci_hcd
[ 1071.171026][   T10] usb 41-1: enqueue for inactive port 0
[ 1071.252757][T13140] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1803' sets config #0
[ 1071.267549][T13140] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1803' sets config #1
[ 1071.292428][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1071.292449][   T30] audit: type=1326 audit(1752453859.946:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.3.1803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3a178e929 code=0x0
[ 1071.320316][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1071.353943][   T10] vhci_hcd: vhci_device speed not set
[ 1074.131195][   T30] audit: type=1326 audit(1752453862.726:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1074.153672][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1074.351495][   T30] audit: type=1326 audit(1752453862.726:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1074.450376][   T30] audit: type=1326 audit(1752453862.726:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1074.472823][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1074.575075][   T30] audit: type=1326 audit(1752453862.726:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1074.738356][   T30] audit: type=1326 audit(1752453862.726:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1074.849294][   T30] audit: type=1326 audit(1752453862.726:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1074.871678][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1075.164183][   T30] audit: type=1326 audit(1752453862.726:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1075.202947][   T30] audit: type=1326 audit(1752453862.726:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1075.632004][   T30] audit: type=1326 audit(1752453862.736:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdcf78e929 code=0x7ffc0000
[ 1076.336368][T13183] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1812' sets config #0
[ 1076.345612][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1076.480739][T13183] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1812' sets config #1
[ 1076.552824][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1076.552842][   T30] audit: type=1326 audit(1752453865.156:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.7.1812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3361f8e929 code=0x0
[ 1076.981539][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1077.062990][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.120611][   T10] usb 6-1: config 0 descriptor??
[ 1077.180842][   T10] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1077.383134][   T10] gspca_spca508: reg_read err -32
[ 1077.394047][   T10] gspca_spca508: reg_read err -32
[ 1077.981790][   T10] gspca_spca508: reg_read err -110
[ 1078.036739][   T10] gspca_spca508: reg_read err -32
[ 1078.310960][   T10] gspca_spca508: reg write: error -32
[ 1078.335542][   T10] spca508 6-1:0.0: probe with driver spca508 failed with error -32
[ 1079.218673][T13202] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11)
[ 1079.225345][T13202] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1079.285404][T13202] vhci_hcd vhci_hcd.0: Device attached
[ 1079.468966][   T30] audit: type=1326 audit(1752453868.096:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1079.552036][   T30] audit: type=1326 audit(1752453868.096:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1079.576180][ T6137] usb 49-1: new high-speed USB device number 8 using vhci_hcd
[ 1079.609952][T13210] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1079.611599][T13209] vhci_hcd: connection closed
[ 1079.631922][   T30] audit: type=1326 audit(1752453868.096:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1079.680110][   T36] vhci_hcd: stop threads
[ 1079.692289][   T36] vhci_hcd: release socket
[ 1079.703591][   T36] vhci_hcd: disconnect device
[ 1079.764384][   T30] audit: type=1326 audit(1752453868.096:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1080.066567][   T30] audit: type=1326 audit(1752453868.096:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1080.262021][T13219] geneve2: entered allmulticast mode
[ 1080.545930][   T30] audit: type=1326 audit(1752453868.096:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1080.618949][   T30] audit: type=1326 audit(1752453868.096:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1080.689912][   T30] audit: type=1326 audit(1752453868.096:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1080.739458][   T30] audit: type=1326 audit(1752453868.096:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.6.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1080.797537][ T5946] usb 6-1: USB disconnect, device number 5
[ 1081.268129][T13228] netlink: 'syz.8.1823': attribute type 12 has an invalid length.
[ 1082.268148][T13237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1826'.
[ 1082.341499][ T5946] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1082.624930][ T5946] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1082.686474][T13241] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1082.743146][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1082.817355][ T5946] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1082.931882][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1083.131640][ T5946] usb 5-1: Product: syz
[ 1083.158797][ T5946] usb 5-1: Manufacturer: syz
[ 1083.284821][ T5946] usb 5-1: SerialNumber: syz
[ 1083.473636][ T5946] usb 5-1: config 0 descriptor??
[ 1083.510865][ T5946] usb 5-1: selecting invalid altsetting 0
[ 1084.811662][ T6137] vhci_hcd: vhci_device speed not set
[ 1086.462692][T13269] netlink: 'syz.7.1835': attribute type 7 has an invalid length.
[ 1086.470792][T13269] netlink: 'syz.7.1835': attribute type 8 has an invalid length.
[ 1086.511906][T13266] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[ 1086.518567][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1086.563086][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1836'.
[ 1086.590363][T13266] vhci_hcd vhci_hcd.0: Device attached
[ 1086.906504][T13270] vhci_hcd: connection closed
[ 1086.920738][ T6858] vhci_hcd: stop threads
[ 1086.975853][ T5947] usb 5-1: USB disconnect, device number 8
[ 1087.005725][ T6858] vhci_hcd: release socket
[ 1087.020753][ T6858] vhci_hcd: disconnect device
[ 1087.042417][ T5946] usb 39-1: new high-speed USB device number 4 using vhci_hcd
[ 1087.051242][ T5946] usb 39-1: enqueue for inactive port 0
[ 1087.123429][ T5946] vhci_hcd: vhci_device speed not set
[ 1087.215992][T13281] comedi comedi2: comedi_parport: I/O port conflict (0x1,3)
[ 1088.536539][T13291] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1089.761730][T13309] netlink: 'syz.3.1847': attribute type 12 has an invalid length.
