last executing test programs:

7m16.040612234s ago: executing program 1 (id=464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaa8d7eaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)

7m15.743555377s ago: executing program 1 (id=467):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040000)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f000093b000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab4acff0b3e5a1b47b6df7b23de8caa000000", 0xb8)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3bcc0e6504e5b12d80c0e57878aaa61f6cd9f4793854722388b295cef8e78c12973e5d333c4857df2acf2a164f857d030878c99f6a9c688c9ae3aeee2a0b5eb918803e53e7b7336df41200c4ed59"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000050}, 0x40)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

7m14.125947129s ago: executing program 1 (id=468):
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
socket$inet(0x2, 0x3, 0x2)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x1, 0x0, 0x7, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

7m7.259336739s ago: executing program 1 (id=485):
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10)
sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3fb, 0x300, 0x70bd26, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x1)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r7, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r10, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0)
write$UHID_SET_REPORT_REPLY(r11, &(0x7f0000000340)={0xe, {0x2, 0x2c, 0x0, 0xee, "ad2156d281f0e6c859ee0d610f3d5e55f39b900313dc49ae174dee5bd6fe35bae4b948e052c7f99714c1147315aaa49e27142ebdbc25cd526eecb22e2c9e8fd404808653569623725e8fae3f076423c07696f8e1a5317cfe6e6bc1475d2d50a5beec05d0b366465aee6296024d0fa6338f5341910c1b1c6318c6f81ce0458e1c7c1c92cedf75331d15a4a8eeadbaf0805a3df8abc3da652450abbdceb903714c7944020e4b201b6f6b4efbcbebb16d529dce59fd132b82187412a1a58bab0f8bb0f677afba60bf01f71ea2de2345a9a8de907e00d222d2558ae9aa8e1cdfdba2961fe19b4e30f0c1cbda094ccadf"}}, 0xfa)
recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004cc0)=""/4106, 0x100a}], 0x1}, 0x2)

7m3.218131044s ago: executing program 1 (id=497):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

7m2.104702966s ago: executing program 1 (id=499):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
get_robust_list(r5, 0x0, &(0x7f00000006c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
r9 = dup(r8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
dup(r8)

6m46.714473832s ago: executing program 32 (id=499):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
get_robust_list(r5, 0x0, &(0x7f00000006c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
r9 = dup(r8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
dup(r8)

6m14.538193912s ago: executing program 0 (id=601):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0001480000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

6m14.411220045s ago: executing program 0 (id=602):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="f50500020a0000002cbd7000fcdbdf25030006000000000002004e21ac1414bb000000000000000002000100000000000000070300000000030005000000000002004e22ac1e00010000000000000000"], 0x50}, 0x1, 0x7}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000006f00950000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095", @ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="00000000488200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r7, 0x2}, 0x20)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfffd}, &(0x7f0000000000)=0x90)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060025ab4aeee700000f00000002000093010000000400000001000000ffffff3f03000010050001000500000000"], &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28)

6m11.695292119s ago: executing program 0 (id=609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000200)="84", 0x1}], 0x1) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

6m11.078026998s ago: executing program 0 (id=611):
futex(&(0x7f0000000240)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x4, 0x8ffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8000000003, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xe, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0)
io_pgetevents(0x0, 0x8, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={[0x1]}, 0x8})

6m9.990124907s ago: executing program 0 (id=614):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48)
close(0x3)
unshare(0x22020400)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m8.205852461s ago: executing program 0 (id=617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0904, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r4, &(0x7f0000000000)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x10)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r5=>0x0)
sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) (async)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0904, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
bind$ax25(r4, &(0x7f0000000000)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x10) (async)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) (async)
sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) (async)

5m52.260464687s ago: executing program 33 (id=617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0904, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r4, &(0x7f0000000000)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x10)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r5=>0x0)
sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) (async)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0904, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
bind$ax25(r4, &(0x7f0000000000)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x10) (async)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) (async)
sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) (async)

4m23.051309308s ago: executing program 2 (id=825):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

4m20.772217423s ago: executing program 2 (id=826):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a000000000000010000000000000000000000000000fbffffffffffffff000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0)

4m20.551529425s ago: executing program 2 (id=827):
r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, 0x0, 0x0)
write$smackfs_access(r0, &(0x7f00000000c0)={',:@\'}', 0x20, '', 0x20, 'rwxtbl'}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f0000000500)=""/83, 0x53}, {&(0x7f0000000200)=""/38, 0x26}], 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="c27369e3fe10537ebf811abd443e47a8dd26eb5dca47bbd556fe479d1968d916c79f901e7f32cd8fc7d66366e962b34386d813ba60f479645c29ca6dae478a5fbd91f263f4edcc5f8fdab0f1260d5861dc0e2b06b4789e0bbdd28b9e0d80cb70468901f5b592a61c4f90f7cdd730d66d485b0a479c4779cf8737d6ebb25a1191b8545f759a0bff321e417d8f0eb7bfb8e1500ce1a7cd0e32cdfcd9677b98fb9b46775c1599f89f99d8823a1af91ce6aab31a6e380f8b1342e7d55b9230c25a86cd4111", 0xc3}, {&(0x7f0000000240)="0959aa1586dbb9d11a389bf3387a37e6c585561be570640f348c0fbf69aba84aa7ee7504336df4d5", 0x28}, {&(0x7f0000000040)="61e6ab7a9d11f310d0616a80c1a44f144b2cf8e3309142", 0x17}, {&(0x7f0000000300)="b5a2bb57e32b", 0x6}], 0x4, 0x9, 0x101)
syz_usb_connect(0x2, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x93, 0xe0, 0xd9, 0x20, 0x103d, 0x101, 0x5bc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x3, 0x40, 0x4, [{{0x9, 0x4, 0x9c, 0x76, 0x0, 0xef, 0x96, 0x2c, 0x40}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0xfffffffffffffffe})

4m15.266672697s ago: executing program 2 (id=830):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m15.016559035s ago: executing program 2 (id=831):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000007", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

4m14.497898589s ago: executing program 2 (id=832):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x4000)
sendmsg$inet6(r1, &(0x7f0000000980)={&(0x7f0000000140)={0xa, 0x4e21, 0x40000000, @loopback, 0x9a3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000180)="516d0818a14b49d50f12114e9ef1c61f8ce28430cae52c9a92630404f983e8cd9d9b87f813372208929a935c1bdd99ee3103920d8de7b03eca37f236d83cb898a019237638eb43b4409141a39278b4d828bfe5ea8baa77", 0x57}, {&(0x7f0000000200)="77431d645b024ccecc0980437aa9fd25d513228bb795b5e9bc38d544ddf1d4c1046c9691f5bbd2f84188af74d58dcbf4a2d7496686e517d61866c13d2e7e09259192826fd61607b68c190151ed1bffb6a2695439d6e63131ed08c10f96372a6cf36d5303001e0c2bdb94b5c44dfaf2cb9bd533ed7d8b666f2bb2d739ab7048bb8431f689c16f8fd0c8c8f2a620afd80ff53cb89a72df45b54c3a3e501b654676c989ddf7ab045f44be35818924ee6779733b7b", 0xb3}, {&(0x7f0000000480)="8aa27da87e20c4b99b305a1fe5aa78bc21d5c2985239ddb67846427bf92f98e49276fb18d4f61dba0dc99b4a86230bfb29fe3a674334a412ea0e0d7330b17eaf460bab950023a3d9dee47ba530c5240f4b07997f903cfe95b56c5f7e331cf31395dd6002dff7e3c6dbd2f2a54faf42af24c5d75f0b3f4ae1af07f9829ac172374c6d28f40332cb3cb076cadab4", 0x8d}, {&(0x7f0000000540)="6706c2915dae9d6eaf6d9704ce8b66db3bdc481e9b0fc89014bdeb297a33e9f6c3412a63cc6b40f515993797e68887a18962096b1bad300ffb979c05c76bbf4171ae9d6f3d3e4c6627b6897ed8742897d2579e12f3f8f014ae96db29d99299073f3e121b5244b122549bbb2433b5d90b42783a5d4116f4160fb2c5ddd0018d6b4cb983680d9a139e6884a34e1ccbdc24f6ecc68d0aa7", 0x96}, {&(0x7f0000000600)="dd53babf8d1262f612aa0e092fe3c0cbad5a17985816112bc408b38addbdd33a864646d8ee09d01c4e244de049f8b3ebf0321a96f6e5b0f1cf386465bcd791f8b97159021cea91ae1cd5733a010076616f2e0e82e89e73b3b7d36446bc7e1519a23ed2bf535a135170e460df46e70ccef1195d52696e0a554df14d3bd4c6b82226b0b4682a8eb2aa07e6c86215b9c6b5e9d10db532c99ee07f79ffa7aa5c14b61a05ce29db435999cbeab8dff03afc039e6ee56c4e51d71789155ead6cbc568bb9480beeae8a2f4d5e", 0xc9}, {&(0x7f00000002c0)="e113efca50ff3063af78cb382c46d42be87cdc8e47080f2733d4e6371d0df0228f11e6e2ab88f8cb4e8df3db786b5aa2b80a5c59ecb699d7dd3a6bf4bfb4b8332a5713febe190c54316d5817424ce95f259529369537370e435d7656e9f9893cafcb24", 0x63}, {&(0x7f0000000700)="c2fa7e7b93729af7a26da50294e4461017c40fb30685b3688a9d43734fd83b346a889a017d07a935aa6a57bc0d3ffcb9b4328ee4c771ed1e1698ebce692426156f843d02a01ffc05e4848320c6f04a9749237779b911efcd81893a6a7c2581a5e3d15c3d23900a0ac5bf45dc9498a88e20bcf7e2ed64b7df843ff28b0b1cb09ca0909b1290c7c2bfedebab2deb72ce78237c4ee5b8deda1a720c4ada6bc322bd1697548ac60b957c0daf2c7127acb57a7a644ca63b0c6290133f6bde9275c6dfee", 0xc1}, {&(0x7f0000000800)="5e484088289d539e0d7d7fb150648a8ffea178e8a999ef1f3212e36b8f0d00740cc292d2a8b1243e05a9dae8f29fee38ad962a5d9f2e1147e9c4f2b96aede84e9fee90473ba031c6dbd6118b92c388eac84cf503043c80436a1887942ce2a033aaf34b417232d8323c2c2cf5f4f89bfdf790b2b83fda4d1788bb9a14520d489f0f8b79a1a8f355be08ef6a6ced5d8d0d1eee4349e52e7c370bb722642e4009276a894a53333e60cc623596dba7ffbceeeb40657e44c6c0bb3e03c6b611095b6a95a4371b2540be08a4ad5a825cf4eaaf6300ac23", 0xd4}], 0x8}, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000009c0)={0x0, 0x4, 0x1, 'queue0\x00', 0x8b})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)

3m59.289729056s ago: executing program 34 (id=832):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x4000)
sendmsg$inet6(r1, &(0x7f0000000980)={&(0x7f0000000140)={0xa, 0x4e21, 0x40000000, @loopback, 0x9a3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000180)="516d0818a14b49d50f12114e9ef1c61f8ce28430cae52c9a92630404f983e8cd9d9b87f813372208929a935c1bdd99ee3103920d8de7b03eca37f236d83cb898a019237638eb43b4409141a39278b4d828bfe5ea8baa77", 0x57}, {&(0x7f0000000200)="77431d645b024ccecc0980437aa9fd25d513228bb795b5e9bc38d544ddf1d4c1046c9691f5bbd2f84188af74d58dcbf4a2d7496686e517d61866c13d2e7e09259192826fd61607b68c190151ed1bffb6a2695439d6e63131ed08c10f96372a6cf36d5303001e0c2bdb94b5c44dfaf2cb9bd533ed7d8b666f2bb2d739ab7048bb8431f689c16f8fd0c8c8f2a620afd80ff53cb89a72df45b54c3a3e501b654676c989ddf7ab045f44be35818924ee6779733b7b", 0xb3}, {&(0x7f0000000480)="8aa27da87e20c4b99b305a1fe5aa78bc21d5c2985239ddb67846427bf92f98e49276fb18d4f61dba0dc99b4a86230bfb29fe3a674334a412ea0e0d7330b17eaf460bab950023a3d9dee47ba530c5240f4b07997f903cfe95b56c5f7e331cf31395dd6002dff7e3c6dbd2f2a54faf42af24c5d75f0b3f4ae1af07f9829ac172374c6d28f40332cb3cb076cadab4", 0x8d}, {&(0x7f0000000540)="6706c2915dae9d6eaf6d9704ce8b66db3bdc481e9b0fc89014bdeb297a33e9f6c3412a63cc6b40f515993797e68887a18962096b1bad300ffb979c05c76bbf4171ae9d6f3d3e4c6627b6897ed8742897d2579e12f3f8f014ae96db29d99299073f3e121b5244b122549bbb2433b5d90b42783a5d4116f4160fb2c5ddd0018d6b4cb983680d9a139e6884a34e1ccbdc24f6ecc68d0aa7", 0x96}, {&(0x7f0000000600)="dd53babf8d1262f612aa0e092fe3c0cbad5a17985816112bc408b38addbdd33a864646d8ee09d01c4e244de049f8b3ebf0321a96f6e5b0f1cf386465bcd791f8b97159021cea91ae1cd5733a010076616f2e0e82e89e73b3b7d36446bc7e1519a23ed2bf535a135170e460df46e70ccef1195d52696e0a554df14d3bd4c6b82226b0b4682a8eb2aa07e6c86215b9c6b5e9d10db532c99ee07f79ffa7aa5c14b61a05ce29db435999cbeab8dff03afc039e6ee56c4e51d71789155ead6cbc568bb9480beeae8a2f4d5e", 0xc9}, {&(0x7f00000002c0)="e113efca50ff3063af78cb382c46d42be87cdc8e47080f2733d4e6371d0df0228f11e6e2ab88f8cb4e8df3db786b5aa2b80a5c59ecb699d7dd3a6bf4bfb4b8332a5713febe190c54316d5817424ce95f259529369537370e435d7656e9f9893cafcb24", 0x63}, {&(0x7f0000000700)="c2fa7e7b93729af7a26da50294e4461017c40fb30685b3688a9d43734fd83b346a889a017d07a935aa6a57bc0d3ffcb9b4328ee4c771ed1e1698ebce692426156f843d02a01ffc05e4848320c6f04a9749237779b911efcd81893a6a7c2581a5e3d15c3d23900a0ac5bf45dc9498a88e20bcf7e2ed64b7df843ff28b0b1cb09ca0909b1290c7c2bfedebab2deb72ce78237c4ee5b8deda1a720c4ada6bc322bd1697548ac60b957c0daf2c7127acb57a7a644ca63b0c6290133f6bde9275c6dfee", 0xc1}, {&(0x7f0000000800)="5e484088289d539e0d7d7fb150648a8ffea178e8a999ef1f3212e36b8f0d00740cc292d2a8b1243e05a9dae8f29fee38ad962a5d9f2e1147e9c4f2b96aede84e9fee90473ba031c6dbd6118b92c388eac84cf503043c80436a1887942ce2a033aaf34b417232d8323c2c2cf5f4f89bfdf790b2b83fda4d1788bb9a14520d489f0f8b79a1a8f355be08ef6a6ced5d8d0d1eee4349e52e7c370bb722642e4009276a894a53333e60cc623596dba7ffbceeeb40657e44c6c0bb3e03c6b611095b6a95a4371b2540be08a4ad5a825cf4eaaf6300ac23", 0xd4}], 0x8}, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000009c0)={0x0, 0x4, 0x1, 'queue0\x00', 0x8b})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)

