last executing test programs:

2m54.044279861s ago: executing program 4 (id=133):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100ffffffff"})

2m53.232957833s ago: executing program 4 (id=135):
socket$netlink(0x10, 0x3, 0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_ACTIVITY={{}, 0xf}}}, 0x7)

2m53.05050997s ago: executing program 4 (id=136):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffe4d}, 0x40080)
landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_setup(0x2c4b, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$mixer(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
mkdir(0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd)
read(r0, 0x0, 0x0)

2m50.801001233s ago: executing program 4 (id=142):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)

2m50.284920583s ago: executing program 4 (id=143):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
fallocate(r2, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x2000000)

2m49.011613535s ago: executing program 4 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0xf252, 0x200, 0x800, 0x2ffffd, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x5, 0x400000d, 0xf, 0xba55, 0x8da8, 0x0, 0x200, 0x2, 0x1400008, 0xe, 0x4, 0x2, 0xfffffffc, 0x8, 0x9, 0x1, 0x199f, 0x8, 0xfffffffc, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x440, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x9, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x7, 0x3, 0x9, 0x10000, 0x400, 0x8000, 0x3, 0x1000003, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000005, 0x10, 0xfffffff9, 0x7ff, 0x5, 0x1, 0xfffffffd, 0x6, 0x5, 0x7fd, 0xffff, 0x1, 0x96, 0xfffffffd, 0x101, 0x0, 0x1, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x4, 0x6, 0x12, 0x1, 0x1, 0x5, 0x6, 0x38, 0x3], [0x401, 0x5, 0xffff, 0xcd4, 0xd, 0x1e, 0x7, 0x5, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x3ff, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x5, 0x7, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x1f1, 0x8001, 0xbf23, 0x6, 0x9, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xeb, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x401, 0x5, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x8000003, 0x2, 0x763, 0x10000, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x0, 0x3, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x80000008, 0x8a8, 0xb3a, 0x40, 0x7, 0x1, 0x2, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x7, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x4)
write$binfmt_aout(r4, 0x0, 0xff2e)
r6 = syz_open_pts(r4, 0x103100)
dup3(r6, r6, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
getrusage(0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @random="4d1e7ac1f00e"}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={r8, 0x1, 0x6}, 0x10)
socket(0x10, 0x803, 0x2)

2m48.55294072s ago: executing program 32 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0xf252, 0x200, 0x800, 0x2ffffd, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x5, 0x400000d, 0xf, 0xba55, 0x8da8, 0x0, 0x200, 0x2, 0x1400008, 0xe, 0x4, 0x2, 0xfffffffc, 0x8, 0x9, 0x1, 0x199f, 0x8, 0xfffffffc, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x440, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x9, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x7, 0x3, 0x9, 0x10000, 0x400, 0x8000, 0x3, 0x1000003, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000005, 0x10, 0xfffffff9, 0x7ff, 0x5, 0x1, 0xfffffffd, 0x6, 0x5, 0x7fd, 0xffff, 0x1, 0x96, 0xfffffffd, 0x101, 0x0, 0x1, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x4, 0x6, 0x12, 0x1, 0x1, 0x5, 0x6, 0x38, 0x3], [0x401, 0x5, 0xffff, 0xcd4, 0xd, 0x1e, 0x7, 0x5, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x3ff, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x5, 0x7, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x1f1, 0x8001, 0xbf23, 0x6, 0x9, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xeb, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x401, 0x5, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x8000003, 0x2, 0x763, 0x10000, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x0, 0x3, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x80000008, 0x8a8, 0xb3a, 0x40, 0x7, 0x1, 0x2, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x7, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x4)
write$binfmt_aout(r4, 0x0, 0xff2e)
r6 = syz_open_pts(r4, 0x103100)
dup3(r6, r6, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
getrusage(0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @random="4d1e7ac1f00e"}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={r8, 0x1, 0x6}, 0x10)
socket(0x10, 0x803, 0x2)

22.81290612s ago: executing program 2 (id=501):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
poll(0x0, 0x0, 0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
epoll_create(0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
listen(0xffffffffffffffff, 0xd9)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000c79000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40002)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xffffd000)
socket$kcm(0x2d, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

19.988963075s ago: executing program 3 (id=509):
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x40080)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

17.771550598s ago: executing program 2 (id=511):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x40000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

16.488940924s ago: executing program 2 (id=513):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x11}, 0x20)

16.256770205s ago: executing program 2 (id=516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)

14.652463443s ago: executing program 3 (id=518):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000400)=0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$nl_route_sched(r2, &(0x7f0000007000)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001380)=@newtaction={0xcc8, 0x30, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{0x34c, 0x1, [@m_tunnel_key={0x158, 0x17, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x928e, 0x10000000, 0x0, 0x101}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x101, 0x20000007, 0x4, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0xc8, 0x6, "a4f881af725b947f4581c36048270499b2e22991d26f88361d7ea394ff1618365e52345a9cd9c4c8efa9519091bc4012f40e634b9c1b002f3b52ad4e96b955ff16b4516b0ec7a4bbfd6e238a659cae006112a771e22d7cc4b6e628be1d7d025fc766dca93a6fa1fc4267833bcc429f2f123c2b7d41f9ae90c5fdf2ca141652dbcb09fa66ddb65f89e4a83ac76bcb168a119e4c8328ab9e219a5f2865a74486d4313624003d37ac7baca94037f7251909654c09496216027babf1ca86065b59a75f4b2848"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x104, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0xdb, 0x6, "58f1bd67d066d5266ec8cd7e65effae6a478b1d10178cd20fae3dc0850824ef1c75ba3bb20c78e7abd392e8e8abbd5db6a489fff961d8f4d99ac5877bab4bbc99e9c88dbebccde1587f59c967bac1270649efaa6074947140b08ca818b1223e9ad18e09af1f454a400f75d787bb6886bfb8af42b709c1f9614d224feff9f924cad6da4ed0694563f84ca83d23af55c396cd1766a5eb63fddb8900438db84770802ecfb91c247e5970506f0448b842696abcedcfcc757f36d7e32a479ad8863c8e891af5d837440e61b32fada6ced3968447bda59e4d9b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xec, 0x9, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x0, 0x1, 0x3ff}, 0x1}}]}, {0xa7, 0x6, "fd93c420c9d3e49e4dcb804f25b8fc293ae91491e07c9f6e0a732b803403bfd7bbf7552239fd8191459791256470a549e953d6c5fb7ac81682208c5a048a59ead14c61a7063aa3b2fe77a23660a37ffde48f733a041b673ee003cfc16dfab17ef4287cf0fa915a8705c9837bd541f90c6778d83cb99e3b4295e9f1fb63fd66e580b9af4d2e1a00372b91add85a6c5344115340cee329c0eaf901d53488f90a64087e02"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xf3c551f1281b3df2, 0x1}}}}]}, {0x968, 0x1, [@m_ife={0x888, 0x12, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0x8, 0x10000000, 0xd0, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x7}}}]}, {0x7fc, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xdc, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x42}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x78, 0x6, "584fca6ae9e4744a146ca7e57a8e29658f083ab96fe5cee60a6a2c74fbac7e26c7d9faece792faf639c2c60433cfafd10b6012264f272715aec8351d461e70d29b21d388412f46ed4dfa3f1085a767c6a23824e22efca1afd8d1f5b74273b3e5fc60f9ea4a95839bb742f0d7af6eeb8e5c616459"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xcc8}, 0x1, 0x0, 0x0, 0x800}, 0x181)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
migrate_pages(r3, 0x100, 0x0, &(0x7f0000000280)=0x5)
mkdirat(0xffffffffffffff9c, 0x0, 0x88)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000007040)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000110000000000000000baf51a7f5e2f68002a523fcaf86d08abe453872a200d5751a3173f28126f86492c"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r4]}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5}, 0x38)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x3a)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4})
r7 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x0)
close(r7)

13.90971812s ago: executing program 1 (id=520):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x347, 0x80000004, 0x24b, 0x10001, 0x9})

12.832737119s ago: executing program 3 (id=521):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000003c0)={0x980901, 0x0, @name="a13c67a9121fb71a1d3e142fe2fb8f9ba5ee159b867aa7d60668087c38d76487"})
syz_open_dev$sndmidi(&(0x7f0000000040), 0x18000, 0x8000)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.471676256s ago: executing program 5 (id=522):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r0, 0x0, 0x6}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRESDEC], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x14a, 0x0, &(0x7f0000000880)="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", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000680), 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000002280)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x7})
close_range(r4, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

9.994836641s ago: executing program 0 (id=524):
socket$key(0xf, 0x3, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mq_open(0x0, 0x800, 0x10, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