[ 1089.991525][ T6137] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1093.977587][T13326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1852' sets config #0
[ 1094.119051][T13326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1852' sets config #1
[ 1094.130547][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 1094.130564][   T30] audit: type=1326 audit(1752453882.786:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.5.1852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdcf78e929 code=0x0
[ 1094.676544][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1854'.
[ 1095.174591][ T6137] usb 7-1: device descriptor read/all, error -71
[ 1095.211234][T13336] netlink: 512 bytes leftover after parsing attributes in process `syz.8.1857'.
[ 1095.324586][T13338] fuse: Bad value for 'fd'
[ 1095.514296][T13340] input: syz1 as /devices/virtual/input/input12
[ 1096.788426][T13360] 9pnet_fd: Insufficient options for proto=fd
[ 1096.832937][T11942] Bluetooth: hci1: command 0x0406 tx timeout
[ 1099.115641][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'.
[ 1099.211695][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1871'.
[ 1099.441523][ T6009] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1099.598360][ T6009] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1099.632625][ T6009] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1099.677614][ T6009] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 1099.707753][ T6009] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1099.766432][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.832271][ T6009] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1099.919225][T13391] syzkaller1: entered promiscuous mode
[ 1099.929092][T13391] syzkaller1: entered allmulticast mode
[ 1099.960547][ T6009] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12
[ 1100.031885][T13374] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1869'.
[ 1100.541546][ T6009] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1103.090124][ T5947] usb 7-1: USB disconnect, device number 10
[ 1105.456143][T13411] 9pnet_fd: Insufficient options for proto=fd
[ 1107.239030][T13416] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1883' sets config #0
[ 1107.252495][T13416] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1883' sets config #1
[ 1107.294710][   T30] audit: type=1326 audit(1752453895.926:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13413 comm="syz.5.1883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdcf78e929 code=0x0
[ 1108.126873][ T6009] usb 9-1: device descriptor read/all, error -110
[ 1108.321496][ T6009] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1108.521886][ T6009] usb 9-1: device descriptor read/64, error -32
[ 1108.690666][ T6009] usb usb9-port1: attempt power cycle
[ 1108.745874][T13428] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1888'.
[ 1109.232011][ T6009] usb usb9-port1: Cannot enable. Maybe the USB cable is bad?
[ 1109.304493][T13437] syzkaller1: entered promiscuous mode
[ 1109.331704][T13437] syzkaller1: entered allmulticast mode
[ 1109.581503][ T6009] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1109.629793][ T6009] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1109.651765][ T6009] usb 9-1: config 0 has no interface number 0
[ 1109.694419][ T6009] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1109.716330][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.733433][ T6009] usb 9-1: Product: syz
[ 1109.737882][ T6009] usb 9-1: Manufacturer: syz
[ 1109.742570][ T6009] usb 9-1: SerialNumber: syz
[ 1109.755948][ T6009] usb 9-1: config 0 descriptor??
[ 1110.030545][ T6009] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1110.064754][ T6009] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1110.076477][ T6009] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1110.086706][ T6009] usb 9-1: media controller created
[ 1110.126537][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1110.760566][T13456] netlink: 'syz.6.1895': attribute type 12 has an invalid length.
[ 1111.191527][ T6137] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1111.378021][ T6009] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 1111.803338][ T6137] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1111.835988][ T6137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.007780][T13464] trusted_key: encrypted_key: insufficient parameters specified
[ 1112.391738][ T6009] usb 9-1: USB disconnect, device number 7
[ 1112.402978][ T6137] usb 6-1: config 0 descriptor??
[ 1112.434350][ T6137] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1112.616680][ T6137] gspca_spca508: reg_read err -32
[ 1112.625223][ T6137] gspca_spca508: reg_read err -32
[ 1113.141740][ T6137] gspca_spca508: reg_read err -110
[ 1113.180297][ T6137] gspca_spca508: reg_read err -32
[ 1113.237829][ T6137] gspca_spca508: reg write: error -32
[ 1113.294235][ T6137] spca508 6-1:0.0: probe with driver spca508 failed with error -32
[ 1113.336138][T13477] input: syz1 as /devices/virtual/input/input13
[ 1113.971505][ T6137] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1114.110924][ T5946] usb 6-1: USB disconnect, device number 6
[ 1114.141099][ T6137] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1114.171553][ T6137] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1114.212554][ T6137] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1114.231745][ T6137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.262712][T13481] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1114.281567][ T6009] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1114.293094][ T6137] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1114.433901][ T6009] usb 4-1: Using ep0 maxpacket: 16
[ 1114.461016][ T6009] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1114.509393][ T6009] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1114.545533][   T10] usb 8-1: USB disconnect, device number 7
[ 1114.656809][ T6009] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1114.718424][ T6009] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 1114.765070][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.089214][T13498] 9pnet_fd: Insufficient options for proto=fd
[ 1115.168810][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.175561][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.787367][ T6009] usb 4-1: config 0 descriptor??
[ 1116.280767][ T6009] usbhid 4-1:0.0: can't add hid device: -71
[ 1116.307907][ T6009] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1116.328761][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1116.337907][T13506] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1915' sets config #0
[ 1116.349778][T13506] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1915' sets config #1
[ 1116.371711][   T30] audit: type=1326 audit(1752453905.016:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13501 comm="syz.6.1915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b4c98e929 code=0x0
[ 1116.423977][ T6009] usb 4-1: USB disconnect, device number 10
[ 1116.651776][   T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1116.818125][   T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1116.942630][   T24] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1117.107465][   T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1117.145958][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.165398][   T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[ 1117.176678][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.197836][   T24] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1117.214776][T13500] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1117.233907][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1117.241443][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.289459][   T24] usb 9-1: config 0 descriptor??