1m29.126587556s ago: executing program 5 (id=1096):
syz_open_dev$usbfs(0x0, 0x75, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x100000002)
close(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80)

1m22.238484795s ago: executing program 5 (id=1102):
r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200001e38000480340001800a0001006c696d6974000000240002800c000140000000000000000208000340000000060c00024000000000000000350900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000acdc6bedf61d456fb327e187a682e19858f7d66315d1af4ff3ba811323cf5aa17278c5b541278942ee0"], 0x8c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530)
ptrace(0x10, r0)
ptrace$setregs(0xf, r0, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b")
r2 = socket(0x11, 0x3, 0x0)
setsockopt$sock_linger(r2, 0xffff, 0x80, 0x0, 0x0)
close(r2)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="1c012bbd7000fedbdf25090000000800030005000000d5ebc6467cfd268d296c4ea50866c45ba64befc706d976da92989022a6f5b016e837663325604a9a07cbb5f5b6ee92920ae1f0e61e2fc177bc0c5bbacfcddac01697410296e08c5b38c0dc1fdb29cd22f6356da1bf35ead556635480bf3e465ee4df0ed6a2c775f89c56ea15a5ad3cf01b2047bbd9a017e1dbd4b605de"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200080d1)

1m17.855292839s ago: executing program 5 (id=1108):
socket(0x10, 0x3, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x6) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
close(0x3)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x3ff, 0x6, 0x9, 0x10001, 0x8df5, 0x6, 0x10000}, 0x0, &(0x7f0000000080)={0x8, 0x100000003, 0x0, 0xe13, 0x1, 0x4000000, 0x4, 0x2a}, 0x0, 0x0) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}])
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050029bd7000000000000600000008000320", @ANYRES32=r7, @ANYBLOB="08000500060000001c00e700fb65f488bc863e67b060a55641f070f96ef0dc8cb68c36fc"], 0x40}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831373f00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x20000090)

1m17.398202031s ago: executing program 5 (id=1110):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

1m16.749715333s ago: executing program 5 (id=1112):
syz_open_dev$usbfs(0x0, 0x75, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x100000002)
close(r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80)

1m14.780069099s ago: executing program 5 (id=1113):
r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, 0x0, 0x0)
write$smackfs_access(r0, &(0x7f00000000c0)={',:@\'}', 0x20, '', 0x20, 'rwxtbl'}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
readv(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="c27369e3fe10537ebf811abd443e47a8dd26eb5dca47bbd556fe479d1968d916c79f901e7f32cd8fc7d66366e962b34386d813ba60f479645c29ca6dae478a5fbd91f263f4edcc5f8fdab0f1260d5861dc0e2b06b4789e0bbdd28b9e0d80cb70468901f5b592a61c4f90f7cdd730d66d485b0a479c4779cf8737d6ebb25a1191b8545f759a0bff321e417d8f0eb7bfb8e1500ce1a7cd0e32cdfcd9677b98fb9b46775c1599f89f99d8823a1af91ce6aab31a6e380f8b1342e7d55b9230c25a86cd4111", 0xc3}, {&(0x7f0000000240)="0959aa1586dbb9d11a389bf3387a37e6c585561be570640f348c0fbf69aba84aa7ee7504336df4d5", 0x28}, {&(0x7f0000000040)="61e6ab7a9d11f310d0616a80c1a44f144b2cf8e3309142", 0x17}, {&(0x7f0000000300)="b5a2bb57e32b", 0x6}], 0x4, 0x9, 0x101)
syz_usb_connect(0x2, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x93, 0xe0, 0xd9, 0x20, 0x103d, 0x101, 0x5bc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x3, 0x40, 0x4, [{{0x9, 0x4, 0x9c, 0x76, 0x0, 0xef, 0x96, 0x2c, 0x40}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0xfffffffffffffffe})

58.105500637s ago: executing program 35 (id=1113):
r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, 0x0, 0x0)
write$smackfs_access(r0, &(0x7f00000000c0)={',:@\'}', 0x20, '', 0x20, 'rwxtbl'}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
readv(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="c27369e3fe10537ebf811abd443e47a8dd26eb5dca47bbd556fe479d1968d916c79f901e7f32cd8fc7d66366e962b34386d813ba60f479645c29ca6dae478a5fbd91f263f4edcc5f8fdab0f1260d5861dc0e2b06b4789e0bbdd28b9e0d80cb70468901f5b592a61c4f90f7cdd730d66d485b0a479c4779cf8737d6ebb25a1191b8545f759a0bff321e417d8f0eb7bfb8e1500ce1a7cd0e32cdfcd9677b98fb9b46775c1599f89f99d8823a1af91ce6aab31a6e380f8b1342e7d55b9230c25a86cd4111", 0xc3}, {&(0x7f0000000240)="0959aa1586dbb9d11a389bf3387a37e6c585561be570640f348c0fbf69aba84aa7ee7504336df4d5", 0x28}, {&(0x7f0000000040)="61e6ab7a9d11f310d0616a80c1a44f144b2cf8e3309142", 0x17}, {&(0x7f0000000300)="b5a2bb57e32b", 0x6}], 0x4, 0x9, 0x101)
syz_usb_connect(0x2, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x93, 0xe0, 0xd9, 0x20, 0x103d, 0x101, 0x5bc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x3, 0x40, 0x4, [{{0x9, 0x4, 0x9c, 0x76, 0x0, 0xef, 0x96, 0x2c, 0x40}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0xfffffffffffffffe})

24.09690982s ago: executing program 7 (id=1206):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1)
close(r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x3c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x3f, 0x100}, 0x50)
r11 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r11}})

16.173402165s ago: executing program 7 (id=1220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000500)=""/45, 0x2d)
getdents64(r1, 0x0, 0x18)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2e00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2e00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x14, 0xd, 0x4, 0x5, 0x70bd2b, 0x25dfdbfc, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x400)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01040000000004000000010000000000000008410000004c0018000000056962"], 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x10001, 0x51d2, 0x2, 0x2}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c890}, 0x804)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000), &(0x7f0000000200)=<r9=>0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000840)=@bridge_getneigh={0x28, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x40000, 0x5000a}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048840}, 0x20000800)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES8=r9, @ANYRES32=r8], 0x78}}, 0x20000800) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES8=r9, @ANYRES32=r8], 0x78}}, 0x20000800)
r11 = inotify_init()
inotify_add_watch(r11, &(0x7f0000000280)='./file0\x00', 0x60000010)

13.555271781s ago: executing program 7 (id=1223):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13.38013863s ago: executing program 7 (id=1224):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000800000000000000000000008500009100200000001801000020696c250000000000200d86ef63d978dc9420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)
r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x311001, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)

12.050513075s ago: executing program 4 (id=1227):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r0=>0x0) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0xc, 0x0, 0x40, 0x69db, 0x3})
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/igmp\x00')
fchdir(r1) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x169a82, 0x10) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 32)
ioprio_set$pid(0x3, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7) (async, rerun: 32)
r3 = gettid() (rerun: 32)
r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') (async, rerun: 64)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000200)={0x3, 0xf, 0x39, &(0x7f00000000c0)=""/57}) (rerun: 64)
read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020)

11.752375192s ago: executing program 4 (id=1229):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1)
close(r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x3c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x3f, 0x100}, 0x50)
r11 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r11}})

9.078139648s ago: executing program 4 (id=1233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioprio_set$pid(0x2, 0x0, 0x4007)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0xf98, @local}}, 0x0, 0x40}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r2, r2, 0x0, 0x4800000009)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000070a010100000000000000000000090900020073797a310000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioprio_set$pid(0x2, 0x0, 0x4007) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0xf98, @local}}, 0x0, 0x40}, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) (async)
openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) (async)
sendfile(r2, r2, 0x0, 0x4800000009) (async)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000070a010100000000000000000000090900020073797a310000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)

9.011032855s ago: executing program 3 (id=1235):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x8f}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xff, 0x4, 0x3, 0x4, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0xfffffffe, 0x6}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0)
preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0)
lseek(r2, 0xf5, 0x0)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001a0004002abd7000fedbdf251c008097fe01fd01000400000c00090000020f05", @ANYRES32=r1, @ANYBLOB="1a0006000b00"/16], 0x38}}, 0x4000080)

8.742153263s ago: executing program 7 (id=1237):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000040)=0x5, 0x4) (async)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4f22, 0x80000, @local}, 0x1c, 0x0}, 0x20004040) (async, rerun: 64)
openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
writev(r0, &(0x7f0000000340), 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x5c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10)

8.623685054s ago: executing program 3 (id=1238):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000200000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0)

8.529863113s ago: executing program 4 (id=1239):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r2, r1, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)
r4 = syz_clone3(&(0x7f0000000000)={0x400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0002}]})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/46) (async)
kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000710000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)

8.120546318s ago: executing program 3 (id=1241):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x6, @raw_data="1f350b79e332efd24b1e4e7866617bf8fe96a0745d932b0a552db39f6a623d5286d4539091c3d1d016c530b3f967a2d3ef749a412246513c48598aed239affcab126e51510c4f0c4767e1b47856451361409f71e5e0f5c949daa9b31907cd7e24f08c2ba626f0de2b3d4f15424110421596fd81f5cad47f43ff74baf2d39d2284eb9fe2f6598af66bd6267bb0d9b118c46e1d5e944739babb1fb7f97352d8e44aa2b3e00"})
r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@generic={0xc2, 0xb, 0x0, 0x6e14, 0x4}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x8, 0x1, "18"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000004c0)={0x0, 0xff1f, 0x1, 'v'}, 0x9)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000cc0), 0x800, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r7, r8, 0x0, 0x8000fb00)
sendmmsg$inet(r7, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000d00))
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000ec0)={0x0, 0x6}, 0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x1, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1e, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48074}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201702000000ac27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, &(0x7f0000000500)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x8, {0x8, 0x24, "ccc83cb75a8d"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000000840)={0x34, &(0x7f0000000540)={0x0, 0x1f, 0x8e, "17e631f26d18f8bad97635917488db28a036f6b6bdc8302664f3edc32d1cb8585670e62fdd3d0c552f2f1a4fafec4ccf6ba7a1e72c911bbc2377fe945f913bf081ac32118def74cbe706a409ea9bf88dd286d80f40cde54e4c43cb8826245b46f0d2cd2821e230851a9ddbb7b683c5c162875e5db0a7e8c04754884a88944c73a4a3e963d1515427ec30d6c288d5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000880)=ANY=[@ANYBLOB="2000570000000055f2d8c1880f44cc7e259bdf8e9e94ad02d4206a35ddc2849ac52b1c84816a702b16d83caede577aabe5e1fddd685e471733181db85ec43857af3f812c366a4718cc4e57c06138b3d2588471f46bc799e67cb05994636ee472227172a4851ce77a2bdbd2d5952ea285b788c12ae3c70cf734ad035bd2fc1c68c0a75438ce4e48d6353b046274d743fa726fecc9dfa4828663d9b0770ff2f2cf54ff8a45e1084fc5405d90c12a21f3100639563b9a37f9bbb1b714ddec09dcc622aeecf8a48333ff07e53d2284af83d0e0dd28d670f7a1d1e0dadbef349e9d55ad5f8feb6fb1197e"], &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xac}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x80}})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000e80)={0x14, &(0x7f0000000d40)={0x40, 0xed110bf82b328c9a, 0xdc, {0xdc, 0x33, "19df412970193306a74ca6e81ca09b95851538dd7db6524de5ac4f052a6c0770cbb4b5e9a7fb867bebcf6ac10d01b7db5df86afd6b0eb108c1ff0bac842bce3748c46dd598228582a209804f1d85e22d719977ef2c401f098121aa7be9bfae22a2a9e870cafde816c7ac827198617b1d3a92a1dfdba3821dc06b4593748600003c0bc813c765c7629188fa7fd525714f9b5a3760654625d5a3f9fd8a839906843660a2ab0a77d2dc8990dbe045dd251fd08cf75b312288ce359a516180866866cb4f0705423dcc87e382146a77ecaa98575f784cb10fb43bb8ab"}}, &(0x7f0000000e40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x20, 0x0, 0x4e, "080bd9b956a6d5180b639721aba25609cdcb89b93e8357619d90f95765ad8786be692cc8d4f8cd837075b1f9b3eab327c631fc109bb086404f43669409b393ffd1455195bde6f5c9c89bfbbaf839"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001000)={0x20, 0x80, 0x1c, {0x401, 0x6, 0x6, 0x6, 0x2, 0x3, 0x6, 0x76a, 0x10, 0x8, 0x1ff, 0xf039}}, &(0x7f0000001040)={0x20, 0x85, 0x4, 0xa6}, &(0x7f0000001080)={0x20, 0x83, 0x2}, &(0x7f00000010c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000001100)={0x20, 0x89, 0x2}})
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x23, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x11e, @remote, 0x81}]}, &(0x7f0000000100)=0xfffffe3c)

6.248081289s ago: executing program 4 (id=1243):
syz_open_dev$usbfs(0x0, 0x75, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00')

3.211933584s ago: executing program 6 (id=1245):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1)
close(r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x3c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r11 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r11}})

2.457942534s ago: executing program 4 (id=1246):
r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, 0x0, 0x0)
write$smackfs_access(r0, &(0x7f00000000c0)={',:@\'}', 0x20, '', 0x20, 'rwxtbl'}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
readv(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="c27369e3fe10537ebf811abd443e47a8dd26eb5dca47bbd556fe479d1968d916c79f901e7f32cd8fc7d66366e962b34386d813ba60f479645c29ca6dae478a5fbd91f263f4edcc5f8fdab0f1260d5861dc0e2b06b4789e0bbdd28b9e0d80cb70468901f5b592a61c4f90f7cdd730d66d485b0a479c4779cf8737d6ebb25a1191b8545f759a0bff321e417d8f0eb7bfb8e1500ce1a7cd0e32cdfcd9677b98fb9b46775c1599f89f99d8823a1af91ce6aab31a6e380f8b1342e7d55b9230c25a86cd4111", 0xc3}, {&(0x7f0000000240)="0959aa1586dbb9d11a389bf3387a37e6c585561be570640f348c0fbf69aba84aa7ee7504336df4d5", 0x28}, {&(0x7f0000000040)="61e6ab7a9d11f310d0616a80c1a44f144b2cf8e3309142", 0x17}, {&(0x7f0000000300)="b5a2bb57e32b", 0x6}], 0x4, 0x9, 0x101)

2.395835587s ago: executing program 3 (id=1247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000000000011", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaa8d7eaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)