9.898588293s ago: executing program 0 (id=525):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0xe4002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x25a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlockall(0x7)

9.840648274s ago: executing program 5 (id=526):
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000000), 0x3200841, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="18000000010005", 0x7)

8.71554377s ago: executing program 0 (id=527):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
capset(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7})
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @private0, 0xfe}, 0x1c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
r5 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x440f}})
io_uring_enter(r5, 0xdb4, 0xd44a, 0x5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

8.54868507s ago: executing program 2 (id=528):
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x40080)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

8.506477745s ago: executing program 5 (id=529):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.11418617s ago: executing program 1 (id=530):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040))
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

7.016684552s ago: executing program 0 (id=531):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffe4d}, 0x40080)
landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_setup(0x2c4b, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd)
read(r0, 0x0, 0x0)

6.93697246s ago: executing program 1 (id=532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c961}, 0x4008080)

6.68812258s ago: executing program 2 (id=533):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r1 = fsopen(&(0x7f0000000040)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)

6.660303558s ago: executing program 5 (id=534):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x40000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

6.401573408s ago: executing program 3 (id=535):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x0, 0xe, 0x3, "c0713f"}, 0x0, 0x0, 0x0, 0x0})

5.366047897s ago: executing program 5 (id=536):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r0, 0x0, 0x6}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRESDEC], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x14a, 0x0, &(0x7f0000000880)="a1d4a4e152dd2ccdc24eeb359c0ca38b59cc7fa08c2b7a892de6a65921d65deab066b47d818bebf3e55add8e0399d772b4b2810b63a484e9d4c63707fa8a4bb772083f177bb0f0c4a3c600f9015a6764376cbfae2386e629e8cb74fe71ef02ca1f4f30615eb72543c24cf9262675ac890d7bb7ff664fb185b202531e37c29b99c2bcc2d01cd06fea94460450730fe817903277fcef6a6bc3bacedb7b906c22024d48909e1e4474e0c8e2e846ffff4e45b0dada866622b6e86154fe97614ffa35ed84b3a7093309752e5700a9954f078087297dee75cb1bc02469dadea377715f037ec9f9d8716d091a7f15c0089051ec1d0b82cedd624b4020d5f3bfdef18dd45bab9dce41cd741eb6b2da6d242a2a65f454e3160fe8ff84ab06de00eff7d27a010060d309322c40e27e84bcef04175a42eb7720a7422d1fe82d5d493ad5360e263ac326e83fa2ce83d4", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000680), 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000002280)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x7})
close_range(r4, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

5.228945611s ago: executing program 0 (id=537):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0xe4002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x25a, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlockall(0x7)

4.694244919s ago: executing program 5 (id=538):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)

4.342261737s ago: executing program 1 (id=539):
getpid()
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd9, 0x5348b1d2, 0xffffffff, 0x22b, 0x6, "03f07f0900", 0x563, 0x1ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9)
setns(0xffffffffffffffff, 0x24020000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x69, 0xffffffffffffffff, {0x4}}, './file0\x00'})
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x96)

1.908417537s ago: executing program 1 (id=540):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)

1.49685506s ago: executing program 0 (id=541):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$inet(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d})
mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil)

1.496603755s ago: executing program 3 (id=542):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040))
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

1.073330344s ago: executing program 3 (id=543):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x87)
r4 = syz_open_dev$vbi(&(0x7f0000001300), 0x3, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000002680)={0x9e0000, 0x3ff, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000002640)={0x9b0a2f, 0x4, '\x00', @value64=0xb4e20000000000}})