[ 1117.294559][ T5946] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1117.465243][ T5946] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1117.481463][ T5946] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1117.481486][ T6009] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1117.527875][T13516] netlink: 'syz.8.1917': attribute type 7 has an invalid length.
[ 1117.536128][T13516] netlink: 'syz.8.1917': attribute type 8 has an invalid length.
[ 1117.554162][   T10] usb 6-1: USB disconnect, device number 7
[ 1117.571921][ T5946] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1117.616483][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.689249][T13519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1117.701036][ T5946] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1117.724147][ T6009] usb 8-1: Using ep0 maxpacket: 16
[ 1117.737588][ T6009] usb 8-1: config 8 has an invalid interface number: 39 but max is 0
[ 1117.752696][ T6009] usb 8-1: config 8 has no interface number 0
[ 1117.769407][ T6009] usb 8-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[ 1117.812371][ T6009] usb 8-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1117.872938][ T6009] usb 8-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[ 1117.906358][ T5946] usb 5-1: USB disconnect, device number 9
[ 1117.934444][ T6009] usb 8-1: config 8 interface 39 has no altsetting 0
[ 1117.975503][ T6009] usb 8-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[ 1118.004104][ T6009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.019513][ T6009] usb 8-1: Product: syz
[ 1118.035707][ T6009] usb 8-1: Manufacturer: syz
[ 1118.051196][ T6009] usb 8-1: SerialNumber: syz
[ 1118.700894][ T6009] ipheth 8-1:8.39: ipheth_enable_ncm: usb_control_msg: -71
[ 1119.105342][ T6009] ipheth 8-1:8.39: Apple iPhone USB Ethernet device attached
[ 1119.170780][ T6009] usb 8-1: USB disconnect, device number 8
[ 1119.323653][ T6009] ipheth 8-1:8.39: Apple iPhone USB Ethernet now disconnected
[ 1119.485258][T13540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1927'.
[ 1120.097050][T13536] geneve2: entered allmulticast mode
[ 1122.454464][ T5946] usb 9-1: USB disconnect, device number 8
[ 1123.490962][T13569] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1935' sets config #0
[ 1123.531095][T13569] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1935' sets config #1
[ 1123.545654][   T30] audit: type=1326 audit(1752453912.206:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.8.1935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f422e38e929 code=0x0
[ 1124.255848][T13575] netlink: 'syz.5.1936': attribute type 39 has an invalid length.
[ 1124.581598][ T5946] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1124.944110][ T5946] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1124.955535][ T5946] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1125.251875][ T5946] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1125.465367][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.526300][T13576] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1125.545643][ T5946] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1125.554470][T13592] syzkaller1: entered promiscuous mode
[ 1125.581118][T13592] syzkaller1: entered allmulticast mode
[ 1126.102042][ T5946] usb 5-1: USB disconnect, device number 10
[ 1128.580234][T13621] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1951'.
[ 1128.725832][T13625] comedi comedi2: comedi_parport: I/O port conflict (0x1,3)
[ 1131.391331][T13653] trusted_key: encrypted_key: insufficient parameters specified
[ 1131.952300][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1132.196966][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1132.346561][   T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1132.454643][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1132.478654][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.501511][ T6009] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1132.538962][T13669] netlink: 512 bytes leftover after parsing attributes in process `syz.7.1966'.
[ 1132.605069][T13659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1132.636581][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1132.677002][ T6009] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1132.700356][ T6009] usb 6-1: config 0 has no interface number 0
[ 1132.726594][ T6009] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1132.739058][ T6009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1132.751282][ T6009] usb 6-1: Product: syz
[ 1132.759221][ T6009] usb 6-1: Manufacturer: syz
[ 1132.768484][ T6009] usb 6-1: SerialNumber: syz
[ 1132.785503][ T6009] usb 6-1: config 0 descriptor??
[ 1132.801633][   T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1133.036121][T13672] trusted_key: encrypted_key: insufficient parameters specified
[ 1133.054128][   T24] usb 5-1: USB disconnect, device number 11
[ 1133.398877][   T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1133.410556][ T6009] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1133.449289][   T10] usb 7-1: config 0 has no interface number 0
[ 1133.475494][   T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1133.484967][ T6009] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1133.576380][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.651652][ T6009] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1133.674416][   T10] usb 7-1: Product: syz
[ 1133.693278][   T10] usb 7-1: Manufacturer: syz
[ 1133.697913][   T10] usb 7-1: SerialNumber: syz
[ 1133.702747][ T6009] usb 6-1: media controller created
[ 1133.729218][   T10] usb 7-1: config 0 descriptor??