2.09288244s ago: executing program 3 (id=1248):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1)
connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="120120020135e3402df9ffffff550102030109021b0001ff0140000904c94201ff07540b09050f00"], &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="d7", 0x1}], 0x2)
syz_usb_disconnect(r1)

2.065740317s ago: executing program 6 (id=1249):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x80, 0x0, 0x77})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000042000100", [0x0, 0x2000000000001]}})

1.659682031s ago: executing program 6 (id=1250):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000005500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

1.425875371s ago: executing program 7 (id=1251):
inotify_init()
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4, 0xd}, 0x8)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
r7 = dup(r6)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd86)

1.362988898s ago: executing program 6 (id=1252):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x3c6b9a}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x2200490, &(0x7f0000000180)=ANY=[@ANYBLOB='pids_localevents'])
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
cachestat(r7, &(0x7f0000000300)={0x5, 0x5}, &(0x7f0000000400), 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={r9, 0xcc}, 0x8) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000000c0)={r9, 0x4e1}, 0xc) (rerun: 64)
openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x701104, 0x0) (async, rerun: 32)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) (async, rerun: 32)
writev(r6, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="4888d03b", 0x4}], 0x2) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {0x3}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x34)

761.891325ms ago: executing program 6 (id=1253):
r0 = socket(0xa, 0x3, 0x3a) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) (async, rerun: 64)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) (rerun: 64)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000580)=0x10) (async, rerun: 64)
r3 = syz_io_uring_setup(0xe4d, &(0x7f0000000240)={0x0, 0x309c, 0x820, 0xfffffffd, 0x385}, &(0x7f0000000200)=<r4=>0x0, &(0x7f00000004c0)=<r5=>0x0) (rerun: 64)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'vlan0\x00', 0x2})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r6=>r0, 0x7ff, 0x9, 0x2})
getsockopt$inet6_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000340)=""/168, &(0x7f0000000400)=0xa8)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f00000002c0))

391.899176ms ago: executing program 6 (id=1254):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000800000000000000000000008500009100200000001801000020696c250000000000200d86ef63d978dc9420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x311001, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27)

0s ago: executing program 3 (id=1255):
syz_open_dev$usbfs(0x0, 0x75, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00')

kernel console output (not intermixed with test programs):