0s ago: executing program 1 (id=544):
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000007c0)={0x40000000000ff80, 0x0, 0x0}, 0x40080)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts.
[   82.390516][ T5787] cgroup: Unknown subsys name 'net'
[   82.631468][ T5787] cgroup: Unknown subsys name 'cpuset'
[   82.707096][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.494187][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.899686][  T988] cfg80211: failed to load regulatory.db
[   87.135061][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.137635][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.152364][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.157516][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.158867][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.287322][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.290223][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.306729][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.321919][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.326939][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.375658][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.386710][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.388136][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.392687][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.395257][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.443968][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.445336][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.446079][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.447399][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.448119][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.527651][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.535627][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.549131][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.562724][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.565702][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.186952][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   88.432480][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   88.543968][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   88.647605][ T5806] chnl_net:caif_netlink_parms(): no params data found
[   88.947674][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.948697][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.949085][ T5800] bridge_slave_0: entered allmulticast mode
[   88.951144][ T5800] bridge_slave_0: entered promiscuous mode
[   88.953999][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   89.065816][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.065942][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.066128][ T5800] bridge_slave_1: entered allmulticast mode
[   89.068829][ T5800] bridge_slave_1: entered promiscuous mode
[   89.207831][ T5802] Bluetooth: hci0: command tx timeout
[   89.366578][ T5802] Bluetooth: hci1: command tx timeout
[   89.477360][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.477480][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.477594][ T5803] bridge_slave_0: entered allmulticast mode
[   89.479093][ T5803] bridge_slave_0: entered promiscuous mode
[   89.537588][ T5810] Bluetooth: hci3: command tx timeout
[   89.537782][ T5802] Bluetooth: hci2: command tx timeout
[   89.570944][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.580684][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.580832][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.581022][ T5803] bridge_slave_1: entered allmulticast mode
[   89.583703][ T5803] bridge_slave_1: entered promiscuous mode
[   89.608185][ T5802] Bluetooth: hci4: command tx timeout
[   89.719795][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.857467][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.857665][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.857848][ T5807] bridge_slave_0: entered allmulticast mode
[   89.859688][ T5807] bridge_slave_0: entered promiscuous mode
[   89.978560][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.978650][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.978781][ T5806] bridge_slave_0: entered allmulticast mode
[   89.980270][ T5806] bridge_slave_0: entered promiscuous mode
[   89.982250][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.982371][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.982546][ T5807] bridge_slave_1: entered allmulticast mode
[   89.984318][ T5807] bridge_slave_1: entered promiscuous mode
[   90.110318][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.110562][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.110704][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.112640][ T5806] bridge_slave_1: entered allmulticast mode
[   90.114168][ T5806] bridge_slave_1: entered promiscuous mode
[   90.188929][ T5800] team0: Port device team_slave_0 added
[   90.250357][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.582190][ T5800] team0: Port device team_slave_1 added
[   90.582983][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.583115][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.583253][ T5812] bridge_slave_0: entered allmulticast mode
[   90.584755][ T5812] bridge_slave_0: entered promiscuous mode
[   90.761621][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.837493][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.837650][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.837766][ T5812] bridge_slave_1: entered allmulticast mode
[   90.839728][ T5812] bridge_slave_1: entered promiscuous mode
[   90.940460][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.943008][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.099638][ T5803] team0: Port device team_slave_0 added
[   91.102337][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.159942][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.159960][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.159974][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.279233][ T5803] team0: Port device team_slave_1 added
[   91.292239][ T5802] Bluetooth: hci0: command tx timeout
[   91.408314][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.408331][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.408355][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.411709][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.446636][ T5802] Bluetooth: hci1: command tx timeout
[   91.607409][ T5802] Bluetooth: hci2: command tx timeout
[   91.607444][ T5802] Bluetooth: hci3: command tx timeout
[   91.686583][ T5802] Bluetooth: hci4: command tx timeout
[   91.779089][ T5807] team0: Port device team_slave_0 added
[   91.791580][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.879191][ T5806] team0: Port device team_slave_0 added
[   91.881268][ T5807] team0: Port device team_slave_1 added
[   91.978165][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.978177][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.978191][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.980225][ T5806] team0: Port device team_slave_1 added
[   92.158733][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.158749][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.158772][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.358977][ T5812] team0: Port device team_slave_0 added
[   92.458931][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.458948][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.458971][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.539278][ T5812] team0: Port device team_slave_1 added
[   92.542499][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.542511][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.542524][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.543923][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.543935][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.543959][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.558248][ T5800] hsr_slave_0: entered promiscuous mode
[   92.559828][ T5800] hsr_slave_1: entered promiscuous mode
[   92.651975][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.651986][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.652001][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.896763][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.896776][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.896791][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.058091][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.058107][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.058121][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.063670][ T5803] hsr_slave_0: entered promiscuous mode
[   93.064512][ T5803] hsr_slave_1: entered promiscuous mode
[   93.065195][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[   93.065281][ T5803] Cannot create hsr debugfs directory
[   93.366541][ T5802] Bluetooth: hci0: command tx timeout
[   93.422807][ T5807] hsr_slave_0: entered promiscuous mode
[   93.423641][ T5807] hsr_slave_1: entered promiscuous mode
[   93.424203][ T5807] debugfs: 'hsr0' already exists in 'hsr'
[   93.424222][ T5807] Cannot create hsr debugfs directory
[   93.512207][ T5806] hsr_slave_0: entered promiscuous mode
[   93.513113][ T5806] hsr_slave_1: entered promiscuous mode
[   93.514790][ T5806] debugfs: 'hsr0' already exists in 'hsr'
[   93.514809][ T5806] Cannot create hsr debugfs directory
[   93.536383][ T5802] Bluetooth: hci1: command tx timeout
[   93.686751][ T5810] Bluetooth: hci2: command tx timeout
[   93.686852][ T5802] Bluetooth: hci3: command tx timeout
[   93.766667][ T5802] Bluetooth: hci4: command tx timeout
[   94.063688][ T5812] hsr_slave_0: entered promiscuous mode
[   94.064487][ T5812] hsr_slave_1: entered promiscuous mode
[   94.065027][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   94.065051][ T5812] Cannot create hsr debugfs directory
[   95.225989][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.264570][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.280545][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.332618][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.441866][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.446633][ T5802] Bluetooth: hci0: command tx timeout
[   95.481783][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.519341][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.562296][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.616849][ T5802] Bluetooth: hci1: command tx timeout
[   95.656036][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.690547][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.721706][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.760950][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.766676][ T5802] Bluetooth: hci3: command tx timeout
[   95.766705][ T5802] Bluetooth: hci2: command tx timeout
[   95.856665][ T5810] Bluetooth: hci4: command tx timeout
[   95.885445][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.918547][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.960554][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.008883][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.142430][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.183105][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.183403][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.232474][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.262951][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.354385][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   96.398128][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.398274][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.405669][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.439649][ T1432] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.439792][ T1432] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.501464][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   96.532447][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.544302][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.544424][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.585723][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.585803][ T4183] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.633025][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   96.664499][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.683446][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.683558][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.733246][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.733402][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.804660][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   96.853765][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.865458][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.865641][ T4183] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.926305][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.929574][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.018828][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   97.066029][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.066252][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.131818][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.131967][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.186180][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.344726][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.484889][ T5800] veth0_vlan: entered promiscuous mode