[ 1133.814874][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1133.936316][ T6009] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1133.993464][   T10] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1135.044882][   T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1135.188336][   T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1135.217030][   T10] usb 7-1: media controller created
[ 1135.281764][ T6009] usb 6-1: USB disconnect, device number 8
[ 1135.310925][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1135.571860][   T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[ 1135.877132][   T10] usb 7-1: USB disconnect, device number 11
[ 1136.115647][T13693] trusted_key: encrypted_key: insufficient parameters specified
[ 1138.947780][   T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1139.102023][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 1139.145731][   T10] usb 7-1: config 8 has an invalid interface number: 39 but max is 0
[ 1139.171038][   T10] usb 7-1: config 8 has no interface number 0
[ 1139.196458][   T10] usb 7-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[ 1139.252818][   T10] usb 7-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1139.281530][   T10] usb 7-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[ 1139.304835][   T10] usb 7-1: config 8 interface 39 has no altsetting 0
[ 1139.331869][   T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[ 1139.341165][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.349418][   T10] usb 7-1: Product: syz
[ 1139.403524][   T10] usb 7-1: Manufacturer: syz
[ 1139.432208][   T10] usb 7-1: SerialNumber: syz
[ 1139.691506][ T5946] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1139.906156][   T10] ipheth 7-1:8.39: ipheth_get_macaddr: usb_control_msg: -32
[ 1139.934507][   T10] ipheth 7-1:8.39: probe with driver ipheth failed with error -32
[ 1139.966268][ T5946] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1139.984486][   T10] usb 7-1: USB disconnect, device number 12
[ 1140.027447][ T5946] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1140.064701][ T5946] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1140.093315][ T5946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.163570][T13713] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1140.183399][ T5946] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1140.401512][  T921] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1140.612357][ T5946] usb 9-1: USB disconnect, device number 9
[ 1140.643619][  T921] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1140.651885][  T921] usb 6-1: config 0 has no interface number 0
[ 1140.718332][  T921] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1140.751026][  T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1140.856961][  T921] usb 6-1: Product: syz
[ 1140.861194][  T921] usb 6-1: Manufacturer: syz
[ 1140.888100][  T921] usb 6-1: SerialNumber: syz
[ 1140.910522][  T921] usb 6-1: config 0 descriptor??
[ 1141.151961][  T921] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1141.184852][  T921] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1141.402747][  T921] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1141.459595][  T921] usb 6-1: media controller created
[ 1141.550173][  T921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1142.532335][  T921] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1142.675407][  T921] usb 6-1: USB disconnect, device number 9
[ 1143.349473][ T6137] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1143.476333][T13762] trusted_key: encrypted_key: insufficient parameters specified
[ 1143.821543][ T6137] usb 9-1: Using ep0 maxpacket: 16
[ 1143.838128][ T6137] usb 9-1: config 8 has an invalid interface number: 39 but max is 0
[ 1143.846517][ T6137] usb 9-1: config 8 has no interface number 0
[ 1143.861517][ T6137] usb 9-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[ 1143.891467][ T6137] usb 9-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1143.907244][ T6137] usb 9-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[ 1143.921225][ T6137] usb 9-1: config 8 interface 39 has no altsetting 0
[ 1144.047104][ T6137] usb 9-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[ 1144.221273][ T6137] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.333605][ T6137] usb 9-1: Product: syz
[ 1144.337783][ T6137] usb 9-1: Manufacturer: syz
[ 1144.381639][ T6137] usb 9-1: SerialNumber: syz
[ 1144.994059][ T6137] ipheth 9-1:8.39: ipheth_get_macaddr: usb_control_msg: -32
[ 1145.079119][ T6137] ipheth 9-1:8.39: probe with driver ipheth failed with error -32
[ 1145.152054][ T6137] usb 9-1: USB disconnect, device number 10
[ 1145.682227][T13780] trusted_key: encrypted_key: insufficient parameters specified
[ 1146.481745][  T921] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1147.417628][T13792] comedi comedi2: comedi_parport: I/O port conflict (0x1,3)
[ 1148.288740][  T921] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1148.321334][  T921] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1148.436699][T13803] trusted_key: encrypted_key: insufficient parameters specified
[ 1149.047226][T13804] trusted_key: encrypted_key: insufficient parameters specified
[ 1149.200035][  T921] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1149.289263][  T921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.424939][  T921] usb 8-1: can't set config #27, error -71
[ 1149.461530][  T921] usb 8-1: USB disconnect, device number 9
[ 1149.479387][T13807] netlink: 512 bytes leftover after parsing attributes in process `syz.7.2011'.
[ 1150.959966][T13831] 9pnet_fd: Insufficient options for proto=fd
[ 1152.205053][T13843] overlayfs: failed to resolve './file0': -2
[ 1153.021720][T13837] trusted_key: encrypted_key: insufficient parameters specified
[ 1153.658136][T13848] comedi comedi2: comedi_parport: I/O port conflict (0x1,3)
[ 1155.306853][T13859] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2027'.
[ 1155.383763][T13861] trusted_key: encrypted_key: insufficient parameters specified
[ 1155.842754][T13864] netlink: 512 bytes leftover after parsing attributes in process `syz.6.2029'.
[ 1158.012868][T13889] 9pnet_fd: Insufficient options for proto=fd
[ 1158.883595][T13886] trusted_key: encrypted_key: insufficient parameters specified
[ 1162.611607][T13907] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2042'.
[ 1163.714752][T13917] netlink: 'syz.5.2044': attribute type 3 has an invalid length.
[ 1164.483131][T13919] trusted_key: encrypted_key: insufficient parameters specified
[ 1166.921872][ T5947] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1167.153697][ T5947] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1167.217087][ T5947] usb 7-1: config 0 has no interface number 0
[ 1167.262871][ T5947] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1167.329228][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.400687][ T5947] usb 7-1: Product: syz
[ 1167.443778][ T5947] usb 7-1: Manufacturer: syz
[ 1167.467531][ T5947] usb 7-1: SerialNumber: syz
[ 1167.505656][ T5947] usb 7-1: config 0 descriptor??
[ 1167.523627][  T921] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1167.695358][T11942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1167.705048][T11942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1167.713541][T11942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1167.812279][ T5947] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1167.824921][ T5947] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1167.839158][ T5947] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1167.849596][  T921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1167.859332][  T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.939168][ T5947] usb 7-1: media controller created
[ 1167.951556][T11942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1167.962023][T11942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1167.971062][  T921] usb 5-1: Product: syz
[ 1167.986558][  T921] usb 5-1: Manufacturer: syz
[ 1167.999729][  T921] usb 5-1: SerialNumber: syz
[ 1168.025206][  T921] usb 5-1: config 0 descriptor??