7fc6de03bf79 code=0x7ffc0000
[  518.774639][   T36] audit: type=1326 audit(1771208066.341:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  518.774777][   T36] audit: type=1326 audit(1771208066.341:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  518.774909][   T36] audit: type=1326 audit(1771208066.341:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  518.775064][   T36] audit: type=1326 audit(1771208066.341:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  518.775203][   T36] audit: type=1326 audit(1771208066.341:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  519.212414][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.259122][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.585245][ T9104] loop2: detected capacity change from 0 to 7
[  519.586319][ T9104] Dev loop2: unable to read RDB block 7
[  519.586346][ T9104]  loop2: AHDI p2
[  519.586373][ T9104] loop2: partition table partially beyond EOD, truncated
[  519.722450][ T8993] chnl_net:caif_netlink_parms(): no params data found
[  519.814113][ T8949] team0: Port device team_slave_0 added
[  519.816543][ T9112] IPVS: length: 528 != 8
[  519.852896][ T9112] input: syz1 as /devices/virtual/input/input12
[  519.877582][ T9112] input: syz0 as /devices/virtual/input/input13
[  519.943572][ T8949] team0: Port device team_slave_1 added
[  523.848014][ T9142] trusted_key: encrypted_key: insufficient parameters specified
[  524.070106][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.070126][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.070158][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.153545][ T9151] loop2: detected capacity change from 0 to 7
[  524.161485][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.161504][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.161531][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.161601][ T9151] Dev loop2: unable to read RDB block 7
[  524.161626][ T9151]  loop2: AHDI p2
[  524.161657][ T9151] loop2: partition table partially beyond EOD, truncated
[  524.318717][ T9027] chnl_net:caif_netlink_parms(): no params data found
[  524.480485][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.483291][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.499972][ T8993] bridge_slave_0: entered allmulticast mode
[  524.501909][ T8993] bridge_slave_0: entered promiscuous mode
[  524.502917][ T6007] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  526.149174][ T5889] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  526.149205][ T5889] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  526.168324][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  526.766353][ T9165] hpfs: Bad magic ... probably not HPFS
[  526.766910][ T6007] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.766930][ T6007] usb 5-1: config 0 has no interfaces?
[  526.766952][ T6007] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  526.766969][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.771976][ T6007] usb 5-1: config 0 descriptor??
[  526.951999][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.952128][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.952354][ T8993] bridge_slave_1: entered allmulticast mode
[  526.978025][ T8993] bridge_slave_1: entered promiscuous mode
[  527.124998][ T8949] hsr_slave_0: entered promiscuous mode
[  527.126124][ T8949] hsr_slave_1: entered promiscuous mode
[  527.425139][  T806] usb 5-1: USB disconnect, device number 37
[  527.760383][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.869499][ T5933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.933495][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  529.019012][ T5889] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  529.019040][ T5889] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  529.075590][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.350438][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.351155][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.351388][ T9027] bridge_slave_0: entered allmulticast mode
[  529.371527][ T9027] bridge_slave_0: entered promiscuous mode
[  529.542877][ T5933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.590896][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.591035][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.591257][ T9027] bridge_slave_1: entered allmulticast mode
[  529.615869][ T9027] bridge_slave_1: entered promiscuous mode
[  529.777280][ T8993] team0: Port device team_slave_0 added
[  530.008647][ T9205] loop2: detected capacity change from 0 to 7
[  530.021439][ T9205] Dev loop2: unable to read RDB block 7
[  530.021470][ T9205]  loop2: AHDI p2
[  530.021502][ T9205] loop2: partition table partially beyond EOD, truncated
[  530.038520][ T8993] team0: Port device team_slave_1 added
[  530.200787][ T5933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.489320][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.643788][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.766112][ T5933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.960794][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.960808][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.960830][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.056373][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.056391][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.056423][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.204451][ T9214] cifs: Unknown parameter 'f,'
[  531.204497][ T9214] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  531.204524][ T9214] CIFS mount error: No usable UNC path provided in device string!
[  531.204524][ T9214] 
[  531.204768][ T9214] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  531.228579][ T9027] team0: Port device team_slave_0 added
[  531.306938][ T9027] team0: Port device team_slave_1 added
[  531.618470][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.618485][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.618506][ T9027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.701934][ T9218] ntfs3: Unknown parameter 'barrier'
[  532.540958][ T8993] hsr_slave_0: entered promiscuous mode
[  532.542442][ T8993] hsr_slave_1: entered promiscuous mode
[  532.557099][ T8993] debugfs: 'hsr0' already exists in 'hsr'
[  532.557129][ T8993] Cannot create hsr debugfs directory
[  532.560115][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.560129][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  532.560150][ T9027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.184872][ T5889] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  533.185013][ T5889] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  533.648580][   T60] Bluetooth: hci3: command 0x0c1a tx timeout
[  534.104005][ T9027] hsr_slave_0: entered promiscuous mode
[  534.104984][ T9027] hsr_slave_1: entered promiscuous mode
[  534.105713][ T9027] debugfs: 'hsr0' already exists in 'hsr'
[  534.105731][ T9027] Cannot create hsr debugfs directory
[  534.323770][ T8949] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  534.442982][ T5933] bridge_slave_1: left allmulticast mode
[  534.443017][ T5933] bridge_slave_1: left promiscuous mode
[  534.443289][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.644511][ T5933] bridge_slave_0: left allmulticast mode
[  534.644537][ T5933] bridge_slave_0: left promiscuous mode
[  534.644770][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.806051][   T36] kauditd_printk_skb: 83 callbacks suppressed
[  534.806100][   T36] audit: type=1326 audit(1771208082.371:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x0
[  535.879297][ T5933] bridge_slave_1: left allmulticast mode
[  535.879331][ T5933] bridge_slave_1: left promiscuous mode
[  535.879590][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.011686][ T9235] loop2: detected capacity change from 0 to 7
[  536.024762][ T9235] Dev loop2: unable to read RDB block 7
[  536.024794][ T9235]  loop2: AHDI p2
[  536.024824][ T9235] loop2: partition table partially beyond EOD, truncated
[  536.064733][ T5933] bridge_slave_0: left allmulticast mode
[  536.064763][ T5933] bridge_slave_0: left promiscuous mode
[  536.065005][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.156470][ T5933] bridge_slave_1: left allmulticast mode
[  536.156495][ T5933] bridge_slave_1: left promiscuous mode
[  536.156672][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.212894][   T60] Bluetooth: hci6: command 0x0c1a tx timeout
[  536.213348][ T5889] Bluetooth: hci6: Opcode 0x0c1a failed: -110
[  536.213369][ T5889] Bluetooth: hci6: Error when powering off device on rfkill (-110)
[  536.264086][ T5933] bridge_slave_0: left allmulticast mode
[  536.264133][ T5933] bridge_slave_0: left promiscuous mode
[  536.264354][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.433330][ T5880] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  536.586273][ T5880] usb 5-1: Using ep0 maxpacket: 8
[  536.591795][ T5880] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  536.591832][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  536.591848][ T5880] usb 5-1: Product: syz
[  536.591858][ T5880] usb 5-1: Manufacturer: syz
[  536.591869][ T5880] usb 5-1: SerialNumber: syz
[  536.635454][ T5880] usb 5-1: config 0 descriptor??
[  536.655202][ T5880] gspca_main: sq905-2.14.0 probing 2770:9120
[  537.096198][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.186362][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.246815][ T5933] bond0 (unregistering): Released all slaves
[  537.544219][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.644260][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.647998][ T5880] gspca_sq905: bulk read fail (-22) len 0/4
[  537.648081][ T5880] sq905 5-1:0.0: probe with driver sq905 failed with error -5
[  537.714804][ T5933] bond0 (unregistering): Released all slaves
[  537.851838][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.910'.
[  538.452993][   T60] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  538.453348][ T9239] Bluetooth: hci2: command 0x1003 tx timeout
[  538.842870][   T43] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  539.007667][   T43] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  539.007701][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.007723][   T43] usb 4-1: Product: syz
[  539.007739][   T43] usb 4-1: Manufacturer: syz
[  539.007754][   T43] usb 4-1: SerialNumber: syz
[  539.016319][   T43] usb 4-1: config 0 descriptor??
[  539.063551][   T43] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  539.257213][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.292890][   T43] gspca_sunplus: reg_r err -71
[  539.306482][   T43] usb 4-1: USB disconnect, device number 60
[  539.326058][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.376020][ T5933] bond0 (unregistering): Released all slaves
[  539.403782][ T5933] bond1 (unregistering): (slave bond2): Releasing backup interface
[  539.445656][ T5933] bond1 (unregistering): Released all slaves
[  540.186541][ T5933] bond2 (unregistering): Released all slaves
[  540.445772][ T8949] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  541.509073][ T8949] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  541.586879][ T5889] usb 5-1: USB disconnect, device number 38
[  541.651855][ T8949] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  542.156520][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'.
[  544.236411][ T8993] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  544.299144][ T8993] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  544.355230][ T8993] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  544.503498][ T8993] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  545.064384][ T6007] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  545.865979][ T5933] hsr_slave_0: left promiscuous mode
[  545.903438][ T5933] hsr_slave_1: left promiscuous mode
[  545.904220][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.926555][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.942625][ T6007] usb 5-1: unable to get BOS descriptor or descriptor too short
[  545.943828][ T6007] usb 5-1: not running at top speed; connect to a high speed hub
[  545.945063][ T6007] usb 5-1: config 251 has an invalid interface number: 156 but max is 0
[  545.945089][ T6007] usb 5-1: config 251 has no interface number 0
[  545.945134][ T6007] usb 5-1: config 251 interface 156 has no altsetting 0
[  545.947995][ T6007] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  545.948018][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.948033][ T6007] usb 5-1: Product: syz
[  545.948044][ T6007] usb 5-1: Manufacturer: syz
[  545.948054][ T6007] usb 5-1: SerialNumber: syz
[  546.063454][ T5933] hsr_slave_0: left promiscuous mode
[  546.083553][ T5933] hsr_slave_1: left promiscuous mode
[  546.084707][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.134584][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.245035][ T6007] usb 5-1: unknown interface protocol 0x2c, assuming v1
[  546.245063][ T6007] usb 5-1: cannot find UAC_HEADER
[  546.273388][ T5933] hsr_slave_0: left promiscuous mode
[  546.424687][ T5933] hsr_slave_1: left promiscuous mode
[  546.425657][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.425686][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.429597][ T6007] snd-usb-audio 5-1:251.156: probe with driver snd-usb-audio failed with error -22
[  546.468469][ T6007] usb 5-1: USB disconnect, device number 39
[  546.494155][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.494185][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.507713][ T9156] udevd[9156]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  546.586607][ T9312] evm: overlay not supported
[  546.629410][ T5933] veth1_macvtap: left promiscuous mode
[  546.629522][ T5933] veth0_macvtap: left promiscuous mode
[  546.629834][ T5933] veth1_vlan: left promiscuous mode
[  547.083665][ T5880] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  547.245318][ T5880] usb 4-1: config 0 has an invalid interface number: 74 but max is 0
[  547.245349][ T5880] usb 4-1: config 0 has no interface number 0
[  547.245384][ T5880] usb 4-1: config 0 interface 74 has no altsetting 0
[  547.248125][ T5880] usb 4-1: New USB device found, idVendor=19d2, idProduct=0023, bcdDevice=40.46
[  547.248157][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.248172][ T5880] usb 4-1: Product: syz
[  547.248183][ T5880] usb 4-1: Manufacturer: syz
[  547.248194][ T5880] usb 4-1: SerialNumber: syz
[  547.285522][ T5880] usb 4-1: config 0 descriptor??
[  547.358189][ T5880] option 4-1:0.74: GSM modem (1-port) converter detected
[  547.516916][   T43] usb 4-1: USB disconnect, device number 61
[  547.518789][   T43] option 4-1:0.74: device disconnected
[  547.739685][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  547.908302][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  549.975407][ T9356] loop2: detected capacity change from 0 to 7
[  549.977347][ T9356] Dev loop2: unable to read RDB block 7
[  549.977381][ T9356]  loop2: AHDI p2
[  549.977409][ T9356] loop2: partition table partially beyond EOD, truncated
[  550.234018][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  550.335057][ T9361] netlink: 'syz.4.940': attribute type 10 has an invalid length.
[  550.335163][ T9362] netlink: 'syz.4.940': attribute type 10 has an invalid length.
[  550.356326][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  550.453316][  T806] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  550.603375][  T806] usb 4-1: Using ep0 maxpacket: 32
[  550.609844][  T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64
[  550.613862][  T806] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  550.613890][  T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.613910][  T806] usb 4-1: Product: syz
[  550.613924][  T806] usb 4-1: Manufacturer: syz
[  550.613937][  T806] usb 4-1: SerialNumber: syz
[  550.665989][  T806] usb 4-1: config 0 descriptor??
[  550.891274][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.901651][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.937191][  T806] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15
[  551.125114][ T6007] usb 4-1: USB disconnect, device number 62
[  551.802717][ T9367] netlink: 'syz.3.942': attribute type 1 has an invalid length.
[  553.403944][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  553.665947][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  555.166263][ T9239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  555.198494][ T9239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  555.199931][ T9239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  555.202117][ T9239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  555.216620][ T9239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  555.283311][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  555.283777][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  555.284263][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  555.285962][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  555.286831][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  556.031474][ T9361] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  556.491835][ T9027] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  558.041552][   T60] Bluetooth: hci2: command tx timeout
[  558.330418][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'.
[  558.375230][ T9027] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  558.451882][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'.
[  558.452200][ T9027] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  558.538235][ T9027] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  559.640047][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.805330][ T9374] chnl_net:caif_netlink_parms(): no params data found
[  559.836968][ T8993] 8021q: adding VLAN 0 to HW filter on device team0
[  560.055812][   T60] Bluetooth: hci2: command tx timeout
[  560.086857][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.086960][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.130727][ T9027] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.134526][ T6894] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  560.251247][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.251420][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  560.306535][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.306760][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.306970][ T9374] bridge_slave_0: entered allmulticast mode
[  560.309768][ T9374] bridge_slave_0: entered promiscuous mode
[  560.360933][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.361817][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.362025][ T9374] bridge_slave_1: entered allmulticast mode
[  560.390351][ T9374] bridge_slave_1: entered promiscuous mode
[  560.469837][ T9027] 8021q: adding VLAN 0 to HW filter on device team0
[  560.490341][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.230376][   T60] Bluetooth: hci2: command tx timeout
[  562.233574][ T6894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.233610][ T6894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.233636][ T6894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  562.233682][ T6894] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  562.233707][ T6894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.256078][ T6894] usb 4-1: config 0 descriptor??
[  562.420823][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.950969][ T6894] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd
[  562.986020][ T6894] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  563.077087][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.077226][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.315990][ T9374] team0: Port device team_slave_0 added
[  563.367394][ T9239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  563.370525][ T9239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  563.383284][ T9239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  563.389757][ T9239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  563.391631][ T9239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  563.454392][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.454548][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.460813][ T9374] team0: Port device team_slave_1 added
[  563.699076][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  563.699095][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  563.699126][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  563.774477][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  563.774496][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  563.774527][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  563.779584][ T6894] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  563.942918][ T6894] usb 5-1: Using ep0 maxpacket: 32
[  563.963540][ T6894] usb 5-1: config 250 has an invalid interface number: 8 but max is 0
[  563.963568][ T6894] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  563.963589][ T6894] usb 5-1: config 250 has no interface number 0
[  563.963635][ T6894] usb 5-1: config 250 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  563.963680][ T6894] usb 5-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9
[  563.963705][ T6894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.303323][ T9239] Bluetooth: hci2: command tx timeout
[  564.395645][ T5781] usb 4-1: USB disconnect, device number 63
[  564.641586][ T9374] hsr_slave_0: entered promiscuous mode
[  564.667332][ T9374] hsr_slave_1: entered promiscuous mode
[  564.686306][ T9374] debugfs: 'hsr0' already exists in 'hsr'
[  564.686341][ T9374] Cannot create hsr debugfs directory
[  564.735949][ T6894] usb 5-1: string descriptor 0 read error: -71
[  564.749794][ T6894] uvcvideo 5-1:250.8: Found Unit with invalid ID 0
[  564.749880][ T6894] uvcvideo 5-1:250.8: Found UVC 0.00 device <unnamed> (0ac8:3410)
[  564.749909][ T6894] uvcvideo 5-1:250.8: No valid video chain found.