[   97.531970][ T5800] veth1_vlan: entered promiscuous mode
[   97.562944][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.640639][ T5803] veth0_vlan: entered promiscuous mode
[   97.695691][ T5803] veth1_vlan: entered promiscuous mode
[   97.739893][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.743467][ T5800] veth0_macvtap: entered promiscuous mode
[   97.772343][ T5800] veth1_macvtap: entered promiscuous mode
[   97.823673][ T5807] veth0_vlan: entered promiscuous mode
[   97.850271][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.853488][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.883079][ T5803] veth0_macvtap: entered promiscuous mode
[   97.890866][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.897689][ T5807] veth1_vlan: entered promiscuous mode
[   97.920120][ T5803] veth1_macvtap: entered promiscuous mode
[   97.945664][ T1060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.969222][ T1060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.982922][ T1060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.000684][ T1060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.084325][ T5806] veth0_vlan: entered promiscuous mode
[   98.108903][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.182671][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.268237][ T5806] veth1_vlan: entered promiscuous mode
[   98.288388][ T5807] veth0_macvtap: entered promiscuous mode
[   98.291053][ T1421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.301282][ T1421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.307080][ T1421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.315216][ T1421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.315738][ T5807] veth1_macvtap: entered promiscuous mode
[   98.485216][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.485241][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.568722][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.631553][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.644423][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.644442][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.644839][ T5806] veth0_macvtap: entered promiscuous mode
[   98.686823][ T5812] veth0_vlan: entered promiscuous mode
[   98.711537][ T5806] veth1_macvtap: entered promiscuous mode
[   98.712967][ T1129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.719665][ T1129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.719741][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.719754][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.726299][ T1129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.760924][ T1129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.800403][ T5812] veth1_vlan: entered promiscuous mode
[   98.873550][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.873571][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.921685][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.008985][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.118001][ T1060] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.129527][ T1060] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.131618][ T1060] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.131917][ T1060] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.191954][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.191980][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.201575][ T5812] veth0_macvtap: entered promiscuous mode
[   99.396360][ T5812] veth1_macvtap: entered promiscuous mode
[  101.714289][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.714309][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.772402][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.929708][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.988993][ T1432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.989013][ T1432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.063200][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.223121][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.268201][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.288285][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.325125][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.325521][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.325537][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.726479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.736468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.746451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.756449][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.766456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.776445][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.786444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.796443][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.806465][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.816447][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  103.065315][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.065329][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.250171][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.250193][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.266589][ T5960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12'.
[  111.189070][ T5998] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.855522][ T6016] netlink: 244 bytes leftover after parsing attributes in process `syz.0.30'.
[  114.402405][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.456909][ T5905] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  115.824092][ T5905] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  115.824123][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.824143][ T5905] usb 5-1: Product: syz
[  115.824157][ T5905] usb 5-1: Manufacturer: syz
[  115.824172][ T5905] usb 5-1: SerialNumber: syz
[  116.080903][ T5905] usb 5-1: config 0 descriptor??
[  116.980342][ T5905] hub 5-1:0.0: bad descriptor, ignoring hub
[  116.980382][ T5905] hub 5-1:0.0: probe with driver hub failed with error -5
[  117.289480][ T5810] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  117.290404][ T5810] Bluetooth: hci1: Injecting HCI hardware error event
[  117.294452][ T5810] Bluetooth: hci1: hardware error 0x00
[  117.816140][ T5905] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  117.911623][ T5905] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  117.911725][ T5905] dib0700: firmware download failed at 7 with -22
[  118.084747][ T5905] usb 5-1: USB disconnect, device number 2
[  118.191417][ T6051] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.386818][ T6059] process 'syz.0.42' launched './file0' with NULL argv: empty string added
[  120.191426][ T5810] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  123.364052][ T6100] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.576615][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  123.756648][    T9] usb 1-1: Using ep0 maxpacket: 16
[  124.231772][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.231825][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  124.231848][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.250641][    T9] usb 1-1: config 0 descriptor??
[  124.690500][    T9] hid (null): global environment stack underflow
[  124.748406][    T9] mcp2221 0003:04D8:00DD.0001: global environment stack underflow
[  124.748425][    T9] mcp2221 0003:04D8:00DD.0001: item 0 0 1 11 parsing failed
[  124.748878][    T9] mcp2221 0003:04D8:00DD.0001: can't parse reports
[  124.748936][    T9] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22
[  125.119183][    T9] usb 1-1: USB disconnect, device number 2
[  125.852717][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.58'.
[  131.526643][ T5810] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  131.546182][ T5810] Bluetooth: hci2: Injecting HCI hardware error event
[  131.551147][ T5802] Bluetooth: hci2: hardware error 0x00
[  132.222249][ T6179] warning: `syz.0.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  132.335380][ T6186] fuse: Bad value for 'group_id'
[  132.335401][ T6186] fuse: Bad value for 'group_id'
[  132.459283][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.79'.
[  133.765610][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  133.765706][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  133.936571][ T5802] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  135.843065][ T6220] fuse: Bad value for 'group_id'
[  135.843125][ T6220] fuse: Bad value for 'group_id'
[  137.521081][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.931165][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.647214][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  138.804677][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  138.804715][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.804737][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.804780][    T9] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  138.804804][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.893807][    T9] usb 5-1: config 0 descriptor??
[  138.992425][ T6256] fuse: Bad value for 'group_id'
[  138.992497][ T6256] fuse: Bad value for 'group_id'
[  139.287734][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.364522][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.416537][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.453638][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.511827][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.649225][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.749580][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.761212][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  139.761334][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  139.806047][    T9] usb 5-1: USB disconnect, device number 3
[  141.033205][    C0] vkms_vblank_simulate: vblank timer overrun
[  141.221198][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'.
[  141.635370][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  141.906667][    C0] vkms_vblank_simulate: vblank timer overrun
[  141.948493][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  141.948512][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.952790][   T10] usb 5-1: config 0 descriptor??
[  141.997584][   T10] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  142.412268][ T6287] netlink: 'syz.0.112': attribute type 9 has an invalid length.
[  142.412292][ T6287] netlink: 'syz.0.112': attribute type 11 has an invalid length.
[  142.412305][ T6287] netlink: 'syz.0.112': attribute type 12 has an invalid length.
[  142.412320][ T6287] netlink: 210060 bytes leftover after parsing attributes in process `syz.0.112'.
[  142.418639][ T6287] openvswitch: netlink: Message has 4 unknown bytes.
[  143.836795][   T10] usb 5-1: USB disconnect, device number 4
[  146.155963][ T6315] Bluetooth: MGMT ver 1.23
[  146.269735][ T6314] syz.1.121 uses obsolete (PF_INET,SOCK_PACKET)
[  146.270557][ T6314] syzkaller1: entered promiscuous mode
[  146.270579][ T6314] syzkaller1: entered allmulticast mode
[  146.606705][ T5881] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  146.761695][ T5881] usb 3-1: no configurations
[  146.761714][ T5881] usb 3-1: can't read configurations, error -22
[  146.920512][ T5881] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  147.068868][ T5881] usb 3-1: no configurations
[  147.068888][ T5881] usb 3-1: can't read configurations, error -22
[  147.070097][ T5881] usb usb3-port1: attempt power cycle
[  147.426558][ T5881] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  147.449178][ T5881] usb 3-1: no configurations
[  147.449197][ T5881] usb 3-1: can't read configurations, error -22
[  147.836585][ T5881] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  147.858988][ T5881] usb 3-1: no configurations
[  147.859007][ T5881] usb 3-1: can't read configurations, error -22
[  147.859397][ T5881] usb usb3-port1: unable to enumerate USB device
[  149.396579][ T5882] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  149.491125][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'.
[  149.560268][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  149.560302][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.560324][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  149.560365][ T5882] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  149.560388][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.567773][ T5882] usb 5-1: config 0 descriptor??