[ 1168.034652][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1168.190290][T13953] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2057'.
[ 1168.256172][  T921] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1168.634865][T13949] lo speed is unknown, defaulting to 1000
[ 1169.232206][ T5947] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1169.412567][ T5947] usb 7-1: USB disconnect, device number 13
[ 1169.699304][  T921] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1169.716660][  T921] usb 5-1: USB disconnect, device number 12
[ 1169.809220][T13949] chnl_net:caif_netlink_parms(): no params data found
[ 1170.031578][T11942] Bluetooth: hci3: command tx timeout
[ 1170.867315][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1171.018048][T13976] netlink: 'syz.4.2063': attribute type 39 has an invalid length.
[ 1171.083073][T13949] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.105973][T13949] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.118637][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1171.140423][T13949] bridge_slave_0: entered allmulticast mode
[ 1171.164621][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.198008][   T10] usb 6-1: config 0 descriptor??
[ 1171.389444][T13949] bridge_slave_0: entered promiscuous mode
[ 1171.430372][T13981] netlink: 'syz.7.2062': attribute type 3 has an invalid length.
[ 1171.449783][   T10] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1171.972396][   T10] gspca_spca508: reg_read err -32
[ 1171.979471][   T10] gspca_spca508: reg_read err -32
[ 1171.985198][T13976] veth0_macvtap: left promiscuous mode
[ 1172.137903][T11942] Bluetooth: hci3: command tx timeout
[ 1172.472657][ T5947] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1172.621691][   T10] gspca_spca508: reg_read err -110
[ 1172.638062][   T10] gspca_spca508: reg_read err -32
[ 1172.654879][   T10] gspca_spca508: reg write: error -32
[ 1172.677204][T13949] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1172.693311][T13994] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2067' sets config #1
[ 1172.732451][   T10] spca508 6-1:0.0: probe with driver spca508 failed with error -32
[ 1172.740489][   T30] audit: type=1326 audit(1752453961.386:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.2067" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3361f8e929 code=0x0
[ 1172.785800][T13949] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.797989][ T5947] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1172.816870][T13949] bridge_slave_1: entered allmulticast mode
[ 1172.841438][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.929676][T13949] bridge_slave_1: entered promiscuous mode
[ 1172.940483][ T5947] usb 7-1: config 0 descriptor??
[ 1172.962226][ T5947] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1173.175294][ T5947] gspca_spca508: reg_read err -32
[ 1173.191972][ T5947] gspca_spca508: reg_read err -32
[ 1173.766755][T14004] overlayfs: failed to resolve './file0': -2
[ 1174.411627][ T5947] gspca_spca508: reg_read err -110
[ 1174.421659][T11942] Bluetooth: hci3: command tx timeout
[ 1174.440487][ T5947] gspca_spca508: reg_read err -32
[ 1174.574129][ T5947] gspca_spca508: reg write: error -32
[ 1174.631567][ T5947] spca508 7-1:0.0: probe with driver spca508 failed with error -32
[ 1174.709131][T13949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1174.755096][T13949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1175.288441][T13949] team0: Port device team_slave_0 added
[ 1175.309219][T13949] team0: Port device team_slave_1 added
[ 1175.381526][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1175.571692][T13949] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1175.608677][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1175.634749][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1175.682362][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1175.700649][   T10] usb 5-1: config 0 has no interface number 0
[ 1175.723176][   T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1175.732463][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.752356][   T10] usb 5-1: Product: syz
[ 1175.769228][   T10] usb 5-1: Manufacturer: syz
[ 1175.859734][   T10] usb 5-1: SerialNumber: syz
[ 1175.938091][   T10] usb 5-1: config 0 descriptor??
[ 1175.963757][T13949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1176.075520][T13949] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1176.186859][   T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1176.204192][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1176.331902][T13949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1176.345163][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1176.355919][   T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1176.365769][   T10] usb 5-1: media controller created
[ 1176.476849][ T5947] usb 6-1: USB disconnect, device number 10
[ 1176.512431][T11942] Bluetooth: hci3: command tx timeout
[ 1176.525159][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1176.602068][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.608434][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1176.733983][T13949] hsr_slave_0: entered promiscuous mode
[ 1176.760487][T13949] hsr_slave_1: entered promiscuous mode
[ 1176.915022][T13949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1176.932781][T13949] Cannot create hsr debugfs directory
[ 1176.990887][T14018] trusted_key: encrypted_key: insufficient parameters specified
[ 1177.494185][   T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1177.771789][   T10] usb 5-1: USB disconnect, device number 13
[ 1178.644202][   T10] usb 7-1: USB disconnect, device number 14
[ 1178.942504][T14031] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2078'.
[ 1180.609929][T14049] 9pnet_fd: Insufficient options for proto=fd
[ 1181.582914][   T30] audit: type=1326 audit(1752453970.236:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1181.739663][   T30] audit: type=1326 audit(1752453970.236:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1181.765242][T13949] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1181.791138][T13949] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1181.833393][   T30] audit: type=1326 audit(1752453970.236:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1181.856648][T13949] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1181.960064][T14064] netlink: 'syz.3.2087': attribute type 3 has an invalid length.