[  564.792019][ T6894] usb 5-1: USB disconnect, device number 40
[  565.467967][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'.
[  565.503335][ T9239] Bluetooth: hci0: command tx timeout
[  565.533276][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'.
[  565.538734][ T9480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  565.698074][  T992] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  565.866805][  T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.869904][  T992] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  565.869938][  T992] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  565.869961][  T992] usb 5-1: Product: syz
[  565.869976][  T992] usb 5-1: Manufacturer: syz
[  565.869992][  T992] usb 5-1: SerialNumber: syz
[  565.889377][  T992] usb 5-1: config 0 descriptor??
[  565.944645][  T992] cdc_ether 5-1:0.0: skipping garbage
[  565.944667][  T992] cdc_ether 5-1:0.0: skipping garbage
[  565.944687][  T992] usb 5-1: bad CDC descriptors
[  565.951845][  T992] usb 5-1: unsupported MDLM descriptors
[  566.205172][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.205744][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.259408][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.285603][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.644770][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'.
[  566.673725][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'.
[  566.953422][  T806] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  567.573565][ T9239] Bluetooth: hci0: command tx timeout
[  567.648221][ T9442] chnl_net:caif_netlink_parms(): no params data found
[  568.300006][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  568.300081][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  568.410939][ T5889] usb 5-1: USB disconnect, device number 41
[  568.415937][ T9535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.959'.
[  568.481389][ T9538] syz.4.960 uses old SIOCAX25GETINFO
[  568.530569][ T9536] bridge0: port 3(bond0) entered blocking state
[  568.530765][ T9536] bridge0: port 3(bond0) entered disabled state
[  568.531094][ T9536] bond0: entered allmulticast mode
[  568.531115][ T9536] bond_slave_0: entered allmulticast mode
[  568.531138][ T9536] bond_slave_1: entered allmulticast mode
[  568.549164][ T9536] bond0: entered promiscuous mode
[  568.549238][ T9536] bond_slave_0: entered promiscuous mode
[  568.550937][ T9536] bond_slave_1: entered promiscuous mode
[  568.706317][ T9027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.012880][  T992] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  569.022799][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.022930][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.023187][ T9442] bridge_slave_0: entered allmulticast mode
[  569.026245][ T9442] bridge_slave_0: entered promiscuous mode
[  569.065608][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.065765][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.066019][ T9442] bridge_slave_1: entered allmulticast mode
[  569.068822][ T9442] bridge_slave_1: entered promiscuous mode
[  569.152151][  T992] usb 5-1: device descriptor read/64, error -71
[  569.281542][ T9442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.307186][ T9442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.383336][  T992] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  569.449110][ T9442] team0: Port device team_slave_0 added
[  569.480261][ T9442] team0: Port device team_slave_1 added
[  569.513454][  T992] usb 5-1: device descriptor read/64, error -71
[  569.579272][ T5933] bridge_slave_1: left allmulticast mode
[  569.579303][ T5933] bridge_slave_1: left promiscuous mode
[  569.579561][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.624860][  T992] usb usb5-port1: attempt power cycle
[  569.653331][ T9239] Bluetooth: hci0: command tx timeout
[  569.678845][ T5933] bridge_slave_0: left allmulticast mode
[  569.678875][ T5933] bridge_slave_0: left promiscuous mode
[  569.679223][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.786294][ T5933] bridge_slave_1: left allmulticast mode
[  569.786319][ T5933] bridge_slave_1: left promiscuous mode
[  569.786501][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.894454][ T5933] bridge_slave_0: left allmulticast mode
[  569.894479][ T5933] bridge_slave_0: left promiscuous mode
[  569.894666][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.963224][  T992] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  569.984318][  T992] usb 5-1: device descriptor read/8, error -71
[  570.222832][  T992] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  570.244125][  T992] usb 5-1: device descriptor read/8, error -71
[  570.356766][  T992] usb usb5-port1: unable to enumerate USB device
[  570.409032][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  570.424212][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  570.426157][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  570.427331][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  570.428473][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  571.264377][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.323969][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.348959][ T5933] bond0 (unregistering): Released all slaves
[  571.733535][ T9239] Bluetooth: hci0: command tx timeout
[  571.785100][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.824603][   T36] audit: type=1326 audit(1771208119.401:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.824768][   T36] audit: type=1326 audit(1771208119.401:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.825171][   T36] audit: type=1326 audit(1771208119.401:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.825348][   T36] audit: type=1326 audit(1771208119.401:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.825495][   T36] audit: type=1326 audit(1771208119.401:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.825882][   T36] audit: type=1326 audit(1771208119.401:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.827651][   T36] audit: type=1326 audit(1771208119.401:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.828144][   T36] audit: type=1326 audit(1771208119.401:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.828884][   T36] audit: type=1326 audit(1771208119.401:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  571.829367][   T36] audit: type=1326 audit(1771208119.401:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  572.094294][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.175698][ T5933] bond0 (unregistering): Released all slaves
[  572.432106][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.432126][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.432158][ T9442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.479395][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.479414][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.479444][ T9442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.628961][ T9239] Bluetooth: hci3: command tx timeout
[  573.723792][ T5933] hsr_slave_0: left promiscuous mode
[  573.764902][ T5933] hsr_slave_1: left promiscuous mode
[  573.765929][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.814770][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  574.004562][ T5933] hsr_slave_0: left promiscuous mode
[  574.513307][ T5933] hsr_slave_1: left promiscuous mode
[  574.514204][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.564187][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  574.603326][  T992] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  574.706609][ T9239] Bluetooth: hci3: command tx timeout
[  574.733266][  T992] usb 5-1: device descriptor read/64, error -71
[  574.973453][  T992] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  575.103509][  T992] usb 5-1: device descriptor read/64, error -71
[  575.213916][  T992] usb usb5-port1: attempt power cycle
[  575.512752][ T6894] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  575.543927][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  575.553437][  T992] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  575.589621][  T992] usb 5-1: device descriptor read/8, error -71
[  575.673834][ T6894] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  575.675354][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.675414][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.675435][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.676623][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.676688][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.676709][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.677882][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.677947][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.677968][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.679196][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.679259][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.679294][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.680553][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.680633][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.680653][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.681779][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.681830][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.681865][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.697802][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  575.856511][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.856569][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.856599][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.858866][ T6894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  575.858924][ T6894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  575.858954][ T6894] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.861489][ T6894] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  575.861512][ T6894] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  575.861527][ T6894] usb 4-1: Product: syz
[  575.861538][ T6894] usb 4-1: Manufacturer: syz
[  575.861548][ T6894] usb 4-1: SerialNumber: syz
[  575.951227][ T6894] usb 4-1: config 0 descriptor??
[  575.961344][  T992] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  575.975791][  T992] usb 5-1: device descriptor read/8, error -71
[  575.994272][ T6894] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  576.085055][  T992] usb usb5-port1: unable to enumerate USB device
[  576.176910][  T992] usb 4-1: USB disconnect, device number 65
[  576.196392][  T992] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  576.783030][ T9239] Bluetooth: hci3: command tx timeout
[  577.211725][   T36] kauditd_printk_skb: 218 callbacks suppressed
[  577.211746][   T36] audit: type=1326 audit(1771208124.781:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.242386][   T36] audit: type=1326 audit(1771208124.781:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.272165][   T36] audit: type=1326 audit(1771208124.841:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.299347][   T36] audit: type=1326 audit(1771208124.871:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.300442][   T36] audit: type=1326 audit(1771208124.871:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.300879][   T36] audit: type=1326 audit(1771208124.871:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.301237][   T36] audit: type=1326 audit(1771208124.871:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.301529][   T36] audit: type=1326 audit(1771208124.871:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.434085][   T36] audit: type=1326 audit(1771208125.011:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  577.434146][   T36] audit: type=1326 audit(1771208125.011:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  578.049263][ T9629] trusted_key: encrypted_key: insufficient parameters specified
[  578.052401][ T9621] syz.3.981 (9621) used greatest stack depth: 18336 bytes left
[  578.150791][ T9635] loop2: detected capacity change from 0 to 7
[  578.164732][ T9378] Dev loop2: unable to read RDB block 7
[  578.164761][ T9378]  loop2: AHDI p2
[  578.164791][ T9378] loop2: partition table partially beyond EOD, truncated
[  578.173856][ T9635] Dev loop2: unable to read RDB block 7
[  578.173940][ T9635]  loop2: AHDI p2
[  578.174041][ T9635] loop2: partition table partially beyond EOD, truncated
[  578.392870][ T6894] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  580.120545][ T9239] Bluetooth: hci3: command tx timeout
[  580.702657][ T6894] usb 4-1: Using ep0 maxpacket: 32
[  580.705070][ T6894] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  580.705100][ T6894] usb 4-1: config 0 has no interface number 0
[  580.708228][ T6894] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  580.708256][ T6894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.708279][ T6894] usb 4-1: Product: syz
[  580.708296][ T6894] usb 4-1: Manufacturer: syz
[  580.708311][ T6894] usb 4-1: SerialNumber: syz
[  580.783449][ T6894] usb 4-1: config 0 descriptor??
[  580.800767][ T6894] smsc95xx v2.0.0
[  581.013348][  T806] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[  581.162656][  T806] usb 5-1: Invalid ep0 maxpacket: 64
[  581.199686][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.215587][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.293441][  T806] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  581.394073][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  581.453301][  T806] usb 5-1: Invalid ep0 maxpacket: 64
[  581.456118][  T806] usb usb5-port1: attempt power cycle
[  581.559197][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  581.714627][ T6894] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  581.714669][ T6894] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  581.827611][  T806] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  581.844668][  T806] usb 5-1: Invalid ep0 maxpacket: 64
[  581.862468][ T6894] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  581.871502][ T6894] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  581.918433][ T6894] usb 4-1: USB disconnect, device number 66
[  581.987119][  T806] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  582.005097][  T806] usb 5-1: Invalid ep0 maxpacket: 64
[  582.005428][  T806] usb usb5-port1: unable to enumerate USB device
[  582.465791][ T9442] hsr_slave_0: entered promiscuous mode
[  582.468066][ T9442] hsr_slave_1: entered promiscuous mode
[  582.483399][ T9374] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  582.534942][ T9374] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  582.769225][ T9374] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  583.744956][ T9374] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  583.959367][ T9653] kvm: Disabled LAPIC found during irq injection
[  584.567490][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.568794][ T9662] bridge_slave_1: left allmulticast mode
[  584.568820][ T9662] bridge_slave_1: left promiscuous mode
[  584.569091][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.683183][  T992] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  584.704553][ T9662] bridge_slave_1: entered promiscuous mode
[  584.704757][ T9662] bridge_slave_1: entered allmulticast mode
[  584.836557][  T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.836623][  T992] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  584.836642][  T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.875690][  T992] usb 5-1: config 0 descriptor??
[  584.885507][  T992] usb 5-1: bad CDC descriptors
[  585.083766][ T9560] chnl_net:caif_netlink_parms(): no params data found
[  585.211544][  T992] usb 5-1: USB disconnect, device number 54
[  585.264815][ T9673] loop2: detected capacity change from 0 to 7
[  585.279482][ T9378] Dev loop2: unable to read RDB block 7
[  585.279531][ T9378]  loop2: AHDI p2
[  585.279571][ T9378] loop2: partition table partially beyond EOD, truncated
[  585.296428][ T9673] Dev loop2: unable to read RDB block 7
[  585.296507][ T9673]  loop2: AHDI p2
[  585.296583][ T9673] loop2: partition table partially beyond EOD, truncated
[  585.688889][ T9684] ip6erspan0: entered allmulticast mode
[  585.690524][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.690724][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.690945][ T9560] bridge_slave_0: entered allmulticast mode
[  585.697384][ T9560] bridge_slave_0: entered promiscuous mode
[  585.735847][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.736062][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.736313][ T9560] bridge_slave_1: entered allmulticast mode
[  585.757077][ T9560] bridge_slave_1: entered promiscuous mode
[  585.950546][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.990451][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.105269][ T9689] IPv6: NLM_F_CREATE should be specified when creating new route
[  586.107031][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'.
[  586.193831][   T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  586.239352][ T9560] team0: Port device team_slave_0 added
[  586.296657][ T9560] team0: Port device team_slave_1 added
[  586.342993][   T43] usb 4-1: Using ep0 maxpacket: 32
[  586.347924][   T43] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  586.347958][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.381707][   T43] usb 4-1: config 0 descriptor??
[  586.401646][   T43] gspca_main: sunplus-2.14.0 probing 041e:400b
[  586.488297][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.488317][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.488347][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.550499][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.550513][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.550534][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.634192][   T43] gspca_sunplus: reg_w_riv err -71
[  586.634271][   T43] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  586.652009][   T43] usb 4-1: USB disconnect, device number 67
[  586.672849][ T6894] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  586.712468][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.743313][ T9442] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  586.790840][ T9442] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  586.823059][ T6894] usb 5-1: Using ep0 maxpacket: 16
[  586.828244][ T9442] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  586.828491][ T6894] usb 5-1: config 1 descriptor has 1 excess byte, ignoring
[  586.828514][ T6894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  586.831072][ T6894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  586.831095][ T6894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.831110][ T6894] usb 5-1: Product: 회䉥꠱賃᪱侐製㦑ퟥ筬뱯㩤⸜ꀗℍ⍀䏫㉓㽦绰蜤鮕꺂ߡ꺤얷ﲏ櫁䜍龂ந㭬臭쎲㝵ᗌ嘝㞲爦塆脃暚瑩䓗ᾖₛ⁘蛫叩뀹唝䖰მ✽鱼윦凞箞䌸⓵ರ①觴硅ꦃȥ啭鑮䨭ዜꗗ聈ᮕﬗ㎜ᦎ塎ᖝ햹담포Ø쏥譿첔韵ⶃ톴⚔均꬏ᬌ酝
[  586.831134][ T6894] usb 5-1: Manufacturer: В
[  586.831144][ T6894] usb 5-1: SerialNumber: ఇ
[  586.989721][ T9442] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  587.051576][ T9560] hsr_slave_0: entered promiscuous mode
[  587.059816][ T9560] hsr_slave_1: entered promiscuous mode
[  587.061001][ T9560] debugfs: 'hsr0' already exists in 'hsr'
[  587.061029][ T9560] Cannot create hsr debugfs directory
[  587.166106][ T6894] usb 5-1: 0:2 : does not exist
[  587.219910][ T6894] usb 5-1: USB disconnect, device number 55
[  587.356316][ T9374] 8021q: adding VLAN 0 to HW filter on device team0
[  587.523220][ T5880] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  587.655044][ T5880] usb 4-1: device descriptor read/64, error -71
[  587.752018][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.752130][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.807224][ T9706] netlink: 'syz.4.1001': attribute type 10 has an invalid length.
[  587.858687][ T9707] netlink: 'syz.4.1001': attribute type 10 has an invalid length.
[  587.893439][ T5880] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  588.023334][ T5880] usb 4-1: device descriptor read/64, error -71
[  588.071413][ T9706] team0: Failed to send options change via netlink (err -105)
[  588.071432][ T9706] team0: Port device dummy0 added
[  588.072493][ T9707] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  588.123827][ T9707] team0: Failed to send options change via netlink (err -105)
[  588.123987][ T9707] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  588.126610][ T9707] team0: Port device dummy0 removed
[  588.131996][ T9707] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  588.169211][ T5880] usb usb4-port1: attempt power cycle
[  588.214266][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.214485][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.463682][ T5880] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  589.520415][ T5880] usb 4-1: device descriptor read/8, error -71
[  589.753285][ T5880] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  589.780767][ T5880] usb 4-1: device descriptor read/8, error -71
[  589.883792][ T5880] usb usb4-port1: unable to enumerate USB device
[  590.656397][ T9442] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.859394][ T5889] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  590.923904][ T5933] bridge_slave_1: left allmulticast mode
[  590.923935][ T5933] bridge_slave_1: left promiscuous mode
[  590.924196][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.014710][ T5889] usb 4-1: Using ep0 maxpacket: 32
[  591.018680][ T5933] bridge_slave_0: left allmulticast mode
[  591.018711][ T5933] bridge_slave_0: left promiscuous mode
[  591.018746][ T5889] usb 4-1: config 7 has an invalid interface number: 7 but max is 3
[  591.018771][ T5889] usb 4-1: config 7 has an invalid interface number: 223 but max is 3
[  591.018793][ T5889] usb 4-1: config 7 has an invalid interface number: 5 but max is 3