[  150.449747][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449785][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449813][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449839][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449865][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449891][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449945][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.449981][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.450007][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.450034][ T5882] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0
[  150.669955][ T1798] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  150.796785][ T1798] usb 3-1: device descriptor read/64, error -71
[  150.924678][ T5882] hid-multitouch 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  151.037820][ T1798] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  151.045860][ T5882] usb 5-1: USB disconnect, device number 5
[  151.186609][ T1798] usb 3-1: device descriptor read/64, error -71
[  151.297415][ T1798] usb usb3-port1: attempt power cycle
[  151.360662][ T6350] fido_id[6350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  151.666763][ T1798] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  151.688076][ T1798] usb 3-1: device descriptor read/8, error -71
[  151.957136][ T1798] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  151.980306][ T1798] usb 3-1: device descriptor read/8, error -71
[  152.087105][ T1798] usb usb3-port1: unable to enumerate USB device
[  152.366544][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  153.450870][ T5882] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  153.450901][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.450921][ T5882] usb 2-1: Product: syz
[  153.450935][ T5882] usb 2-1: Manufacturer: syz
[  153.450950][ T5882] usb 2-1: SerialNumber: syz
[  154.555257][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  154.555322][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  155.011331][ T6379] =======================================================
[  155.011331][ T6379] WARNING: The mand mount option has been deprecated and
[  155.011331][ T6379]          and is ignored by this kernel. Remove the mand
[  155.011331][ T6379]          option from the mount to silence this warning.
[  155.011331][ T6379] =======================================================
[  155.126702][ T1798] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  155.278706][ T1798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.278732][ T1798] usb 3-1: config 0 has no interfaces?
[  155.281511][ T1798] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  155.281539][ T1798] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  155.281553][ T1798] usb 3-1: Product: syz
[  155.281560][ T1798] usb 3-1: Manufacturer: syz
[  155.281568][ T1798] usb 3-1: SerialNumber: syz
[  155.337767][ T1798] usb 3-1: config 0 descriptor??
[  155.644664][ T6355] input: syz1 as /devices/virtual/input/input5
[  155.870451][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  155.870512][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  155.871926][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  155.973924][ T5882] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  156.068828][ T5882] usb 2-1: USB disconnect, device number 2
[  156.901660][ T5950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.221885][ T6391] vxcan1: entered promiscuous mode
[  157.723254][ T5950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.756883][ T1229] usb 3-1: USB disconnect, device number 10
[  157.778342][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  157.930058][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  157.930092][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  157.933038][   T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  157.933066][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.933086][   T10] usb 4-1: Product: syz
[  157.933101][   T10] usb 4-1: Manufacturer: syz
[  157.933116][   T10] usb 4-1: SerialNumber: syz
[  157.966618][   T10] usb 4-1: config 0 descriptor??
[  157.967719][ T6398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  157.967919][ T6398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  158.438168][ T6398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  158.438358][ T6398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  158.726070][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.740473][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.743189][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.746175][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  158.747983][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  158.842262][   T10] Error reading MAC address
[  158.861493][ T5950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.882603][ T5881] IPVS: starting estimator thread 0...
[  158.934655][   T10] usb 4-1: USB disconnect, device number 2
[  158.986790][ T6404] IPVS: using max 8 ests per chain, 19200 per kthread
[  159.643508][ T6409] sctp: [Deprecated]: syz.2.153 (pid 6409) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.643508][ T6409] Use struct sctp_sack_info instead
[  159.684003][ T5950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.139942][ T5802] Bluetooth: hci4: command tx timeout
[  162.296630][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  162.490865][ T6423] Zero length message leads to an empty skb
[  162.543879][ T5881] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  162.543908][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.543937][ T5881] usb 3-1: Product: syz
[  162.543952][ T5881] usb 3-1: Manufacturer: syz
[  162.543965][ T5881] usb 3-1: SerialNumber: syz
[  163.088147][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  163.088210][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  163.538179][ T6432] ubi31: attaching mtd0
[  163.566563][ T6432] ubi31: scanning is finished
[  163.566586][ T6432] ubi31: empty MTD device detected
[  163.839573][ T5950] bridge_slave_1: left allmulticast mode
[  163.839756][ T5950] bridge_slave_1: left promiscuous mode
[  163.896102][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.050123][ T5950] bridge_slave_0: left allmulticast mode
[  164.050153][ T5950] bridge_slave_0: left promiscuous mode
[  164.050431][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.141606][ T6415] input: syz1 as /devices/virtual/input/input6
[  164.167320][ T5802] Bluetooth: hci4: command tx timeout
[  164.225265][ T6432] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  164.614793][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  164.614842][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  164.616037][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  164.753502][ T5881] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  164.808069][ T5881] usb 3-1: USB disconnect, device number 11
[  165.976914][ T6447] netlink: 180 bytes leftover after parsing attributes in process `syz.2.163'.
[  165.977806][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'.
[  167.101370][ T5802] Bluetooth: hci4: command tx timeout
[  169.140794][ T5802] Bluetooth: hci4: command tx timeout
[  170.279099][ T1229] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  171.099865][ T1229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.099892][ T1229] usb 1-1: config 0 has no interfaces?
[  171.123370][ T1229] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  171.123400][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  171.123420][ T1229] usb 1-1: Product: syz
[  171.123434][ T1229] usb 1-1: Manufacturer: syz
[  171.123448][ T1229] usb 1-1: SerialNumber: syz
[  171.166076][ T1229] usb 1-1: config 0 descriptor??
[  174.879641][ T5883] usb 1-1: USB disconnect, device number 3
[  175.578250][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.597569][ T6517] netlink: 'syz.3.185': attribute type 5 has an invalid length.
[  175.637117][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.683405][ T5950] bond0 (unregistering): Released all slaves
[  175.906560][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  175.977300][ T6529] fuse: Unknown parameter 'grou00000000000000000000'
[  176.036559][ T5905] usb 4-1: device descriptor read/64, error -71
[  176.276564][ T5905] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  176.406604][ T5905] usb 4-1: device descriptor read/64, error -71
[  176.518574][ T5905] usb usb4-port1: attempt power cycle
[  177.536592][ T5905] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  179.627865][ T6402] chnl_net:caif_netlink_parms(): no params data found
[  180.786530][ T5788] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  180.939607][ T5788] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  180.939626][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.996861][ T6566] fuse: Unknown parameter 'grou00000000000000000000'
[  181.187474][ T5788] usb 3-1: config 0 descriptor??
[  181.276250][ T5788] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  182.621190][ T5905] usb 4-1: device descriptor read/8, error -110
[  183.025713][ T5905] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  183.037571][ T5905] usb 4-1: device descriptor read/8, error -32
[  183.150388][ T5905] usb usb4-port1: unable to enumerate USB device
[  183.156656][ T1229] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  183.248184][ T5788] gspca_stv06xx: I2C: Read error writing address: -71
[  183.285105][ T6591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.202'.
[  183.299925][ T1229] usb 1-1: device descriptor read/64, error -71
[  183.305819][ T5788] usb 3-1: USB disconnect, device number 12
[  183.544502][ T1229] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  183.669797][ T5950] hsr_slave_0: left promiscuous mode
[  183.687364][ T1229] usb 1-1: device descriptor read/64, error -71
[  183.736567][ T5950] hsr_slave_1: left promiscuous mode
[  183.747542][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.747668][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.797018][ T1229] usb usb1-port1: attempt power cycle
[  183.821525][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.821543][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.212738][ T5950] veth1_macvtap: left promiscuous mode
[  184.212907][ T5950] veth0_macvtap: left promiscuous mode
[  184.213477][ T5950] veth1_vlan: left promiscuous mode
[  184.213712][ T5950] veth0_vlan: left promiscuous mode
[  184.216583][ T1229] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  184.237576][ T1229] usb 1-1: device descriptor read/8, error -71
[  184.527403][ T1229] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  184.620742][ T1229] usb 1-1: device descriptor read/8, error -71
[  184.858853][ T1229] usb usb1-port1: unable to enumerate USB device
[  188.088998][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.161728][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.182173][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.247554][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.392509][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.513669][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.648275][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  188.828327][   T10] usb 1-1: config 7 has an invalid interface number: 101 but max is 0
[  188.828346][   T10] usb 1-1: config 7 has no interface number 0
[  188.830378][   T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  188.830395][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.830405][   T10] usb 1-1: Product: syz
[  188.830412][   T10] usb 1-1: Manufacturer: syz
[  188.830419][   T10] usb 1-1: SerialNumber: syz
[  189.176557][ T1798] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  189.363802][ T1798] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  189.363823][ T1798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.418287][ T1798] usb 4-1: config 0 descriptor??
[  189.465154][ T1798] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  189.709708][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.844493][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.899401][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.011184][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.248338][ T6637] syz.2.214 (6637) used greatest stack depth: 18072 bytes left
[  191.266213][   T10] as10x_usb: device has been detected
[  191.268608][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  191.315677][   T10] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  191.403925][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.464394][   T10] as10x_usb: error during firmware upload part1
[  191.465197][   T10] Registered device Elgato EyeTV DTT Deluxe
[  191.515395][   T10] usb 1-1: USB disconnect, device number 8
[  191.675719][   T10] Unregistered device Elgato EyeTV DTT Deluxe
[  191.703916][ T1798] gspca_stv06xx: I2C: Read error writing address: -71
[  191.721939][   T10] as10x_usb: device has been disconnected