[ 1182.110189][   T30] audit: type=1326 audit(1752453970.246:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1182.134436][T13949] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1182.227924][   T30] audit: type=1326 audit(1752453970.246:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1183.081921][   T30] audit: type=1326 audit(1752453970.246:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1183.106064][   T30] audit: type=1326 audit(1752453970.246:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1183.128723][   T30] audit: type=1326 audit(1752453970.246:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1183.427343][   T30] audit: type=1326 audit(1752453970.246:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1183.460712][T13949] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1183.573671][   T30] audit: type=1326 audit(1752453970.246:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.6.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c98e929 code=0x7ffc0000
[ 1183.621457][T13949] 8021q: adding VLAN 0 to HW filter on device team0
[ 1183.708654][T10177] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.715841][T10177] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1183.792496][T10177] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.799652][T10177] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1184.107833][T13949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1184.151592][T13949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1185.821537][T13949] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.042388][T13949] veth0_vlan: entered promiscuous mode
[ 1186.124807][T13949] veth1_vlan: entered promiscuous mode
[ 1186.420103][T13949] veth0_macvtap: entered promiscuous mode
[ 1186.508650][T13949] veth1_macvtap: entered promiscuous mode
[ 1186.557653][T14114] netlink: 'syz.7.2100': attribute type 3 has an invalid length.
[ 1187.048857][T13949] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1188.138255][T13949] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1188.219111][T13949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.281437][T13949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.290170][T13949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.326944][T13949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.345841][T14123] overlayfs: failed to resolve './file0': -2
[ 1188.978957][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1189.010629][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1189.179401][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1189.202773][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1189.212544][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2106'.
[ 1189.332956][T14138] syzkaller1: entered promiscuous mode
[ 1189.340485][T14138] syzkaller1: entered allmulticast mode
[ 1191.241551][ T6009] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1191.425663][ T6009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1191.487574][ T6009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1191.535641][ T6009] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[ 1191.546604][ T6009] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1191.596712][ T6009] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1191.637210][ T6009] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1191.691548][ T6009] usb 6-1: Manufacturer: syz
[ 1191.742512][ T6009] usb 6-1: config 0 descriptor??
[ 1193.232252][T14184] syzkaller1: entered promiscuous mode
[ 1193.261570][ T5992] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1193.272863][T14184] syzkaller1: entered allmulticast mode
[ 1193.424574][ T5992] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1193.442015][ T5992] usb 2-1: config 0 has no interface number 0
[ 1193.500949][ T5992] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1193.510631][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.518760][ T5992] usb 2-1: Product: syz
[ 1193.523276][ T5992] usb 2-1: Manufacturer: syz
[ 1193.530191][ T5992] usb 2-1: SerialNumber: syz
[ 1193.544707][ T5992] usb 2-1: config 0 descriptor??
[ 1193.755531][ T5992] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1193.786535][ T5992] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1193.853273][ T5992] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1193.931516][ T5992] usb 2-1: media controller created
[ 1193.975663][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1194.426925][ T5947] usb 6-1: USB disconnect, device number 11
[ 1195.131187][ T5992] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1196.528405][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1196.567118][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1196.663894][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1196.698912][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1197.124888][ T5992] usb 2-1: USB disconnect, device number 10
[ 1197.571642][T14218] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2135'.
[ 1197.784797][T14223] trusted_key: encrypted_key: insufficient parameters specified
[ 1198.875681][T14231] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2136' sets config #1
[ 1198.921337][   T30] kauditd_printk_skb: 38 callbacks suppressed
[ 1198.947188][   T30] audit: type=1326 audit(1752453987.546:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.7.2136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3361f8e929 code=0x0
[ 1199.723658][T14239] syzkaller1: entered promiscuous mode
[ 1199.729167][T14239] syzkaller1: entered allmulticast mode
[ 1200.551130][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'.
[ 1200.656047][T14245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1201.669706][ T6009] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1202.168324][ T6009] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1202.608008][ T6009] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1202.625404][ T6009] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1202.640025][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.672638][ T6009] usb 4-1: Product: syz
[ 1202.685770][ T6009] usb 4-1: Manufacturer: syz
[ 1202.711878][ T6009] usb 4-1: SerialNumber: syz
[ 1202.771688][ T6009] usb 4-1: config 0 descriptor??
[ 1203.338477][ T6009] usb 4-1: selecting invalid altsetting 0
[ 1203.551459][T11259] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1203.681891][ T5946] usb 4-1: USB disconnect, device number 11
[ 1203.890514][T11259] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1203.901450][T11259] usb 6-1: config 0 has no interface number 0
[ 1203.936937][T11259] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1203.951429][T11259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.989842][T11259] usb 6-1: Product: syz
[ 1204.021706][T11259] usb 6-1: Manufacturer: syz
[ 1204.026341][T11259] usb 6-1: SerialNumber: syz
[ 1204.094655][T11259] usb 6-1: config 0 descriptor??
[ 1204.349579][T11259] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[ 1204.443091][T11259] usb 6-1: USB disconnect, device number 12
[ 1204.522403][T14273] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2151'.