[  591.018818][ T5889] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  591.018834][ T5889] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  591.018850][ T5889] usb 4-1: config 7 has 3 interfaces, different from the descriptor's value: 4
[  591.018868][ T5889] usb 4-1: config 7 has no interface number 0
[  591.018881][ T5889] usb 4-1: config 7 has no interface number 1
[  591.018894][ T5889] usb 4-1: config 7 has no interface number 2
[  591.019018][ T5889] usb 4-1: config 7 interface 7 altsetting 5 endpoint 0xC has an invalid bInterval 234, changing to 11
[  591.019044][ T5889] usb 4-1: config 7 interface 7 altsetting 5 has an endpoint descriptor with address 0xF6, changing to 0x86
[  591.019067][ T5889] usb 4-1: config 7 interface 7 altsetting 5 endpoint 0x86 has an invalid bInterval 184, changing to 7
[  591.019091][ T5889] usb 4-1: config 7 interface 7 altsetting 5 endpoint 0x86 has invalid maxpacket 17503, setting to 1024
[  591.019116][ T5889] usb 4-1: config 7 interface 7 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  591.019142][ T5889] usb 4-1: config 7 interface 7 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  591.019167][ T5889] usb 4-1: config 7 interface 7 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  591.019188][ T5889] usb 4-1: config 7 interface 7 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  591.019206][ T5889] usb 4-1: config 7 interface 7 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  591.019227][ T5889] usb 4-1: config 7 interface 7 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  591.019250][ T5889] usb 4-1: config 7 interface 7 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  591.019274][ T5889] usb 4-1: config 7 interface 7 altsetting 5 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  591.019309][ T5889] usb 4-1: config 7 interface 223 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  591.019334][ T5889] usb 4-1: too many endpoints for config 7 interface 5 altsetting 9: 173, using maximum allowed: 30
[  591.019405][ T5889] usb 4-1: config 7 interface 5 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  591.019426][ T5889] usb 4-1: config 7 interface 5 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 173
[  591.019453][ T5889] usb 4-1: config 7 interface 7 has no altsetting 0
[  591.019471][ T5889] usb 4-1: config 7 interface 223 has no altsetting 0
[  591.019488][ T5889] usb 4-1: config 7 interface 5 has no altsetting 0
[  591.020909][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.090804][ T5889] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=73.38
[  591.090912][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.090981][ T5889] usb 4-1: Product: syz
[  591.091023][ T5889] usb 4-1: Manufacturer: syz
[  591.091064][ T5889] usb 4-1: SerialNumber: syz
[  591.143280][ T5880] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  591.232663][ T9727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  591.384259][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.407102][ T5880] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  591.407136][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  591.407159][ T5880] usb 5-1: Product: syz
[  591.407175][ T5880] usb 5-1: Manufacturer: syz
[  591.407191][ T5880] usb 5-1: SerialNumber: syz
[  591.449099][ T5880] usb 5-1: config 0 descriptor??
[  591.550489][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.577233][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.604307][ T5880] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  591.623821][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.630700][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.654649][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.657322][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.732287][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.986412][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.768020][ T9377] udevd[9377]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  593.408610][ T5889] usb 4-1: Expected 3 endpoints, found: 8
[  593.504356][ T5889] usb 4-1: USB disconnect, device number 72
[  593.994731][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  594.074196][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  594.104701][ T5933] bond0 (unregistering): Released all slaves
[  594.250109][   T31] usb 5-1: USB disconnect, device number 56
[  594.339993][ T9442] 8021q: adding VLAN 0 to HW filter on device team0
[  594.381813][ T9759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1007'.
[  594.424293][   T36] kauditd_printk_skb: 26 callbacks suppressed
[  594.424313][   T36] audit: type=1326 audit(1771208142.001:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  594.424426][   T36] audit: type=1326 audit(1771208142.001:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6de03bf79 code=0x7ffc0000
[  594.661626][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.661719][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  594.886724][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.886894][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.034486][ T5933] hsr_slave_0: left promiscuous mode
[  595.054763][ T5933] hsr_slave_1: left promiscuous mode
[  595.055549][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.092788][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  595.692784][  T806] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  595.854695][  T806] usb 4-1: Using ep0 maxpacket: 32
[  595.861025][  T806] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  595.861060][  T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.875964][ T5880] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  595.898473][  T806] usb 4-1: config 0 descriptor??
[  596.023199][ T5880] usb 5-1: Using ep0 maxpacket: 8
[  596.030619][ T5880] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  596.030711][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.030734][ T5880] usb 5-1: Product: syz
[  596.030750][ T5880] usb 5-1: Manufacturer: syz
[  596.030765][ T5880] usb 5-1: SerialNumber: syz
[  596.040700][ T5880] usb 5-1: config 0 descriptor??
[  596.049656][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  596.138360][  T806] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  596.201967][  T806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  596.213965][  T806] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  596.214026][  T806] usb 4-1: media controller created
[  596.275850][ T5880] gspca_sonixj: reg_w1 err -71
[  596.275942][ T5880] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  596.303863][ T5880] usb 5-1: USB disconnect, device number 57
[  596.310320][  T806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  596.403447][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.403920][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.515336][  T806] az6027: usb out operation failed. (-71)
[  596.515827][  T806] az6027: usb out operation failed. (-71)
[  596.515844][  T806] stb0899_attach: Driver disabled by Kconfig
[  596.515855][  T806] az6027: no front-end attached
[  596.515855][  T806] 
[  596.516276][  T806] az6027: usb out operation failed. (-71)
[  596.516292][  T806] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  596.521611][  T806] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  596.578434][  T806] dvb-usb: schedule remote query interval to 400 msecs.
[  596.578461][  T806] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  596.624818][  T806] usb 4-1: USB disconnect, device number 73
[  596.807770][  T806] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  596.864009][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  597.126253][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  597.423317][ T5880] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  597.583598][ T5880] usb 4-1: Using ep0 maxpacket: 32
[  597.586100][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.588598][ T5880] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  597.588632][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.588647][ T5880] usb 4-1: Product: syz
[  597.588657][ T5880] usb 4-1: Manufacturer: syz
[  597.588686][ T5880] usb 4-1: SerialNumber: syz
[  597.598847][ T5880] usb 4-1: config 0 descriptor??
[  597.651078][ T5880] cdc_ether 4-1:0.0: skipping garbage
[  597.651102][ T5880] usb 4-1: bad CDC descriptors
[  597.652154][ T5880] usb 4-1: unsupported MDLM descriptors
[  598.053012][ T6007] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  598.205050][ T6007] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  598.205073][ T6007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.205087][ T6007] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  598.205122][ T6007] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  598.207386][ T6007] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  598.207408][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  598.207423][ T6007] usb 5-1: Product: syz
[  598.207434][ T6007] usb 5-1: Manufacturer: syz
[  598.282101][ T6007] cdc_wdm 5-1:1.0: skipping garbage
[  598.282123][ T6007] cdc_wdm 5-1:1.0: skipping garbage
[  598.309413][ T6007] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  599.298647][ T6894] usb 4-1: USB disconnect, device number 74
[  599.301527][ T5889] usb 5-1: USB disconnect, device number 58
[  599.449229][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.202122][ T9560] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  600.237324][ T9560] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  600.303581][ T9560] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  600.392017][ T9560] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  600.610203][ T9442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.719670][ T9374] veth0_vlan: entered promiscuous mode
[  600.781883][ T9374] veth1_vlan: entered promiscuous mode
[  600.953672][ T9374] veth0_macvtap: entered promiscuous mode
[  600.991193][ T9374] veth1_macvtap: entered promiscuous mode
[  601.043330][ T7304] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  601.102182][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.124998][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.171164][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.193203][ T7304] usb 5-1: Using ep0 maxpacket: 16
[  601.194094][ T7304] usb 5-1: too many configurations: 214, using maximum allowed: 8
[  601.196008][ T7304] usb 5-1: unable to read config index 0 descriptor/start: -61
[  601.196044][ T7304] usb 5-1: can't read configurations, error -61
[  601.275568][   T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.279395][   T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.303595][   T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.308834][ T9560] 8021q: adding VLAN 0 to HW filter on device team0
[  601.310742][   T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.324736][ T7304] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  601.447095][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.447290][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.476629][ T9839] 9p: Bad value for 'rfdno'
[  601.494525][ T7304] usb 5-1: Using ep0 maxpacket: 16
[  601.495418][ T7304] usb 5-1: too many configurations: 214, using maximum allowed: 8
[  601.519289][ T7304] usb 5-1: unable to read config index 0 descriptor/start: -61
[  601.519329][ T7304] usb 5-1: can't read configurations, error -61
[  601.527954][ T7304] usb usb5-port1: attempt power cycle
[  601.602063][ T9442] veth0_vlan: entered promiscuous mode
[  601.613898][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.615411][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.781989][ T9442] veth1_vlan: entered promiscuous mode
[  601.820975][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  601.820999][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  601.852733][ T6894] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  601.933366][ T7304] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  601.954238][ T7304] usb 5-1: Using ep0 maxpacket: 16
[  601.955183][ T7304] usb 5-1: too many configurations: 214, using maximum allowed: 8
[  601.956805][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  601.956826][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  601.959575][ T7304] usb 5-1: unable to read config index 0 descriptor/start: -61
[  601.959608][ T7304] usb 5-1: can't read configurations, error -61
[  602.024282][ T6894] usb 4-1: config 1 has an invalid interface number: 58 but max is 1
[  602.024309][ T6894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  602.024325][ T6894] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  602.024343][ T6894] usb 4-1: config 1 has no interface number 2
[  602.024398][ T6894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.024434][ T6894] usb 4-1: config 1 interface 58 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  602.024460][ T6894] usb 4-1: config 1 interface 58 has no altsetting 0
[  602.084218][ T7304] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  602.097735][ T6894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  602.097765][ T6894] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  602.097784][ T6894] usb 4-1: Product: syz
[  602.097798][ T6894] usb 4-1: SerialNumber: syz
[  602.105997][ T7304] usb 5-1: Using ep0 maxpacket: 16
[  602.118832][ T7304] usb 5-1: too many configurations: 214, using maximum allowed: 8
[  602.167182][ T6894] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  602.167234][ T6894] cdc_ncm 4-1:1.0: bind() failure
[  602.169710][ T7304] usb 5-1: unable to read config index 0 descriptor/start: -61
[  602.169748][ T7304] usb 5-1: can't read configurations, error -61
[  602.170659][ T7304] usb usb5-port1: unable to enumerate USB device
[  602.213957][ T6894] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  602.214008][ T6894] cdc_ncm 4-1:1.1: bind() failure
[  602.285317][ T9442] veth0_macvtap: entered promiscuous mode
[  602.320645][ T9442] veth1_macvtap: entered promiscuous mode
[  602.581961][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.629887][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.687733][ T5943] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.688002][ T5943] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  602.695197][ T5943] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  602.739509][ T5943] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.830534][   T43] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  604.268726][   T43] usb 8-1: unable to get BOS descriptor or descriptor too short
[  604.308471][   T43] usb 8-1: not running at top speed; connect to a high speed hub
[  604.362486][   T43] usb 8-1: config 251 has an invalid interface number: 156 but max is 0
[  604.362880][   T43] usb 8-1: config 251 has no interface number 0
[  604.362976][   T43] usb 8-1: config 251 interface 156 has no altsetting 0
[  604.470460][   T43] usb 8-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  604.470494][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.470685][   T43] usb 8-1: Product: syz
[  604.470877][   T43] usb 8-1: Manufacturer: syz
[  604.470895][   T43] usb 8-1: SerialNumber: syz
[  607.651849][ T6894] cdc_mbim 4-1:1.58: probe with driver cdc_mbim failed with error -110
[  608.345402][ T6894] usb 4-1: USB disconnect, device number 75
[  608.500208][   T43] usb 8-1: unknown interface protocol 0x2c, assuming v1
[  608.500236][   T43] usb 8-1: cannot find UAC_HEADER
[  608.530251][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  608.711707][   T43] snd-usb-audio 8-1:251.156: probe with driver snd-usb-audio failed with error -22
[  608.749303][   T43] usb 8-1: USB disconnect, device number 2
[  608.796807][ T9377] udevd[9377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  609.174708][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.174732][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.407393][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'.
[  610.457463][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.457487][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.499501][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'.
[  612.852192][ T9560] veth0_vlan: entered promiscuous mode
[  612.897975][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'.
[  612.922913][ T5810] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  613.046169][ T9560] veth1_vlan: entered promiscuous mode
[  613.072670][ T5810] usb 4-1: Using ep0 maxpacket: 16
[  613.104095][ T5810] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52
[  613.104132][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.104153][ T5810] usb 4-1: Product: syz
[  613.104168][ T5810] usb 4-1: Manufacturer: syz
[  613.104183][ T5810] usb 4-1: SerialNumber: syz
[  613.157405][ T5810] usb 4-1: config 0 descriptor??
[  613.219473][ T6007] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  613.306867][ T9560] veth0_macvtap: entered promiscuous mode
[  613.328222][ T9560] veth1_macvtap: entered promiscuous mode
[  613.407181][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.407231][ T6007] usb 7-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[  613.407257][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.716924][   T43] usb 4-1: USB disconnect, device number 76
[  615.309257][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.024507][  T806] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  616.351654][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.420290][ T6007] usb 7-1: config 0 descriptor??
[  616.515066][ T6007] usb 7-1: can't set config #0, error -71
[  616.531100][ T6007] usb 7-1: USB disconnect, device number 2
[  616.585777][  T806] usb 5-1: device descriptor read/all, error -71
[  616.616559][ T5943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.617772][ T5943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.618579][ T5943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.619075][ T5943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.302623][ T6007] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  619.391230][ T9904] loop5: detected capacity change from 0 to 7
[  619.461458][ T9904] Dev loop5: unable to read RDB block 7
[  619.461510][ T9904]  loop5: unable to read partition table
[  619.462214][ T9904] loop5: partition table beyond EOD, truncated
[  619.462237][ T9904] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  619.743337][ T6007] usb 7-1: Using ep0 maxpacket: 32
[  620.255233][ T6007] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  620.255264][ T6007] usb 7-1: config 0 has no interface number 0
[  620.255312][ T6007] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  620.255343][ T6007] usb 7-1: config 0 interface 85 has no altsetting 0
[  620.258993][ T6007] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  620.259024][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.259047][ T6007] usb 7-1: Product: syz
[  620.259063][ T6007] usb 7-1: Manufacturer: syz
[  620.259078][ T6007] usb 7-1: SerialNumber: syz
[  620.275235][ T6007] usb 7-1: config 0 descriptor??
[  620.681794][ T8462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.681826][ T8462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.716771][ T6007] appletouch 7-1:0.85: Geyser mode initialized.
[  620.765513][ T6007] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input18
[  621.043610][ T9920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1046'.
[  621.087932][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.087958][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.208697][   T43] usb 7-1: USB disconnect, device number 3
[  623.407473][ T9934] loop5: detected capacity change from 0 to 7
[  623.424746][ T9934] Dev loop5: unable to read RDB block 7
[  623.424781][ T9934]  loop5: AHDI p2 p3
[  623.424809][ T9934] loop5: partition table partially beyond EOD, truncated
[  623.457650][   T43] appletouch 7-1:0.85: input: appletouch disconnected
[  623.846441][ T9947] loop5: detected capacity change from 0 to 7
[  623.850419][ T9947] Dev loop5: unable to read RDB block 7
[  623.850466][ T9947]  loop5: unable to read partition table
[  623.850693][ T9947] loop5: partition table beyond EOD, truncated
[  623.850727][ T9947] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  624.082772][   T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  624.239853][   T43] usb 6-1: Using ep0 maxpacket: 8
[  624.251545][   T43] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  624.251577][   T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  624.251605][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  624.251634][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  624.258890][   T43] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  624.258923][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.258947][   T43] usb 6-1: Product: syz
[  624.258963][   T43] usb 6-1: Manufacturer: syz
[  624.258979][   T43] usb 6-1: SerialNumber: syz
[  624.336805][   T43] usb 6-1: config 0 descriptor??
[  624.663878][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  624.670748][   T43] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19
[  625.627255][ T9964] loop2: detected capacity change from 0 to 7
[  625.641655][ T9964] Dev loop2: unable to read RDB block 7
[  625.641698][ T9964]  loop2: AHDI p2 p3
[  625.641728][ T9964] loop2: partition table partially beyond EOD, truncated
[  625.641978][ T9964] loop2: p3 start 335544320 is beyond EOD, truncated
[  625.912630][   T43] rc_core: IR keymap rc-imon-pad not found
[  625.912653][   T43] Registered IR keymap rc-empty
[  625.912758][   T43] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  625.912778][   T43] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  626.044503][   T43] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  626.084246][   T43] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20
[  626.148604][   T43] imon 6-1:0.0: iMON device (15c2:003b, intf0) on usb<6:2> initialized
[  626.170329][   T43] usb 6-1: USB disconnect, device number 2
[  626.326386][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1060'.