[  191.736699][ T1798] usb 4-1: USB disconnect, device number 7
[  193.023142][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.219'.
[  194.510678][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  194.512497][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  195.471961][ T5950] team0 (unregistering): Port device team_slave_1 removed
[  196.908740][ T5950] team0 (unregistering): Port device team_slave_0 removed
[  198.337611][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  198.499432][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  198.499462][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.505215][ T5883] usb 3-1: config 0 descriptor??
[  198.548849][ T5883] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  199.956329][ T5882] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  200.096576][ T5882] usb 1-1: device descriptor read/64, error -71
[  200.336546][ T5882] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  200.466526][ T5882] usb 1-1: device descriptor read/64, error -71
[  200.578053][ T5882] usb usb1-port1: attempt power cycle
[  200.754003][ T5883] gspca_stv06xx: I2C: Read error writing address: -71
[  200.768750][ T5883] usb 3-1: USB disconnect, device number 13
[  200.916577][ T5882] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  200.937235][ T5882] usb 1-1: device descriptor read/8, error -71
[  201.176619][ T5882] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  201.197174][ T5882] usb 1-1: device descriptor read/8, error -71
[  201.265596][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.265768][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.265982][ T6402] bridge_slave_0: entered allmulticast mode
[  201.300815][ T6402] bridge_slave_0: entered promiscuous mode
[  201.312931][ T5882] usb usb1-port1: unable to enumerate USB device
[  201.454348][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.454487][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.454715][ T6402] bridge_slave_1: entered allmulticast mode
[  201.618525][ T6402] bridge_slave_1: entered promiscuous mode
[  205.926548][ T5788] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  206.099574][ T5788] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  206.102534][ T5788] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  206.102562][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  206.102583][ T5788] usb 4-1: Product: syz
[  206.102597][ T5788] usb 4-1: Manufacturer: syz
[  206.102611][ T5788] usb 4-1: SerialNumber: syz
[  206.311563][ T6739] netlink: 180 bytes leftover after parsing attributes in process `syz.1.244'.
[  206.312538][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[  206.450665][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.505742][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.754089][ T6402] team0: Port device team_slave_0 added
[  206.788709][ T6402] team0: Port device team_slave_1 added
[  207.658698][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.658709][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.658724][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.905810][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.905827][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.905852][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.898714][ T5883] usb 4-1: USB disconnect, device number 8
[  210.616527][ T1229] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  210.924398][ T6402] hsr_slave_0: entered promiscuous mode
[  210.948141][ T1229] usb 1-1: device descriptor read/64, error -71
[  211.852532][ T5883] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  211.861273][ T6402] hsr_slave_1: entered promiscuous mode
[  211.888475][ T6402] debugfs: 'hsr0' already exists in 'hsr'
[  211.888503][ T6402] Cannot create hsr debugfs directory
[  211.996623][ T1229] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  212.066653][ T5118] Bluetooth: hci3: command 0x0406 tx timeout
[  212.127790][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  212.127824][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.127847][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  212.127889][ T5883] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  212.127913][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.198642][ T5883] usb 3-1: config 0 descriptor??
[  212.407180][ T5802] Bluetooth: hci0: command 0x0406 tx timeout
[  212.434218][ T6796] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.294459][ T5883] hid_parser_main: 12 callbacks suppressed
[  213.294483][ T5883] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[  213.294514][ T5883] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[  213.294543][ T5883] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[  213.294571][ T5883] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[  213.294600][ T5883] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[  213.736564][ T5883] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  213.811442][ T5883] usb 3-1: USB disconnect, device number 14
[  214.080980][ T6811] fido_id[6811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  214.108264][ T6801] syz.1.256 (6801): drop_caches: 2
[  214.186532][ T5905] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  214.337015][ T5882] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  214.358018][ T5905] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  214.375775][ T5905] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  214.375810][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  214.375830][ T5905] usb 4-1: Product: syz
[  214.375844][ T5905] usb 4-1: Manufacturer: syz
[  214.375858][ T5905] usb 4-1: SerialNumber: syz
[  214.552915][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  214.552942][ T5882] usb 1-1: config 0 has no interface number 0
[  214.553069][ T5882] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  214.553132][ T5882] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  214.553261][ T5882] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  214.553331][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.852589][ T5882] usb 1-1: config 0 descriptor??
[  215.148537][ T6815] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  215.356255][ T5882] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  215.604020][ T5882] usb 1-1: USB disconnect, device number 15
[  215.604120][    C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  217.346070][ T6402] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  217.698077][ T1229] usb 4-1: USB disconnect, device number 9
[  217.978589][ T6858] netlink: 180 bytes leftover after parsing attributes in process `syz.3.270'.
[  217.979195][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'.
[  218.188342][ T6862] binder: 6861:6862 unknown command 0
[  218.188364][ T6862] binder: 6861:6862 ioctl c0306201 200000000080 returned -22
[  218.700478][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  218.719047][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  218.722492][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  218.744194][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  218.745070][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.886619][ T5810] Bluetooth: hci5: command tx timeout
[  223.017340][ T5900] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  223.019584][ T5810] Bluetooth: hci5: command tx timeout
[  223.188880][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  223.188910][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.205340][ T5900] usb 4-1: config 0 descriptor??
[  223.231484][ T5900] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  225.057858][ T5810] Bluetooth: hci5: command tx timeout
[  225.488263][ T5900] gspca_stv06xx: I2C: Read error writing address: -71
[  225.494154][ T5900] usb 4-1: USB disconnect, device number 10
[  225.588447][ T5882] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  225.748761][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  225.748796][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.748818][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  225.748860][ T5882] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  225.748883][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.754619][ T5882] usb 1-1: config 0 descriptor??
[  226.679123][ T6946] fuse: Bad value for 'fd'
[  226.753266][ T5882] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0
[  226.753290][ T5882] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0
[  226.753307][ T5882] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0
[  226.753323][ T5882] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0
[  226.753339][ T5882] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0
[  226.911559][ T5882] hid-multitouch 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[  227.126759][ T5810] Bluetooth: hci5: command tx timeout
[  227.522785][ T6871] chnl_net:caif_netlink_parms(): no params data found
[  227.549010][ T5882] usb 1-1: USB disconnect, device number 16
[  228.113705][ T6965] fido_id[6965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  229.542471][ T6977] binder: 6976:6977 unknown command 0
[  229.542492][ T6977] binder: 6976:6977 ioctl c0306201 200000000080 returned -22
[  229.551725][ T6977] binder: BINDER_SET_CONTEXT_MGR already set
[  229.551739][ T6977] binder: 6976:6977 ioctl 4018620d 200000000040 returned -16
[  230.276125][ T5900] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  230.373095][ T5905] IPVS: starting estimator thread 0...
[  230.456621][ T6984] IPVS: using max 9 ests per chain, 21600 per kthread
[  230.471995][ T5900] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  230.472028][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  230.472053][ T5900] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  230.475401][ T5900] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  230.475427][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.475452][ T5900] usb 1-1: Product: syz
[  230.475466][ T5900] usb 1-1: Manufacturer: syz
[  230.475480][ T5900] usb 1-1: SerialNumber: syz
[  230.537663][ T5900] usb 1-1: config 0 descriptor??
[  230.538502][ T6979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  230.538633][ T6979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  230.547491][ T5900] usb 1-1: ucan: probing device on interface #0
[  231.118185][   T44] bridge_slave_1: left allmulticast mode
[  231.118204][   T44] bridge_slave_1: left promiscuous mode
[  231.118425][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.198996][   T44] bridge_slave_0: left allmulticast mode
[  231.199017][   T44] bridge_slave_0: left promiscuous mode
[  231.199489][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.280702][ T5900] usb 1-1: ucan: device reported invalid tx-fifo size
[  231.280724][ T5900] usb 1-1: ucan: probe failed; try to update the device firmware
[  231.842834][ T1229] usb 1-1: USB disconnect, device number 17
[  231.994521][ T7002] fuse: Bad value for 'fd'
[  232.812015][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.729086][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.793549][   T44] bond0 (unregistering): Released all slaves
[  233.796997][ T5900] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  233.958462][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  233.958483][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.958495][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  233.958519][ T5900] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  233.958531][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.961673][ T5900] usb 1-1: config 0 descriptor??
[  234.082112][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.083461][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.083689][ T6871] bridge_slave_0: entered allmulticast mode
[  234.137021][ T6871] bridge_slave_0: entered promiscuous mode
[  234.145931][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.160178][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.160407][ T6871] bridge_slave_1: entered allmulticast mode
[  234.162740][ T6871] bridge_slave_1: entered promiscuous mode
[  234.508224][ T5900] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[  234.508262][ T5900] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[  234.508292][ T5900] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[  234.508321][ T5900] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[  234.508349][ T5900] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[  234.517135][ T5900] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[  234.879148][ T1229] usb 1-1: USB disconnect, device number 18
[  235.092087][   T44] hsr_slave_0: left promiscuous mode
[  235.158493][   T44] hsr_slave_1: left promiscuous mode
[  235.162369][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.217250][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.350413][ T7037] fido_id[7037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  237.766089][ T7062] fuse: Bad value for 'fd'