[ 1205.083901][T14281] syzkaller1: entered promiscuous mode
[ 1205.089501][T14281] syzkaller1: entered allmulticast mode
[ 1325.421312][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1325.428295][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14290/1:b..l P14294/1:b..l
[ 1325.438001][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=75297, q=860 ncpus=2)
[ 1325.445722][    C0] task:syz-executor    state:R  running task     stack:28456 pid:14294 tgid:14294 ppid:11597  task_flags:0x400040 flags:0x00004002
[ 1325.459841][    C0] Call Trace:
[ 1325.463126][    C0]  <TASK>
[ 1325.466071][    C0]  __schedule+0x16f5/0x4d00
[ 1325.470604][    C0]  ? mas_wr_store_entry+0x41f/0x25b0
[ 1325.475901][    C0]  ? preempt_schedule_irq+0xb5/0x150
[ 1325.481186][    C0]  ? __pfx___schedule+0x10/0x10
[ 1325.486037][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.491671][    C0]  ? __pfx_mas_wr_store_entry+0x10/0x10
[ 1325.497216][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.502857][    C0]  ? arch_stack_walk+0xfc/0x150
[ 1325.507707][    C0]  ? preempt_schedule_irq+0xaa/0x150
[ 1325.512989][    C0]  preempt_schedule_irq+0xb5/0x150
[ 1325.518097][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1325.523812][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.529458][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.535078][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1325.540881][    C0]  irqentry_exit+0x6f/0x90
[ 1325.545280][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1325.551245][    C0] RIP: 0010:lock_acquire+0x175/0x360
[ 1325.556515][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b 13 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[ 1325.576107][    C0] RSP: 0018:ffffc9000402f738 EFLAGS: 00000206
[ 1325.582168][    C0] RAX: cdaf879787345e00 RBX: 0000000000000000 RCX: cdaf879787345e00
[ 1325.590127][    C0] RDX: 0000000000000000 RSI: ffffffff8db869c3 RDI: ffffffff8be29d80
[ 1325.598085][    C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[ 1325.606045][    C0] R10: dffffc0000000000 R11: ffffffff81ad00a0 R12: 0000000000000002
[ 1325.614000][    C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[ 1325.621962][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1325.627063][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1325.633208][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1325.638321][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.643944][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1325.649042][    C0]  ? do_symlinkat+0x1b1/0x3f0
[ 1325.653708][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1325.658807][    C0]  unwind_next_frame+0xc2/0x2390
[ 1325.663731][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1325.668834][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1325.673931][    C0]  ? vfs_symlink+0x143/0x2f0
[ 1325.678514][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1325.684659][    C0]  arch_stack_walk+0x11c/0x150
[ 1325.689417][    C0]  ? do_symlinkat+0x1b1/0x3f0
[ 1325.694087][    C0]  stack_trace_save+0x9c/0xe0
[ 1325.698768][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1325.704141][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.709761][    C0]  save_stack+0xf5/0x1f0
[ 1325.713997][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1325.718834][    C0]  ? __free_frozen_pages+0xc71/0xe70
[ 1325.724107][    C0]  ? __slab_free+0x326/0x400
[ 1325.728692][    C0]  ? qlist_free_all+0x97/0x140
[ 1325.733442][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[ 1325.739061][    C0]  ? __kasan_kmalloc+0x22/0xb0
[ 1325.743810][    C0]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[ 1325.750388][    C0]  ? kmemdup_noprof+0x2b/0x70
[ 1325.755057][    C0]  ? shmem_symlink+0x1ab/0x510
[ 1325.759811][    C0]  ? vfs_symlink+0x143/0x2f0
[ 1325.764387][    C0]  ? do_symlinkat+0x1b1/0x3f0
[ 1325.769056][    C0]  ? page_ext_put+0x97/0xc0
[ 1325.773551][    C0]  __reset_page_owner+0x71/0x1f0
[ 1325.778480][    C0]  __free_frozen_pages+0xc71/0xe70
[ 1325.783591][    C0]  __slab_free+0x326/0x400
[ 1325.788005][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.793623][    C0]  ? __phys_addr+0xd3/0x180
[ 1325.798124][    C0]  qlist_free_all+0x97/0x140
[ 1325.802702][    C0]  kasan_quarantine_reduce+0x148/0x160
[ 1325.808149][    C0]  __kasan_kmalloc+0x22/0xb0
[ 1325.812728][    C0]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[ 1325.819134][    C0]  ? shmem_symlink+0x1ab/0x510
[ 1325.823894][    C0]  kmemdup_noprof+0x2b/0x70
[ 1325.828392][    C0]  shmem_symlink+0x1ab/0x510
[ 1325.832975][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.838609][    C0]  vfs_symlink+0x143/0x2f0
[ 1325.843018][    C0]  do_symlinkat+0x1b1/0x3f0
[ 1325.847515][    C0]  ? __pfx_do_symlinkat+0x10/0x10
[ 1325.852533][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.858154][    C0]  ? getname_flags+0x1e5/0x540
[ 1325.862916][    C0]  __x64_sys_symlinkat+0x95/0xb0
[ 1325.867845][    C0]  do_syscall_64+0xfa/0x3b0
[ 1325.872332][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1325.877525][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.883573][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1325.889194][    C0]  ? exc_page_fault+0x9f/0xf0
[ 1325.893867][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.899744][    C0] RIP: 0033:0x7f2b4c98dea7
[ 1325.904144][    C0] RSP: 002b:00007fffde6c3698 EFLAGS: 00000202 ORIG_RAX: 000000000000010a
[ 1325.912540][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b4c98dea7
[ 1325.920509][    C0] RDX: 00007f2b4ca12390 RSI: 00000000ffffff9c RDI: 00007fffde6c3730
[ 1325.928465][    C0] RBP: 00007fffde6c36dc R08: 0000000000000017 R09: 00007fffde6c33e7
[ 1325.936417][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000007a
[ 1325.944369][    C0] R13: 000055555ba57590 R14: 00000000001261e1 R15: 00007fffde6c3730
[ 1325.952340][    C0]  </TASK>