[  626.393316][ T9983] loop5: detected capacity change from 0 to 7
[  626.394950][ T9983] Dev loop5: unable to read RDB block 7
[  626.394981][ T9983]  loop5: AHDI p2 p3
[  626.395009][ T9983] loop5: partition table partially beyond EOD, truncated
[  629.623042][ T6894] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  629.743617][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  629.743757][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  629.851708][ T6894] usb 4-1: unable to get BOS descriptor or descriptor too short
[  629.866087][ T6894] usb 4-1: not running at top speed; connect to a high speed hub
[  629.923615][ T6894] usb 4-1: config 251 has an invalid interface number: 156 but max is 0
[  629.923651][ T6894] usb 4-1: config 251 has no interface number 0
[  629.923696][ T6894] usb 4-1: config 251 interface 156 has no altsetting 0
[  629.965691][ T6894] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  629.965759][ T6894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.965823][ T6894] usb 4-1: Product: syz
[  629.965841][ T6894] usb 4-1: Manufacturer: syz
[  629.965890][ T6894] usb 4-1: SerialNumber: syz
[  633.683961][ T6894] usb 4-1: unknown interface protocol 0x2c, assuming v1
[  633.683980][ T6894] usb 4-1: cannot find UAC_HEADER
[  633.689995][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1068'.
[  633.917263][T10021] loop2: detected capacity change from 0 to 7
[  633.940785][T10021] Dev loop2: unable to read RDB block 7
[  633.940820][T10021]  loop2: AHDI p2 p3
[  633.940850][T10021] loop2: partition table partially beyond EOD, truncated
[  633.941690][T10021] loop2: p3 start 335544320 is beyond EOD, truncated
[  634.164996][ T6894] snd-usb-audio 4-1:251.156: probe with driver snd-usb-audio failed with error -22
[  634.195607][ T6894] usb 4-1: USB disconnect, device number 77
[  634.277556][T10031] netlink: 'syz.4.1072': attribute type 10 has an invalid length.
[  634.281038][ T9378] udevd[9378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.403616][T10032] loop5: detected capacity change from 0 to 7
[  634.410756][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'.
[  634.411103][T10032] Dev loop5: unable to read RDB block 7
[  634.411131][T10032]  loop5: AHDI p2 p3
[  634.411160][T10032] loop5: partition table partially beyond EOD, truncated
[  634.456620][  T806] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  634.613387][  T806] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  634.613429][  T806] usb 7-1: can't read configurations, error -22
[  634.658747][T10031] hsr0: entered promiscuous mode
[  634.686970][T10031] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  634.687259][T10031] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  634.687282][T10031] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  634.734098][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'.
[  634.744950][  T806] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  634.915505][  T806] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  634.915547][  T806] usb 7-1: can't read configurations, error -22
[  634.915923][  T806] usb usb7-port1: attempt power cycle
[  635.253366][  T806] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  635.277270][  T806] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  635.277312][  T806] usb 7-1: can't read configurations, error -22
[  635.314596][T10063] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1077'.
[  635.402924][  T806] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  635.437324][  T806] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  635.437365][  T806] usb 7-1: can't read configurations, error -22
[  635.444283][  T806] usb usb7-port1: unable to enumerate USB device
[  635.495498][ T6894] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  635.741133][ T6894] usb 8-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  635.741269][ T6894] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  635.741360][ T6894] usb 8-1: config 253 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.741387][ T6894] usb 8-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  635.842803][   T31] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  636.133513][ T6894] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  636.133613][ T6894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  636.133638][ T6894] usb 8-1: SerialNumber: syz
[  636.354335][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  636.358172][   T31] usb 6-1: not running at top speed; connect to a high speed hub
[  636.407367][   T31] usb 6-1: config 251 has an invalid interface number: 156 but max is 0
[  636.407575][   T31] usb 6-1: config 251 has no interface number 0
[  636.407818][   T31] usb 6-1: config 251 interface 156 has no altsetting 0
[  636.658910][   T31] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  636.659225][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.659250][   T31] usb 6-1: Product: syz
[  636.659424][   T31] usb 6-1: Manufacturer: syz
[  636.659480][   T31] usb 6-1: SerialNumber: syz
[  636.933614][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.195204][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.037150][ T6894] rndis_host 8-1:253.0: probe with driver rndis_host failed with error -22
[  638.653794][T10071] loop2: detected capacity change from 0 to 7
[  639.425095][ T6894] usb 8-1: USB disconnect, device number 3
[  640.235322][T10071] Dev loop2: unable to read RDB block 7
[  640.235735][T10071]  loop2: AHDI p2
[  640.236147][T10071] loop2: partition table partially beyond EOD, truncated
[  641.143860][   T31] usb 6-1: unknown interface protocol 0x2c, assuming v1
[  641.143880][   T31] usb 6-1: cannot find UAC_HEADER
[  642.025921][   T31] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22
[  642.100641][T10086] loop5: detected capacity change from 0 to 7
[  642.101736][   T31] usb 6-1: USB disconnect, device number 3
[  642.136941][T10086] Dev loop5: unable to read RDB block 7
[  642.136975][T10086]  loop5: AHDI p2 p3
[  642.137005][T10086] loop5: partition table partially beyond EOD, truncated
[  642.331463][T10095] syz_tun: entered allmulticast mode
[  642.375179][ T9378] udevd[9378]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  642.459550][T10094] syz_tun: left allmulticast mode
[  642.468898][   T36] audit: type=1326 audit(1771208190.031:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.6.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccd34bf79 code=0x7ffc0000
[  642.469097][   T36] audit: type=1326 audit(1771208190.031:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.6.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ccd34bf79 code=0x7ffc0000
[  642.469212][   T36] audit: type=1326 audit(1771208190.031:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.6.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccd34bf79 code=0x7ffc0000
[  642.469324][   T36] audit: type=1326 audit(1771208190.031:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.6.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f9ccd34bf79 code=0x7ffc0000
[  642.469439][   T36] audit: type=1326 audit(1771208190.031:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.6.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccd34bf79 code=0x7ffc0000
[  642.469556][   T36] audit: type=1326 audit(1771208190.031:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10094 comm="syz.6.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccd34bf79 code=0x7ffc0000
[  642.736004][T10106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.740101][T10092] syzkaller0: entered promiscuous mode
[  642.740129][T10092] syzkaller0: entered allmulticast mode
[  643.088418][T10110] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1091'.
[  643.641962][T10116] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  644.932762][   T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  645.370195][T10140] loop2: detected capacity change from 0 to 7
[  645.408601][ T9378] Dev loop2: unable to read RDB block 7
[  645.408634][ T9378]  loop2: AHDI p2
[  645.409386][ T9378] loop2: partition table partially beyond EOD, truncated
[  645.546806][T10140] Dev loop2: unable to read RDB block 7
[  645.546831][T10140]  loop2: AHDI p2
[  645.549655][T10140] loop2: partition table partially beyond EOD, truncated
[  646.552950][T10072] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  647.124109][T10072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  647.175601][T10072] usb 5-1: not running at top speed; connect to a high speed hub
[  647.197626][T10072] usb 5-1: config 251 has an invalid interface number: 156 but max is 0
[  647.197673][T10072] usb 5-1: config 251 has no interface number 0
[  647.197855][T10072] usb 5-1: config 251 interface 156 has no altsetting 0
[  647.358805][T10072] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  647.358849][T10072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.358978][T10072] usb 5-1: Product: syz
[  647.359161][T10072] usb 5-1: Manufacturer: syz
[  647.359179][T10072] usb 5-1: SerialNumber: syz
[  648.511332][ T5781] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  651.618602][T10072] usb 5-1: unknown interface protocol 0x2c, assuming v1
[  651.618628][T10072] usb 5-1: cannot find UAC_HEADER
[  655.886382][T10072] snd-usb-audio 5-1:251.156: probe with driver snd-usb-audio failed with error -22
[  655.956503][T10072] usb 5-1: USB disconnect, device number 65
[  656.001322][ T9378] udevd[9378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  656.271770][T10173] 9p: Bad value for 'wfdno'
[  656.332670][ T5781] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  656.496293][ T5781] usb 7-1: config 0 has an invalid interface number: 156 but max is 0
[  656.496327][ T5781] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  656.496347][ T5781] usb 7-1: config 0 has no interface number 0
[  656.496395][ T5781] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  656.496420][ T5781] usb 7-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  656.496465][ T5781] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  656.496490][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.554518][ T5781] usb 7-1: config 0 descriptor??
[  656.625957][ T5781] gspca_main: spca561-2.14.0 probing abcd:cdee
[  656.855720][T10193] loop5: detected capacity change from 0 to 7
[  656.860267][T10193] Dev loop5: unable to read RDB block 7
[  656.860315][T10193]  loop5: unable to read partition table
[  656.880809][T10193] loop5: partition table beyond EOD, truncated
[  656.880850][T10193] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  657.144238][ T5781] spca561 7-1:0.156: probe with driver spca561 failed with error -22
[  657.145991][ T5781] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  657.146062][ T5781] usb 7-1: MIDIStreaming interface descriptor not found
[  657.327948][T10199] loop2: detected capacity change from 0 to 7
[  657.331449][T10199] Dev loop2: unable to read RDB block 7
[  657.331481][T10199]  loop2: AHDI p2
[  657.331510][T10199] loop2: partition table partially beyond EOD, truncated
[  659.398111][ T5781] usb 7-1: USB disconnect, device number 9
[  661.534188][T10220] netlink: 199100 bytes leftover after parsing attributes in process `syz.4.1117'.
[  661.960534][T10234] netlink: 'syz.4.1119': attribute type 2 has an invalid length.
[  661.960558][T10234] netlink: 'syz.4.1119': attribute type 1 has an invalid length.
[  661.961021][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'.
[  662.240412][T10236] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1120'.
[  662.241689][T10236] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1120'.
[  662.245448][T10236] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1120'.
[  662.644798][T10248] loop5: detected capacity change from 0 to 7
[  662.660008][T10248] Dev loop5: unable to read RDB block 7
[  662.660061][T10248]  loop5: unable to read partition table
[  662.660266][T10248] loop5: partition table beyond EOD, truncated
[  662.660294][T10248] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  665.188797][T10260] efs: cannot read volume header
[  665.295637][T10262] loop2: detected capacity change from 0 to 7
[  665.309766][T10262] Dev loop2: unable to read RDB block 7
[  665.309797][T10262]  loop2: AHDI p2
[  665.309828][T10262] loop2: partition table partially beyond EOD, truncated
[  668.523193][T10287] binder: 10283:10287 ioctl c018620c 200000000180 returned -1
[  670.850854][T10294] loop5: detected capacity change from 0 to 7
[  670.853726][T10294] Dev loop5: unable to read RDB block 7
[  670.853811][T10294]  loop5: AHDI p2 p3
[  670.853864][T10294] loop5: partition table partially beyond EOD, truncated
[  671.385605][   T31] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  671.394162][ T5781] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  671.599213][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short
[  671.607692][ T5781] usb 6-1: not running at top speed; connect to a high speed hub
[  671.636608][ T5781] usb 6-1: config 251 has an invalid interface number: 156 but max is 0
[  671.636641][ T5781] usb 6-1: config 251 has no interface number 0
[  671.636779][ T5781] usb 6-1: config 251 interface 156 has no altsetting 0
[  671.675769][ T5781] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  671.675853][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.675914][ T5781] usb 6-1: Product: syz
[  671.675931][ T5781] usb 6-1: Manufacturer: syz
[  671.675996][ T5781] usb 6-1: SerialNumber: syz
[  675.559704][ T5781] usb 6-1: unknown interface protocol 0x2c, assuming v1
[  675.559768][ T5781] usb 6-1: cannot find UAC_HEADER
[  675.883722][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'.
[  675.956342][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.960480][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.043271][ T6894] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  676.206001][ T6894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  676.206034][ T6894] usb 4-1: config 1 has no interface number 0
[  676.206090][ T6894] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  676.206122][ T6894] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  676.206151][ T6894] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  676.206187][ T6894] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  676.206217][ T6894] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  676.289365][ T6894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  676.289397][ T6894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.289419][ T6894] usb 4-1: Product: syz
[  676.289435][ T6894] usb 4-1: Manufacturer: syz
[  676.289450][ T6894] usb 4-1: SerialNumber: syz
[  676.369889][T10305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  676.451065][ T5781] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22
[  676.518597][ T5781] usb 6-1: USB disconnect, device number 4
[  676.666111][ T9377] udevd[9377]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  677.027698][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  677.031303][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  677.041162][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  677.045193][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  677.046629][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  677.198235][T10326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  677.406822][T10326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  677.904840][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  678.004369][ T9831] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  678.053550][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.056972][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.185672][ T9831] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  678.185703][ T9831] usb 5-1: config 0 has no interface number 0
[  678.185792][ T9831] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  678.189346][ T9831] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  678.189378][ T9831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.189398][ T9831] usb 5-1: Product: syz
[  678.189412][ T9831] usb 5-1: Manufacturer: syz
[  678.189433][ T9831] usb 5-1: SerialNumber: syz
[  678.289066][ T9831] usb 5-1: config 0 descriptor??
[  678.341388][ T9831] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  678.779156][ T9831] usb 5-1: USB disconnect, device number 66
[  678.791226][ T9831] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  679.172807][   T60] Bluetooth: hci5: command tx timeout
[  682.367105][ T5796] Bluetooth: hci5: command tx timeout
[  683.748448][ T6894] cdc_ncm 4-1:1.1: bind() failure
[  684.375855][ T5796] Bluetooth: hci5: command tx timeout
[  685.620338][ T5933] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.002786][ T6894] usb 4-1: USB disconnect, device number 80
[  686.485801][   T60] Bluetooth: hci5: command tx timeout
[  686.721418][ T5933] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.753220][ T9831] usb 4-1: new low-speed USB device number 81 using dummy_hcd
[  686.875518][T10400] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  686.916054][ T9831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.916076][ T9831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  686.916110][ T9831] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  686.938062][T10400] bond1 (unregistering): Released all slaves
[  686.952442][ T9831] usb 4-1: string descriptor 0 read error: -22
[  686.953361][ T9831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  686.953391][ T9831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.037106][ T9831] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  687.037158][ T9831] cdc_ncm 4-1:1.0: bind() failure
[  687.279924][ T5810] usb 4-1: USB disconnect, device number 81
[  688.918387][   T60] Bluetooth: hci0: command 0x0406 tx timeout
[  689.217971][ T5933] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.294910][T10319] chnl_net:caif_netlink_parms(): no params data found
[  689.313286][ T9831] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  689.473313][ T9831] usb 7-1: Using ep0 maxpacket: 32
[  689.475902][ T9831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.475938][ T9831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.475980][ T9831] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  689.476005][ T9831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.651537][ T9831] usb 7-1: config 0 descriptor??
[  690.682299][T10422] loop2: detected capacity change from 0 to 7
[  690.713759][ T9378] Dev loop2: unable to read RDB block 7
[  690.713786][ T9378]  loop2: AHDI p2
[  690.713826][ T9378] loop2: partition table partially beyond EOD, truncated
[  690.830479][T10422] Dev loop2: unable to read RDB block 7
[  690.830570][T10422]  loop2: AHDI p2
[  690.830600][T10422] loop2: partition table partially beyond EOD, truncated
[  690.902018][ T9831] usbhid 7-1:0.0: can't add hid device: -71
[  690.902151][ T9831] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  690.927951][ T9831] usb 7-1: USB disconnect, device number 11
[  690.982640][ T5810] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  691.132637][ T5810] usb 8-1: Using ep0 maxpacket: 16
[  691.136428][ T5810] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  691.136465][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  691.138905][ T5810] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  691.138936][ T5810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.138958][ T5810] usb 8-1: Product: syz
[  691.138973][ T5810] usb 8-1: Manufacturer: syz
[  691.138989][ T5810] usb 8-1: SerialNumber: syz
[  691.193651][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  691.193851][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  691.289758][ T5810] usb 8-1: config 0 descriptor??
[  691.324825][ T5810] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  691.324853][ T5810] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  691.629567][ T5933] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.649644][T10438] loop5: detected capacity change from 0 to 7
[  691.664033][T10438] Dev loop5: unable to read RDB block 7
[  691.664066][T10438]  loop5: AHDI p2 p3
[  691.664493][T10438] loop5: partition table partially beyond EOD, truncated
[  692.514207][T10319] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.515104][T10319] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.517444][T10319] bridge_slave_0: entered allmulticast mode
[  692.557767][T10319] bridge_slave_0: entered promiscuous mode
[  692.637118][T10319] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.637262][T10319] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.637597][T10319] bridge_slave_1: entered allmulticast mode
[  692.686969][T10319] bridge_slave_1: entered promiscuous mode
[  692.938720][ T5810] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  692.944967][ T5810] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  692.947929][ T5810] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  692.947984][ T5810] em28xx 8-1:0.0: No AC97 audio processor
[  693.608433][ T5810] usb 8-1: USB disconnect, device number 4
[  693.650865][ T5810] em28xx 8-1:0.0: Disconnecting em28xx
[  693.964562][ T5810] em28xx 8-1:0.0: Freeing device
[  693.969193][T10319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.326876][T10319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  697.337651][T10319] team0: Port device team_slave_0 added
[  697.364681][T10319] team0: Port device team_slave_1 added
[  697.485010][ T5933] bridge_slave_1: left allmulticast mode
[  697.485042][ T5933] bridge_slave_1: left promiscuous mode
[  697.485288][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.573700][T10478] loop2: detected capacity change from 0 to 7
[  697.588664][ T5933] bridge_slave_0: left allmulticast mode
[  697.588696][ T5933] bridge_slave_0: left promiscuous mode
[  697.588972][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.594608][ T9378] Dev loop2: unable to read RDB block 7
[  697.594631][ T9378]  loop2: AHDI p2