[  238.120553][   T44] team0 (unregistering): Port device team_slave_1 removed
[  238.202155][   T44] team0 (unregistering): Port device team_slave_0 removed
[  239.103056][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.319230][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.554471][ T6871] team0: Port device team_slave_0 added
[  241.563114][ T6871] team0: Port device team_slave_1 added
[  242.220548][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.220565][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.220587][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.223060][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.223074][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.223099][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.036176][ T7135] fuse: Bad value for 'fd'
[  247.682998][ T6871] hsr_slave_0: entered promiscuous mode
[  247.694202][ T6871] hsr_slave_1: entered promiscuous mode
[  247.695209][ T6871] debugfs: 'hsr0' already exists in 'hsr'
[  247.695232][ T6871] Cannot create hsr debugfs directory
[  248.101971][ T7181] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.351'.
[  249.444431][ T5810] Bluetooth: hci0: unexpected event for opcode 0x1004
[  253.038805][ T1229] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  253.453462][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  253.453683][ T5810] Bluetooth: hci0: Injecting HCI hardware error event
[  253.455831][ T5810] Bluetooth: hci0: hardware error 0x00
[  253.532008][ T1229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  253.532040][ T1229] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  253.532099][ T1229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  253.568075][ T1229] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  253.568104][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.568123][ T1229] usb 4-1: Product: syz
[  253.568137][ T1229] usb 4-1: Manufacturer: syz
[  253.568150][ T1229] usb 4-1: SerialNumber: syz
[  253.616723][ T1229] usb 4-1: config 0 descriptor??
[  253.619691][ T7228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  253.619812][ T7228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  253.627473][ T1229] usb 4-1: ucan: probing device on interface #0
[  254.845631][ T1229] usb 4-1: ucan: failed to retrieve device info
[  254.845646][ T1229] usb 4-1: ucan: probe failed; try to update the device firmware
[  254.891119][ T1229] usb 4-1: USB disconnect, device number 11
[  256.423357][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  256.423427][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  256.424873][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  257.027197][ T7274] tipc: Started in network mode
[  257.027227][ T7274] tipc: Node identity 3e1b6fc9104b, cluster identity 4711
[  257.035145][ T7274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.070005][ T7274] syzkaller0: entered promiscuous mode
[  257.070032][ T7274] syzkaller0: entered allmulticast mode
[  257.375406][ T7274] tipc: Resetting bearer <eth:syzkaller0>
[  257.457245][ T7273] tipc: Resetting bearer <eth:syzkaller0>
[  257.836522][ T5905] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  257.996868][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  258.199000][    T9] tipc: Node number set to 777023433
[  258.403275][ T5905] usb 1-1: config 0 has an invalid interface number: 169 but max is 0
[  258.403329][ T5905] usb 1-1: config 0 has no interface number 0
[  258.403575][ T5905] usb 1-1: config 0 interface 169 has no altsetting 0
[  258.486060][ T5905] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=36.38
[  258.486092][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.486113][ T5905] usb 1-1: Product: syz
[  258.486127][ T5905] usb 1-1: Manufacturer: syz
[  258.486142][ T5905] usb 1-1: SerialNumber: syz
[  258.539875][ T5905] usb 1-1: config 0 descriptor??
[  258.558315][ T5905] ums-freecom 1-1:0.169: USB Mass Storage device detected
[  258.890526][ T7273] tipc: Disabling bearer <eth:syzkaller0>
[  259.466318][ T5905] usb 1-1: USB disconnect, device number 19
[  259.830478][ T6871] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  259.856543][ T5900] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  259.987881][ T6871] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  260.041082][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  260.041114][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  260.041140][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  260.044095][ T5900] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  260.044123][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.044143][ T5900] usb 4-1: Product: syz
[  260.044158][ T5900] usb 4-1: Manufacturer: syz
[  260.044173][ T5900] usb 4-1: SerialNumber: syz
[  260.092635][ T5900] usb 4-1: config 0 descriptor??
[  260.094625][ T7313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  260.094915][ T7313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  260.103433][ T5900] usb 4-1: ucan: probing device on interface #0
[  260.106614][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  260.213307][ T6871] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  260.260328][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  260.260359][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.346104][ T6871] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  260.371011][ T5905] usb 2-1: config 0 descriptor??
[  260.398608][ T5905] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  260.496580][ T5882] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  260.573905][ T5900] usb 4-1: ucan: failed to retrieve device info
[  260.573928][ T5900] usb 4-1: ucan: probe failed; try to update the device firmware
[  260.631087][ T5900] usb 4-1: USB disconnect, device number 12
[  260.656514][ T5882] usb 1-1: Using ep0 maxpacket: 16
[  260.659396][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.659420][ T5882] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  260.659433][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.711004][ T5882] usb 1-1: config 0 descriptor??
[  261.054797][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.682558][ T6871] 8021q: adding VLAN 0 to HW filter on device team0
[  261.839061][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.840792][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.915734][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.916150][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.916181][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.916209][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.921529][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.921570][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.921598][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.923002][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.923037][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.923065][ T5882] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0
[  261.995578][ T5882] corsair-psu 0003:1B1C:1C09.0006: item 0 0 0 8 parsing failed
[  262.003283][ T5882] corsair-psu 0003:1B1C:1C09.0006: probe with driver corsair-psu failed with error -22
[  262.034032][ T5905] gspca_stv06xx: I2C: Read error writing address: -71
[  262.047422][ T5905] usb 2-1: USB disconnect, device number 3
[  262.116088][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.138302][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.138462][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.141934][ T5882] usb 1-1: USB disconnect, device number 20
[  263.099218][    C0] vkms_vblank_simulate: vblank timer overrun
[  263.236146][ T7381] binder: 7380:7381 unknown command 0
[  263.236172][ T7381] binder: 7380:7381 ioctl c0306201 200000000080 returned -22
[  263.353647][ T7379] overlayfs: failed to resolve './file0': -2
[  263.795777][    C0] vkms_vblank_simulate: vblank timer overrun
[  264.835917][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.093700][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.251044][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.700533][ T5788] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  265.858997][ T5788] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  265.859027][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.897459][ T5788] usb 4-1: config 0 descriptor??
[  265.918149][ T5788] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  267.216649][ T7435] binder: 7430:7435 unknown command 0
[  267.216671][ T7435] binder: 7430:7435 ioctl c0306201 200000000080 returned -22
[  267.372016][    C0] vkms_vblank_simulate: vblank timer overrun
[  268.122397][    C0] vkms_vblank_simulate: vblank timer overrun
[  268.451035][ T6871] veth0_vlan: entered promiscuous mode
[  268.508308][ T6871] veth1_vlan: entered promiscuous mode
[  268.589721][ T5788] gspca_stv06xx: I2C: Read error writing address: -71
[  268.591920][ T5788] usb 4-1: USB disconnect, device number 13
[  268.678125][ T1229] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  268.806593][ T1229] usb 2-1: device descriptor read/64, error -71
[  268.810582][ T6871] veth0_macvtap: entered promiscuous mode
[  268.848545][ T6871] veth1_macvtap: entered promiscuous mode
[  268.948775][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.994471][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.032439][ T5950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.032724][ T5950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.032958][ T5950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.033033][ T5950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.049783][ T1229] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  269.176854][ T1229] usb 2-1: device descriptor read/64, error -71
[  269.290565][ T1229] usb usb2-port1: attempt power cycle
[  269.702842][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.702863][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.716917][ T1229] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  270.499318][ T1229] usb 2-1: device descriptor read/8, error -71
[  270.738764][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.738784][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.783163][ T1229] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  270.835726][ T1229] usb 2-1: device descriptor read/8, error -71
[  270.962687][ T1229] usb usb2-port1: unable to enumerate USB device
[  271.279476][ T7463] 9pnet_fd: Insufficient options for proto=fd
[  271.784046][   T37] audit: type=1326 audit(1763060655.695:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.706469][   T37] audit: type=1326 audit(1763060656.805:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.706519][   T37] audit: type=1326 audit(1763060656.805:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707041][   T37] audit: type=1326 audit(1763060656.805:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707067][   T37] audit: type=1326 audit(1763060656.815:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707090][   T37] audit: type=1326 audit(1763060656.815:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707112][   T37] audit: type=1326 audit(1763060656.815:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707135][   T37] audit: type=1326 audit(1763060656.825:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707157][   T37] audit: type=1326 audit(1763060656.825:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.707179][   T37] audit: type=1326 audit(1763060656.825:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6c02f6c9 code=0x7fc00000
[  272.761964][ T7485] binder: 7483:7485 unknown command 0
[  272.761984][ T7485] binder: 7483:7485 ioctl c0306201 200000000080 returned -22
[  277.006679][ T5810] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  277.012143][ T5810] Bluetooth: hci5: Injecting HCI hardware error event
[  277.014397][ T5802] Bluetooth: hci5: hardware error 0x00
[  278.140475][ T7531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.351249][ T5810] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[  278.446780][ T7537] binder: 7535:7537 unknown command 0
[  278.446809][ T7537] binder: 7535:7537 ioctl c0306201 200000000080 returned -22
[  279.258302][ T5882] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  279.461237][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  279.461254][ T5882] usb 2-1: config 0 has no interface number 0
[  279.461282][ T5882] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  279.461296][ T5882] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  279.461320][ T5882] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  279.461332][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.470604][ T5882] usb 2-1: config 0 descriptor??
[  279.471773][ T7542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  279.645699][ T5882] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  279.715635][ T5882] usb 2-1: USB disconnect, device number 8