[ 1325.955341][    C0] task:syz.3.2156      state:R  running task     stack:26024 pid:14290 tgid:14285 ppid:11585  task_flags:0x400140 flags:0x00004006
[ 1325.968817][    C0] Call Trace:
[ 1325.972077][    C0]  <TASK>
[ 1325.974993][    C0]  __schedule+0x16f5/0x4d00
[ 1325.979509][    C0]  ? preempt_schedule_common+0x83/0xd0
[ 1325.984966][    C0]  ? __pfx___schedule+0x10/0x10
[ 1325.989812][    C0]  ? kasan_save_track+0x4f/0x80
[ 1325.994645][    C0]  ? kasan_save_track+0x3e/0x80
[ 1325.999482][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 1326.004494][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[ 1326.010548][    C0]  ? kmalloc_reserve+0xbd/0x290
[ 1326.015386][    C0]  ? __ip_append_data+0x2d99/0x40f0
[ 1326.020578][    C0]  ? ip_append_data+0x10e/0x190
[ 1326.025433][    C0]  ? raw_sendmsg+0x13d7/0x18b0
[ 1326.030190][    C0]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1326.035029][    C0]  ? __sys_sendmmsg+0x227/0x430
[ 1326.039869][    C0]  ? __x64_sys_sendmmsg+0xa0/0xc0
[ 1326.044883][    C0]  ? do_syscall_64+0xfa/0x3b0
[ 1326.049546][    C0]  ? preempt_schedule+0xae/0xc0
[ 1326.054391][    C0]  ? ipt_do_table+0x2a3/0x1640
[ 1326.059146][    C0]  preempt_schedule_common+0x83/0xd0
[ 1326.064458][    C0]  preempt_schedule+0xae/0xc0
[ 1326.069150][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[ 1326.074524][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.080150][    C0]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1326.086214][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1326.091409][    C0]  __local_bh_enable_ip+0x13e/0x1c0
[ 1326.096598][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1326.102307][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.107928][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[ 1326.114530][    C0]  ipt_do_table+0x13dd/0x1640
[ 1326.119224][    C0]  ? ipt_do_table+0x2a3/0x1640
[ 1326.123984][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[ 1326.129002][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.134624][    C0]  ? iptable_mangle_hook+0x189/0x4c0
[ 1326.139902][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.145525][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.151148][    C0]  ? apparmor_ip_postroute+0xcb/0x200
[ 1326.156508][    C0]  ? __pfx_iptable_mangle_hook+0x10/0x10
[ 1326.162150][    C0]  nf_hook_slow+0xc5/0x220
[ 1326.166571][    C0]  nf_hook+0x217/0x380
[ 1326.170635][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1326.175392][    C0]  ? nf_hook+0x9d/0x380
[ 1326.179540][    C0]  ? __pfx_nf_hook+0x10/0x10
[ 1326.184129][    C0]  ? __pfx_ip_finish_output+0x10/0x10
[ 1326.189501][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.195124][    C0]  ? ip_fast_csum+0x1ee/0x2b0
[ 1326.199796][    C0]  ip_output+0x16c/0x220
[ 1326.204032][    C0]  ? __pfx_ip_finish_output+0x10/0x10
[ 1326.209401][    C0]  ip_push_pending_frames+0xbe/0x150
[ 1326.214687][    C0]  raw_sendmsg+0x143f/0x18b0
[ 1326.219288][    C0]  ? __pfx_raw_sendmsg+0x10/0x10
[ 1326.224219][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.229857][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.235476][    C0]  ? aa_sk_perm+0x81e/0x950
[ 1326.239979][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1326.244822][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.250443][    C0]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[ 1326.256864][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.262485][    C0]  ? sock_rps_record_flow+0x19/0x410
[ 1326.267758][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.273378][    C0]  ? inet_sendmsg+0x2f4/0x370
[ 1326.278039][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.283658][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.289282][    C0]  __sock_sendmsg+0x19c/0x270
[ 1326.293951][    C0]  ____sys_sendmsg+0x52d/0x830
[ 1326.298712][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1326.303997][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.309618][    C0]  ? import_iovec+0x74/0xa0
[ 1326.314120][    C0]  ___sys_sendmsg+0x21f/0x2a0
[ 1326.318790][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1326.324001][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.329637][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.335265][    C0]  ? __might_fault+0xb0/0x130
[ 1326.339937][    C0]  __sys_sendmmsg+0x227/0x430
[ 1326.344612][    C0]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1326.349801][    C0]  ? do_futex+0x333/0x420
[ 1326.354134][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.359755][    C0]  ? __sys_connect+0x38d/0x440
[ 1326.364525][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.370147][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1326.374913][    C0]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1326.379760][    C0]  do_syscall_64+0xfa/0x3b0
[ 1326.384255][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1326.389449][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.395499][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1326.401123][    C0]  ? exc_page_fault+0x9f/0xf0
[ 1326.405797][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.411677][    C0] RIP: 0033:0x7fc3a178e929
[ 1326.416078][    C0] RSP: 002b:00007fc3a2615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1326.424486][    C0] RAX: ffffffffffffffda RBX: 00007fc3a19b6160 RCX: 00007fc3a178e929
[ 1326.432446][    C0] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000007
[ 1326.440403][    C0] RBP: 00007fc3a1810b39 R08: 0000000000000000 R09: 0000000000000000
[ 1326.448360][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1326.456316][    C0] R13: 0000000000000000 R14: 00007fc3a19b6160 R15: 00007ffed5422618
[ 1326.464293][    C0]  </TASK>
[ 1332.223177][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1332.237453][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1334.557858][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1334.591633][ T1295] ieee802154 phy1 wpan1: encryption failed: -22