[  697.594654][ T9378] loop2: partition table partially beyond EOD, truncated
[  697.666691][T10478] Dev loop2: unable to read RDB block 7
[  697.666717][T10478]  loop2: AHDI p2
[  697.666740][T10478] loop2: partition table partially beyond EOD, truncated
[  698.170326][T10481] loop5: detected capacity change from 0 to 7
[  698.188362][T10481] Dev loop5: unable to read RDB block 7
[  698.188638][T10481]  loop5: AHDI p2 p3
[  698.213525][T10481] loop5: partition table partially beyond EOD, truncated
[  698.573789][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  698.732249][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.732287][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.732313][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  698.732361][ T5881] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  698.732387][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.790259][ T5881] usb 7-1: config 0 descriptor??
[  699.224330][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224371][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224401][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224430][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224459][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224487][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224515][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224542][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.224570][ T5881] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  699.493103][ T5881] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  700.715364][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.715965][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.782802][ T5810] usb 7-1: reset high-speed USB device number 12 using dummy_hcd
[  700.949861][ T5881] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  701.064157][ T5880] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  701.097283][ T5881] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  701.097335][ T5881] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  701.097365][ T5881] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.097389][ T5881] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  701.097425][ T5881] usb 8-1: config 0 interface 0 has no altsetting 0
[  701.097461][ T5881] usb 8-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  701.097487][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.194658][ T5881] usb 8-1: config 0 descriptor??
[  701.210525][ T5880] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  701.210558][ T5880] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  701.210580][ T5880] usb 5-1: config 220 has no interface number 2
[  701.210743][ T5880] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  701.210777][ T5880] usb 5-1: config 220 interface 0 has no altsetting 0
[  701.210798][ T5880] usb 5-1: config 220 interface 76 has no altsetting 0
[  701.210827][ T5880] usb 5-1: config 220 interface 1 has no altsetting 0
[  701.265558][ T5880] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  701.265594][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.265617][ T5880] usb 5-1: Product: syz
[  701.265633][ T5880] usb 5-1: Manufacturer: syz
[  701.265649][ T5880] usb 5-1: SerialNumber: syz
[  701.395854][ T5881] usbhid 8-1:0.0: can't add hid device: -71
[  701.396109][ T5881] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  701.465534][ T5881] usb 8-1: USB disconnect, device number 5
[  701.573027][ T5880] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  701.573064][ T5880] uvcvideo 5-1:220.0: No valid video chain found.
[  701.573128][ T5880] usb 5-1: selecting invalid altsetting 0
[  701.623779][ T5880] usb 5-1: selecting invalid altsetting 0
[  701.623822][ T5880] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  701.655514][ T5880] usb 5-1: USB disconnect, device number 68
[  701.678809][ T9377] udevd[9377]: setting owner of /dev/bus/usb/005/068 to uid=0, gid=0 failed: No such file or directory
[  702.714441][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  702.780215][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  702.841331][ T5933] bond0 (unregistering): Released all slaves
[  703.051785][T10319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  703.051804][T10319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  703.051835][T10319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  703.295139][T10319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  703.295158][T10319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  703.295187][T10319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  703.816534][T10072] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  703.871422][T10540] loop2: detected capacity change from 0 to 7
[  703.881197][T10540] Dev loop2: unable to read RDB block 7
[  703.881228][T10540]  loop2: AHDI p2
[  703.881258][T10540] loop2: partition table partially beyond EOD, truncated
[  703.952091][T10072] usb 8-1: device descriptor read/64, error -71
[  704.076483][ T6894] usb 7-1: USB disconnect, device number 12
[  704.163010][T10542] loop5: detected capacity change from 0 to 7
[  704.164159][T10542] Dev loop5: unable to read RDB block 7
[  704.164188][T10542]  loop5: AHDI p2 p3
[  704.164217][T10542] loop5: partition table partially beyond EOD, truncated
[  704.197498][T10072] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  704.332603][T10072] usb 8-1: device descriptor read/64, error -71
[  704.438017][T10072] usb usb8-port1: attempt power cycle
[  704.786769][T10319] hsr_slave_0: entered promiscuous mode
[  704.794838][T10319] hsr_slave_1: entered promiscuous mode
[  704.795859][T10319] debugfs: 'hsr0' already exists in 'hsr'
[  704.795886][T10319] Cannot create hsr debugfs directory
[  704.797311][T10072] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  704.826609][T10072] usb 8-1: device descriptor read/8, error -71
[  705.083591][T10072] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  705.112823][T10072] usb 8-1: device descriptor read/8, error -71
[  705.216814][T10072] usb usb8-port1: unable to enumerate USB device
[  705.467822][T10568] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  705.531846][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'.
[  705.980536][T10587] netlink: 'syz.3.1197': attribute type 8 has an invalid length.
[  705.982454][T10585] loop5: detected capacity change from 0 to 7
[  705.990606][T10585] Dev loop5: unable to read RDB block 7
[  705.990706][T10585]  loop5: AHDI p2 p3
[  705.990802][T10585] loop5: partition table partially beyond EOD, truncated
[  706.032685][ T5933] hsr_slave_0: left promiscuous mode
[  706.072597][ T5933] hsr_slave_1: left promiscuous mode
[  706.080059][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  706.080185][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  706.162647][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  706.162678][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  706.464197][ T6894] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  706.470387][ T5933] veth1_macvtap: left promiscuous mode
[  706.470497][ T5933] veth0_macvtap: left promiscuous mode
[  706.470757][ T5933] veth1_vlan: left promiscuous mode
[  706.470940][ T5933] veth0_vlan: left promiscuous mode
[  706.638073][ T6894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.638123][ T6894] usb 7-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[  706.638151][ T6894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.654944][ T6894] usb 7-1: config 0 descriptor??
[  706.674451][ T5881] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  706.807676][ T5881] usb 8-1: device descriptor read/64, error -71
[  707.036414][ T5881] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  707.065847][ T6894] hid-generic 0003:18D1:503C.0017: item fetching failed at offset 5/7
[  707.066700][ T6894] hid-generic 0003:18D1:503C.0017: probe with driver hid-generic failed with error -22
[  707.160036][ T5881] usb 8-1: device descriptor read/64, error -71
[  707.263795][ T5781] usb 7-1: USB disconnect, device number 13
[  707.270643][ T5881] usb usb8-port1: attempt power cycle
[  707.598922][ T5881] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  707.618186][ T5881] usb 8-1: device descriptor read/8, error -71
[  707.845606][ T5881] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  707.865558][ T5881] usb 8-1: device descriptor read/8, error -71
[  707.983319][ T5881] usb usb8-port1: unable to enumerate USB device
[  708.245479][ T6894] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  708.419772][ T6894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  708.419812][ T6894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  708.419842][ T6894] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  708.419873][ T6894] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  708.419890][ T6894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.482729][ T6894] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  709.154649][ T5796] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  709.738880][ T6894] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12
[  709.766551][ T6894] usb 7-1: USB disconnect, device number 14
[  709.916938][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1206'.
[  711.077397][T10624] binder: 10622:10624 unknown command 0
[  711.077422][T10624] binder: 10622:10624 ioctl c0306201 200000000300 returned -22
[  711.079289][ T5933] team0 (unregistering): Port device team_slave_1 removed
[  711.738387][T10630] [U] 
[  711.738853][T10630] [U] K{�
[  711.742614][T10630] [U] �T �1��Š�F���Fˊ�`G�Jǘ�G���������O��/�MC�
[  711.774054][T10630] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-΂JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z'�TXLN�I�G�J����ݭ�P�~�7�!���"ب���(�5�OBܤ�̓J�
[  711.781684][T10630] [U] �K\&�}6�6�X�HX��Ե���.`�A�$�40|϶��9��ި����U��4��ĮVBZ��}�W�M�T���Q��ΦR�4��
[  711.814311][T10630] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ��SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<�     �ذ�Ү��`ұT��ޜ���;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI
���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�
OTPEM%F��EJ�A5��T_-X~�^AAۂҘ�Q��
[  711.856296][T10630] [U]         +�W�G?]��'A:    ��)�
����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿�%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ�;�Z����ۑ8!��\م�A�ʖ2��$е�­WI.��#��/BAI���`��4J��D�Y@�Z��GW�5˿B��ٜ�N�Y"VI2��
[  711.865706][T10630] [U] ܾ�4B`˗H�T�_K5�T�YJ���9��C�$BR�L�NUL��9W���|�G�"ʃ�%�ڶ�C�؝���Q��
 ��3��Q��N^HP*��$   �.�7Yӱ�2�
[  711.874318][T10630] [U] �?���H��*����3͝7�ɍ�^#Q�"0~���(�O�XL�B�,'V��=���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[  711.893119][T10630] [U] �S��G������GU��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B��%>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%
S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0��H�}C[/����PX^��O
[  711.914652][T10630] [U] �؛���(J�Л��M��XZ�;�����؝_����*3�3��5�\�XM��U��AK!AQ`��;FЕ�I+��VUH���M�J��Ʒ��Z�C��Z���)_ǟ�  ԑ�&�֡��A�XTO���_� ڼ�:���%��P���Cֲ�Y�+_�ܛ��}U�M��ƫC�!KJ�7пG��=B�
[  711.957676][T10630] [U] ٽ�F�%�XA��L�2R*G��VW��$��J     �A��F����+ؾ9̈́VI�֗�Kپ�1}_��
��%�R6��(]��/��ؐřYܺ��Hä���R G��RN/ܫ�#!�D����%���D��-{�$�VU��T���$:MTR�E�C1V�D~��];[�����SQ����(��E,X�8�"�
��G�D�ڵ2@T8���҃����T8.RC+�@�ʦ�P�U�
P����C���'ńYL�-SS1E?�7�O���^]����C�½H]�JKR]RKQ܆��ݣ޴OTC��X���4�N�  ��&����ڋ��@�:M7�~�+�W*���XM��>>��{Q���
_�՝LX8�U����{�Z��ؐ)��7?�RR;�C�R�Hײڣ����1�>)�Mă‰�T���(��Aϝ�}9�ڥ�J*Mќ�ġ�'L��Q    �DW��ظ=��|Q�   �Æ�W;5��Ž�!�DB�X`ɧ�/��E�`Ʀ\
[  711.968217][T10630] [U] M��X��"�{;�ե�٘_�O2��)�O��.2�W2ʲ��Y���X_  HPϱ�S�D����:]�{�����Ƚ
[  711.979107][T10630] [U] I,�>�Ӥ ��5�1��^1�N4�OǶ�'0�?֒I�9W.�_.�W�A���V��`)�Z���C6GIӹ�A��XL[����F�*��O�W)+��'\N�
[K@����2�Ǭ���P"^`���   ؿ
[  711.980803][T10630] [U] 22��Ʃ�۩X?0;3U�
[  712.002638][T10630] [U] ޜ�
ƍ�SOBX�8�W�4��(�~/���K�U��ԖOQ�E+�G�-Y�GY_
�>V�����3.H�ә]̈́�2��)�D�,        ��      �D~�D���+�W;A\�F
P��Ș|$��)�
KؐI���ɿK�YT^R���Ǚ���A=�#�ܜ       �Ϳ�AE��T�1��ݯ4K�.E"R�S|П�S���:��>P��R�"Z�ڭ���#P!�KY"�}��F�N84ܳ��Hޱ�O��S��̫%DLW�MƲ�
[  712.009470][T10630] [U] [�['XN�'�����,MR��/����1D=!D�X91B�
WǻR�LF���K̤Z��#�`̑L؛�˜��B~�M���
[  712.015462][T10630] [U] �L�>�сD+�D�����"5�ʍ�H3<���IR=F^�F�N��������V���D�OIO�:U�>�Y�
[  712.018748][T10630] [U] 'B�6V�20�ķǞ��׌�"T8�{9�FW��]���̩�
[  712.028369][T10630] [U] �72މ���U�C6����τI]8C��TۨQSK�Y��I��¹ �|V'�TV/��G�$[� 9KH`�"ܑ��}��[^=��0�]��%�̂T�����F�_V�4C���
[  712.028884][T10630] [U] �EC�
[  712.038172][T10630] [U] ���|���<��:^�3$7NK~�-�@��?��/MTL��۾�I�WȬ@G~T�{��P�+�$�JP|���I�RIӍPM� ��Y� ڔ8�T���V�����,�L�,�
[  712.107281][T10630] [U] �K�����)0���~ܳʪ�IP'�F�ҜZ��R���@B�]�5��{��ʼ�'�8�ƥF��UTQUD
ǩ�K;7ͪ0C[��Y���YC���ذM��L�8�T�͚�5���RX����W� X���OQHVI'8����L�
[  712.659002][ T5933] team0 (unregistering): Port device team_slave_0 removed
[  719.663146][T10663] openvswitch: netlink: ERSPAN option length err (len 13596, max 255).
[  720.279109][T10670] netlink: 'syz.7.1220': attribute type 5 has an invalid length.
[  720.279577][T10670] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1220'.
[  720.279963][T10668] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1220'.
[  720.293493][ T9831] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  720.504248][ T9831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  720.504305][ T9831] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  720.504332][ T9831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.687691][ T9831] usb 7-1: config 0 descriptor??
[  721.775730][ T9831] usb 7-1: can't set config #0, error -71
[  721.801281][ T9831] usb 7-1: USB disconnect, device number 15
[  722.726897][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'.
[  722.758327][T10319] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  722.846445][T10319] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  722.956275][T10319] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  722.985762][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'.
[  723.051025][T10319] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  725.105443][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'.
[  725.240581][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'.
[  725.240606][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'.
[  725.240633][T10735] netlink: 'syz.3.1235': attribute type 14 has an invalid length.
[  725.240650][T10735] netlink: 'syz.3.1235': attribute type 11 has an invalid length.
[  725.579174][T10319] 8021q: adding VLAN 0 to HW filter on device bond0
[  725.743780][T10319] 8021q: adding VLAN 0 to HW filter on device team0
[  725.763976][T10753] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  725.875972][T10756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  725.878895][T10755] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  725.881326][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.881474][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.140659][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.140868][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  726.418518][ T5880] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  726.542613][ T5880] usb 4-1: device descriptor read/64, error -71
[  727.573218][ T5880] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  727.704618][ T5880] usb 4-1: device descriptor read/64, error -71
[  727.810743][ T5880] usb usb4-port1: attempt power cycle
[  731.466073][ T5880] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  731.525910][ T5880] usb 4-1: device descriptor read/8, error -71
[  731.687515][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1245'.
[  731.985363][T10319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.102279][T10795] loop2: detected capacity change from 0 to 7
[  732.119879][T10795] Dev loop2: unable to read RDB block 7
[  732.119911][T10795]  loop2: AHDI p2 p3
[  732.119940][T10795] loop2: partition table partially beyond EOD, truncated
[  732.120196][T10795] loop2: p3 start 335544320 is beyond EOD, truncated
[  732.336676][T10802] loop5: detected capacity change from 0 to 7
[  732.337682][T10802] Dev loop5: unable to read RDB block 7
[  732.337712][T10802]  loop5: AHDI p2 p3
[  732.337740][T10802] loop5: partition table partially beyond EOD, truncated
[  732.428789][ T5880] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  732.450074][ T5880] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  732.450106][ T5880] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  732.450128][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  732.450181][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  732.450209][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  732.457812][ T5880] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  732.457846][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  732.457868][ T5880] usb 4-1: Product: syz
[  732.457884][ T5880] usb 4-1: Manufacturer: syz
[  732.583603][ T5880] cdc_wdm 4-1:1.0: skipping garbage
[  732.583625][ T5880] cdc_wdm 4-1:1.0: skipping garbage
[  732.616258][ T5880] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  732.616295][ T5880] cdc_wdm 4-1:1.0: Unknown control protocol
[  732.756655][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.757233][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.807757][   T43] usb 4-1: USB disconnect, device number 85
[  732.901608][T10810] cgroup2: Unknown parameter 'pids_localevents
'
[  733.287238][T10319] veth0_vlan: entered promiscuous mode
[  733.375861][T10319] veth1_vlan: entered promiscuous mode
[  735.345798][   T60] ==================================================================
[  735.345815][   T60] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[  735.345843][   T60] Read of size 8 at addr ffffc9000de63008 by task kworker/u9:0/60
[  735.345856][   T60] 
[  735.345868][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  735.345891][   T60] Tainted: [L]=SOFTLOCKUP
[  735.345896][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  735.345907][   T60] Workqueue: hci3 hci_rx_work
[  735.345933][   T60] Call Trace:
[  735.345939][   T60]  <TASK>
[  735.345946][   T60]  dump_stack_lvl+0xe8/0x150
[  735.345970][   T60]  print_report+0xba/0x230
[  735.345990][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  735.346007][   T60]  kasan_report+0x117/0x150
[  735.346023][   T60]  ? rt_spin_lock+0x20e/0x400
[  735.346040][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  735.346061][   T60]  __list_del_entry_valid_or_report+0xb5/0x190
[  735.346080][   T60]  kcov_remote_start+0x2af/0x710
[  735.346106][   T60]  hci_rx_work+0x10f/0x1030
[  735.346132][   T60]  ? process_scheduled_works+0xa0f/0x17a0
[  735.346151][   T60]  process_scheduled_works+0xaec/0x17a0
[  735.346180][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  735.346201][   T60]  ? assign_work+0x3d5/0x5e0
[  735.346220][   T60]  worker_thread+0xa50/0xfc0
[  735.346249][   T60]  kthread+0x388/0x470
[  735.346271][   T60]  ? __pfx_worker_thread+0x10/0x10
[  735.346289][   T60]  ? __pfx_kthread+0x10/0x10
[  735.346312][   T60]  ret_from_fork+0x51e/0xb90
[  735.346332][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  735.346351][   T60]  ? __switch_to+0xc7d/0x1400
[  735.346368][   T60]  ? __pfx_kthread+0x10/0x10
[  735.346390][   T60]  ret_from_fork_asm+0x1a/0x30
[  735.346420][   T60]  </TASK>
[  735.346425][   T60] 
[  735.346429][   T60] The buggy address belongs to a vmalloc virtual mapping
[  735.346442][   T60] Memory state around the buggy address:
[  735.346451][   T60]  ffffc9000de62f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  735.346461][   T60]  ffffc9000de62f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  735.346472][   T60] >ffffc9000de63000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  735.346480][   T60]                       ^
[  735.346488][   T60]  ffffc9000de63080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  735.346499][   T60]  ffffc9000de63100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  735.346507][   T60] ==================================================================
[  735.346524][   T60] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  735.346545][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  735.346565][   T60] Tainted: [L]=SOFTLOCKUP
[  735.346571][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  735.346581][   T60] Workqueue: hci3 hci_rx_work
[  735.346602][   T60] Call Trace:
[  735.346607][   T60]  <TASK>
[  735.346614][   T60]  vpanic+0x1e0/0x670
[  735.346637][   T60]  panic+0xc5/0xd0
[  735.346658][   T60]  ? __pfx_panic+0x10/0x10
[  735.346681][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  735.346698][   T60]  ? rcu_is_watching+0x15/0xb0
[  735.346724][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  735.346742][   T60]  check_panic_on_warn+0x89/0xb0
[  735.346756][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  735.346773][   T60]  end_report+0x6f/0x140
[  735.346789][   T60]  kasan_report+0x128/0x150
[  735.346804][   T60]  ? rt_spin_lock+0x20e/0x400
[  735.346820][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  735.346841][   T60]  __list_del_entry_valid_or_report+0xb5/0x190
[  735.346859][   T60]  kcov_remote_start+0x2af/0x710
[  735.346884][   T60]  hci_rx_work+0x10f/0x1030
[  735.346909][   T60]  ? process_scheduled_works+0xa0f/0x17a0
[  735.346928][   T60]  process_scheduled_works+0xaec/0x17a0
[  735.346956][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  735.346977][   T60]  ? assign_work+0x3d5/0x5e0
[  735.346996][   T60]  worker_thread+0xa50/0xfc0
[  735.347025][   T60]  kthread+0x388/0x470
[  735.347047][   T60]  ? __pfx_worker_thread+0x10/0x10
[  735.347065][   T60]  ? __pfx_kthread+0x10/0x10
[  735.347087][   T60]  ret_from_fork+0x51e/0xb90
[  735.347107][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  735.347126][   T60]  ? __switch_to+0xc7d/0x1400
[  735.347143][   T60]  ? __pfx_kthread+0x10/0x10
[  735.347165][   T60]  ret_from_fork_asm+0x1a/0x30
[  735.347195][   T60]  </TASK>
[  735.347394][   T60] Kernel Offset: disabled