[  280.875541][ T5802] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  282.116592][ T1229] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  282.259763][ T1229] usb 6-1: device descriptor read/64, error -71
[  282.409424][ T5802] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  282.415590][ T5802] Bluetooth: hci3: Injecting HCI hardware error event
[  282.506141][ T5810] Bluetooth: hci3: hardware error 0x00
[  283.005315][ T1229] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  283.135572][ T7604] binder: 7600:7604 unknown command 0
[  283.135594][ T7604] binder: 7600:7604 ioctl c0306201 200000000080 returned -22
[  283.263977][ T1229] usb 6-1: device descriptor read/64, error -71
[  283.450952][ T1229] usb usb6-port1: attempt power cycle
[  284.331988][ T1229] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  284.502831][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.443'.
[  284.505593][ T7613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.443'.
[  284.526231][ T1229] usb 6-1: device descriptor read/8, error -71
[  284.776580][ T1229] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  284.800932][ T1229] usb 6-1: device descriptor read/8, error -71
[  284.911083][ T1229] usb usb6-port1: unable to enumerate USB device
[  285.068825][ T5810] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  286.437537][ T5905] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  286.593258][ T5905] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  286.593288][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  286.593307][ T5905] usb 3-1: Product: syz
[  286.593322][ T5905] usb 3-1: Manufacturer: syz
[  286.593336][ T5905] usb 3-1: SerialNumber: syz
[  286.716980][ T5905] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  287.068451][ T5905] vp7045: USB control message 'in' went wrong.
[  287.068482][ T5905] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  287.068521][ T5905] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  287.112137][   T43] usb 3-1: USB disconnect, device number 15
[  290.606818][ T7674] binder: 7672:7674 unknown command 0
[  290.606840][ T7674] binder: 7672:7674 ioctl c0306201 200000000080 returned -22
[  291.556574][ T5881] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  291.687277][ T5881] usb 2-1: device descriptor read/64, error -71
[  291.927158][ T5881] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  292.227966][ T5883] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  292.396783][ T5881] usb 2-1: device descriptor read/64, error -71
[  292.479914][ T5883] usb 1-1: device descriptor read/64, error -71
[  292.506928][ T5881] usb usb2-port1: attempt power cycle
[  292.716537][ T5883] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  292.846629][ T5881] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  292.846831][ T5883] usb 1-1: device descriptor read/64, error -71
[  292.867274][ T5881] usb 2-1: device descriptor read/8, error -71
[  292.957020][ T5883] usb usb1-port1: attempt power cycle
[  293.106625][ T5881] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  293.135885][ T5881] usb 2-1: device descriptor read/8, error -71
[  293.247017][ T5881] usb usb2-port1: unable to enumerate USB device
[  293.308722][ T5883] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  293.327517][ T5883] usb 1-1: device descriptor read/8, error -71
[  293.527012][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.659852][ T5883] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  293.679853][ T5883] usb 1-1: device descriptor read/8, error -71
[  293.944885][ T5883] usb usb1-port1: unable to enumerate USB device
[  294.092323][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.917242][    C1] vkms_vblank_simulate: vblank timer overrun
[  297.016841][    C1] vkms_vblank_simulate: vblank timer overrun
[  297.872678][    C1] vkms_vblank_simulate: vblank timer overrun
[  298.294362][ T7779] binder: 7777:7779 unknown command 0
[  298.294384][ T7779] binder: 7777:7779 ioctl c0306201 200000000080 returned -22
[  298.316658][ T5905] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  298.394568][    C1] vkms_vblank_simulate: vblank timer overrun
[  298.449442][ T5905] usb 3-1: device descriptor read/64, error -71
[  299.498097][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.586690][ T5905] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  299.629817][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.716774][ T5905] usb 3-1: device descriptor read/64, error -71
[  299.827331][ T5905] usb usb3-port1: attempt power cycle
[  300.136676][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.186584][ T5905] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  300.321496][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.451268][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.528439][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.064593][ T5905] usb 3-1: device descriptor read/8, error -71
[  304.805486][ T7837] binder: 7832:7837 unknown command 0
[  304.805507][ T7837] binder: 7832:7837 ioctl c0306201 200000000080 returned -22
[  307.801226][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.175304][    C0] vkms_vblank_simulate: vblank timer overrun
[  309.496151][    C0] vkms_vblank_simulate: vblank timer overrun
[  309.677569][    C0] vkms_vblank_simulate: vblank timer overrun
[  317.414999][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  317.415571][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  318.197153][ T7943] binder_alloc: 7930: binder_alloc_buf, no vma
[  318.552704][ T7949] tipc: Started in network mode
[  318.552738][ T7949] tipc: Node identity 5eaf2469623a, cluster identity 4711
[  318.552957][ T7949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.568032][ T7949] syzkaller0: entered promiscuous mode
[  318.568062][ T7949] syzkaller0: entered allmulticast mode
[  319.168615][ T7948] tipc: Resetting bearer <eth:syzkaller0>
[  320.007194][ T5905] tipc: Node number set to 1016407145
[  320.644290][ T7948] tipc: Disabling bearer <eth:syzkaller0>
[  320.746625][   T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  320.896569][   T43] usb 4-1: Using ep0 maxpacket: 16
[  320.944956][   T43] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  320.944987][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.945007][   T43] usb 4-1: Product: syz
[  320.945022][   T43] usb 4-1: Manufacturer: syz
[  320.945037][   T43] usb 4-1: SerialNumber: syz
[  321.043845][   T43] usb 4-1: config 0 descriptor??
[  321.078867][   T43] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  321.439909][   T43] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110
[  323.739776][   T10] usb 4-1: USB disconnect, device number 14
[  325.387601][   T28] ------------[ cut here ]------------
[  325.387622][   T28] WARNING: CPU: 1 PID: 28 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x603/0x740
[  325.387669][   T28] Modules linked in:
[  325.387708][   T28] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  325.387729][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.387744][   T28] RIP: 0010:inet_sock_destruct+0x603/0x740
[  325.387772][   T28] Code: 00 41 0f b6 74 24 12 48 c7 c7 a0 d9 e7 8b 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f3 2f df f7 e8 ee a0 76 f8 90 <0f> 0b 90 e9 58 fe ff ff e8 e0 a0 76 f8 90 0f 0b 90 e9 8b fe ff ff
[  325.387787][   T28] RSP: 0018:ffffc90000a2f988 EFLAGS: 00010293
[  325.387803][   T28] RAX: ffffffff89480c72 RBX: dffffc0000000000 RCX: ffff88801beb8000
[  325.387818][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  325.387829][   T28] RBP: 00000000000003c0 R08: 0000000000000000 R09: 0000000000000000
[  325.387840][   T28] R10: dffffc0000000000 R11: ffffed1005098309 R12: ffff8880284c1680
[  325.387854][   T28] R13: dffffc0000000000 R14: ffff8880284c1840 R15: ffffffff8e9778a0
[  325.387873][   T28] FS:  0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000
[  325.387889][   T28] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.387902][   T28] CR2: 000055555ac3f588 CR3: 000000000d3a6000 CR4: 00000000003526f0
[  325.387918][   T28] Call Trace:
[  325.387930][   T28]  <TASK>
[  325.387941][   T28]  ? inet6_cleanup_sock+0x18b/0x220
[  325.387967][   T28]  ? __pfx_udpv6_destruct_sock+0x10/0x10
[  325.387988][   T28]  __sk_destruct+0x89/0x670
[  325.388017][   T28]  ? __pfx___sk_destruct+0x10/0x10
[  325.388039][   T28]  rcu_cpu_kthread+0xbf6/0x1b50
[  325.388075][   T28]  ? rcu_cpu_kthread+0x23e/0x1b50
[  325.388115][   T28]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  325.388144][   T28]  ? __lock_acquire+0xab9/0xd20
[  325.388168][   T28]  ? __pfx___schedule+0x10/0x10
[  325.388211][   T28]  ? schedule+0x91/0x360
[  325.388243][   T28]  ? smpboot_thread_fn+0x4d/0xa60
[  325.388264][   T28]  smpboot_thread_fn+0x542/0xa60
[  325.388294][   T28]  ? smpboot_thread_fn+0x4d/0xa60
[  325.388327][   T28]  kthread+0x711/0x8a0
[  325.388357][   T28]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  325.388379][   T28]  ? __pfx_kthread+0x10/0x10
[  325.388402][   T28]  ? rt_spin_unlock+0x150/0x200
[  325.388428][   T28]  ? rt_spin_unlock+0x161/0x200
[  325.388447][   T28]  ? __pfx_kthread+0x10/0x10
[  325.388473][   T28]  ret_from_fork+0x4bc/0x870
[  325.388503][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  325.388544][   T28]  ? __switch_to_asm+0x39/0x70
[  325.388566][   T28]  ? __switch_to_asm+0x33/0x70
[  325.388583][   T28]  ? __pfx_kthread+0x10/0x10
[  325.388609][   T28]  ret_from_fork_asm+0x1a/0x30
[  325.388658][   T28]  </TASK>
[  325.388668][   T28] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  325.388681][   T28] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  325.388706][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.388717][   T28] Call Trace:
[  325.388730][   T28]  <TASK>
[  325.388737][   T28]  dump_stack_lvl+0x99/0x250
[  325.388766][   T28]  ? __asan_memcpy+0x40/0x70
[  325.388789][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.388819][   T28]  ? __pfx__printk+0x10/0x10
[  325.388856][   T28]  vpanic+0x237/0x6d0
[  325.388874][   T28]  ? __pfx_vpanic+0x10/0x10
[  325.388904][   T28]  panic+0xb9/0xc0
[  325.388922][   T28]  ? __pfx_panic+0x10/0x10
[  325.388957][   T28]  __warn+0x31b/0x4b0
[  325.388973][   T28]  ? inet_sock_destruct+0x603/0x740
[  325.389000][   T28]  ? inet_sock_destruct+0x603/0x740
[  325.389031][   T28]  report_bug+0x2be/0x4f0
[  325.389054][   T28]  ? inet_sock_destruct+0x603/0x740
[  325.389078][   T28]  ? inet_sock_destruct+0x603/0x740
[  325.389102][   T28]  ? inet_sock_destruct+0x605/0x740
[  325.389126][   T28]  handle_bug+0x84/0x160
[  325.389145][   T28]  exc_invalid_op+0x1a/0x50
[  325.389164][   T28]  asm_exc_invalid_op+0x1a/0x20
[  325.389182][   T28] RIP: 0010:inet_sock_destruct+0x603/0x740
[  325.389206][   T28] Code: 00 41 0f b6 74 24 12 48 c7 c7 a0 d9 e7 8b 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f3 2f df f7 e8 ee a0 76 f8 90 <0f> 0b 90 e9 58 fe ff ff e8 e0 a0 76 f8 90 0f 0b 90 e9 8b fe ff ff
[  325.389221][   T28] RSP: 0018:ffffc90000a2f988 EFLAGS: 00010293
[  325.389236][   T28] RAX: ffffffff89480c72 RBX: dffffc0000000000 RCX: ffff88801beb8000
[  325.389250][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  325.389261][   T28] RBP: 00000000000003c0 R08: 0000000000000000 R09: 0000000000000000
[  325.389273][   T28] R10: dffffc0000000000 R11: ffffed1005098309 R12: ffff8880284c1680
[  325.389287][   T28] R13: dffffc0000000000 R14: ffff8880284c1840 R15: ffffffff8e9778a0
[  325.389310][   T28]  ? inet_sock_destruct+0x602/0x740
[  325.389342][   T28]  ? inet_sock_destruct+0x602/0x740
[  325.389366][   T28]  ? inet6_cleanup_sock+0x18b/0x220
[  325.389390][   T28]  ? __pfx_udpv6_destruct_sock+0x10/0x10
[  325.389410][   T28]  __sk_destruct+0x89/0x670
[  325.389432][   T28]  ? __pfx___sk_destruct+0x10/0x10
[  325.389454][   T28]  rcu_cpu_kthread+0xbf6/0x1b50
[  325.389489][   T28]  ? rcu_cpu_kthread+0x23e/0x1b50
[  325.389529][   T28]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  325.389558][   T28]  ? __lock_acquire+0xab9/0xd20
[  325.389582][   T28]  ? __pfx___schedule+0x10/0x10
[  325.389623][   T28]  ? schedule+0x91/0x360
[  325.389655][   T28]  ? smpboot_thread_fn+0x4d/0xa60
[  325.389676][   T28]  smpboot_thread_fn+0x542/0xa60
[  325.389701][   T28]  ? smpboot_thread_fn+0x4d/0xa60
[  325.389734][   T28]  kthread+0x711/0x8a0
[  325.389762][   T28]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  325.389785][   T28]  ? __pfx_kthread+0x10/0x10
[  325.389808][   T28]  ? rt_spin_unlock+0x150/0x200
[  325.389834][   T28]  ? rt_spin_unlock+0x161/0x200
[  325.389853][   T28]  ? __pfx_kthread+0x10/0x10
[  325.389879][   T28]  ret_from_fork+0x4bc/0x870
[  325.389905][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  325.389935][   T28]  ? __switch_to_asm+0x39/0x70
[  325.389953][   T28]  ? __switch_to_asm+0x33/0x70
[  325.389974][   T28]  ? __pfx_kthread+0x10/0x10
[  325.390001][   T28]  ret_from_fork_asm+0x1a/0x30
[  325.390044][   T28]  </TASK>
[  325.390296][   T28] Kernel Offset: disabled